Meta Comms

Data processing terms

Last updated 6 October 2026

These terms form part of our Terms of service. They apply only where Meta Communications Ltd ("we") processes personal data on behalf of a business customer ("you") through Meta Media, as required by Article 28 of the UK GDPR. You are the controller of that data and we are your processor.

1. What we process

  • Subject matter and purpose: writing, voicing, storing and providing your phone messages, and the business details used to write them.
  • Nature: storage, AI-assisted writing and speech generation, retrieval and deletion.
  • Types of data: names, phone numbers, email and postal addresses and any other personal details you include in scripts, business details or uploaded audio.
  • Data subjects: your staff and other people named or contactable in your messages.
  • Duration: while you have an account, plus any export period after it closes.

2. Our commitments

  • We process the data only on your documented instructions — using the service is your instruction — unless the law requires otherwise, in which case we'll tell you if we legally can.
  • Anyone at Meta Comms with access is bound by confidentiality.
  • We take appropriate technical and organisational security measures, including access controls so each customer only sees their own data.
  • We help you, where reasonable, to respond to people exercising their data rights, and with security, breach notification and data protection impact assessments.
  • We tell you without undue delay after becoming aware of a personal data breach affecting your data.
  • We make available the information reasonably needed to show we meet these terms, and allow proportionate audits on reasonable notice, at your cost unless the audit reveals a material breach by us.

3. Sub-processors

You give general authorisation for the sub-processors listed in our privacy policy. We'll give at least 30 days' notice by email before adding or replacing one. You can object on reasonable data protection grounds; if we can't resolve it, you can end the affected service. We'll put data protection terms in place with each sub-processor that are no less protective than these.

4. International transfers

Where a sub-processor handles data outside the UK, we'll rely on a lawful transfer mechanism such as UK adequacy regulations or the UK International Data Transfer Addendum.

5. At the end

When the service ends, on your request we'll return your messages for export within 30 days and then delete your personal data, unless the law requires us to keep it.

Contact

Email hello@meta-comms.co.uk.