One360AI

Legal

UK Privacy Policy

Effective Date: 5 October 2026

One360AI LLC ("Company", "we", "us", or "our") is committed to protecting the privacy and personal data of our users, prospective leads, and client contacts in the United Kingdom. This Privacy Policy sets out how we collect, use, store, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller & Contact Information

  • Data Controller: One360AI LLC is the Data Controller for information collected regarding our registered subscribers and website visitors.
  • Data Processor: One360AI LLC acts as a Data Processor on behalf of our business clients (Estate Agents, Lettings Agencies, Commercial Property Brokers) when processing lead data uploaded to or generated within the platform.
  • Data Protection Contact: privacy@one360ai.com

2. Information We Collect

  • Account & Billing Information: Name, estate agency or business name, office address, email address, phone number, and payment details.
  • Platform & Lead Data: Prospective buyer, seller, landlord, and tenant details (names, phone numbers, email addresses, property preferences, move timelines, financial readiness) processed on behalf of our subscribers.
  • Communications & Technical Data: AI voice call transcripts, SMS logs, web chat messages, IP addresses, browser types, device identifiers, and system logs.

3. Lawful Bases for Processing (UK GDPR Article 6)

  • Contract Performance: To perform our contractual duties, provide the One360AI platform and its engines, manage accounts, and process subscription payments.
  • Legitimate Interests: To maintain system security, prevent fraud, and improve platform functionality.
  • Consent: Where explicit consent has been provided (for example, subscribing to marketing communications or opting in to automated SMS updates).
  • Legal Obligation: To comply with statutory UK financial reporting, regulatory duties, and law enforcement requests.

4. Direct Marketing & PECR Compliance (SMS, Voice & Email)

  • Explicit Opt-In: In accordance with PECR and UK marketing rules, automated messaging, voice AI, and promotional communications are only sent to individuals who have provided valid consent, or where a soft opt-in applies under an active customer relationship.
  • Mobile Consent Non-Sharing: Text messaging opt-in data and consent will NOT be shared, rented, sold, or traded with third parties or affiliates for marketing purposes under any circumstances.
  • Opt-Out (STOP/HELP): SMS recipients may opt out at any time by replying STOP to any message. Users may also reply HELP for support or contact support@one360ai.com. Standard network message and data rates may apply.

5. Service Providers & International Transfers

We do not sell personal data. We share data only with service providers necessary to operate the platform:

  • Telecommunications carriers and messaging providers: to route voice calls and SMS messages across mobile networks.
  • Cloud infrastructure and database providers: for secure hosting and computing, which may be located outside the United Kingdom.
  • AI and CRM service providers: to deliver the automated conversations and records our platform provides.
  • Payment processors: for recurring billing.
  • International Transfers: Our service providers may process personal data outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

6. Your Legal Rights Under UK Law

Under the UK GDPR, individuals in the UK have the following rights:

  • Right of Access (Subject Access Request): Request copies of your personal data.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, subject to statutory retention limits.
  • Right to Restrict or Object to Processing: Object to direct marketing or to processing based on legitimate interests.
  • Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
  • Right to Complain: You may lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.