GDPR Compliance

Last updated: March 31, 2025

1. Introduction

At No More Calls, we are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This page explains how we process personal data in accordance with GDPR requirements and outlines your rights under this regulation.

2. Data Controller Information

No More Calls acts as the data controller for personal information collected through our service. You can contact our Data Protection Officer at:

Email: dpo@nomorecalls.com
Address: No More Calls, 123 Main Street, London, UK

3. Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right to Access: You can request a copy of your personal data.
  • Right to Rectification: You can request corrections to your personal data.
  • Right to Erasure: You can request deletion of your personal data (“right to be forgotten”).
  • Right to Restrict Processing: You can request limits on how we use your data.
  • Right to Data Portability: You can request a copy of your data in a machine-readable format.
  • Right to Object: You can object to certain types of processing.
  • Rights Related to Automated Decision Making: You can request human intervention in automated decisions.

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you explicitly agree to the processing of your data.
  • Contract: When processing is necessary for the performance of a contract with you.
  • Legal Obligation: When processing is required to comply with the law.
  • Legitimate Interests: When processing is necessary for our legitimate business interests.

5. Data Processing Activities

We process personal data for the following purposes:

  • Providing and maintaining our call screening service
  • Processing payments and subscriptions
  • Communicating with users about service updates
  • Analyzing service usage to improve features
  • Preventing fraud and ensuring security
  • Complying with legal obligations

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymized.

7. International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place through:

  • Standard Contractual Clauses approved by the EU Commission
  • Binding Corporate Rules for transfers within our group
  • Adequacy decisions issued by the EU Commission
  • Other legally approved mechanisms that ensure adequate protection

8. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data
  • Regular security assessments
  • Access controls and authentication
  • Data backup and recovery procedures
  • Staff training on data protection
  • Incident response plans

9. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) when using new technologies or when processing is likely to result in a high risk to the rights and freedoms of individuals.

10. Exercising Your Rights

To exercise any of your rights under GDPR, please contact our Data Protection Officer using the contact information provided above. We will respond to your request within one month. This period may be extended by two further months if necessary, taking into account the complexity and number of requests.

11. Complaints

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

12. Updates to This Policy

We may update this GDPR compliance information from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will notify you of any material changes through our service or by other means.

13. Contact Us

For any questions about our GDPR compliance or to exercise your rights, please contact our Data Protection Officer at:

Email: dpo@nomorecalls.com
Address: No More Calls, 123 Main Street, London, UK