Privacy Policy

Last updated: 25 October 2026

1. Who we are

This Privacy Policy explains how Mustik Supply LTD ("Mustik Supply", "we", "us", "our") collects and uses personal data. We are a company registered in England & Wales, Company No. 17063689, with our registered address at 128 City Road, London, EC1V 2NX, United Kingdom.

If you have any questions about this policy or your personal data, contact us at info@mustiksupply.com or +44 7347 151211.

2. Our role

We provide AI assistants on WhatsApp to small businesses (our "Clients").

• As a data controller, we process personal data about our Clients, prospective Clients and people who contact us directly.
• As a data processor, we process personal data of our Clients' customers (for example, people who message a Client's business on WhatsApp) on behalf of, and under the instructions of, that Client. In that case the Client is the data controller, and its own privacy policy applies. Please contact the relevant business directly with questions about how it uses your data.

3. Personal data we collect

• Contact details: name, business name, email address, phone number.
• Business and account information: information about your business, services, prices and opening hours that you give us to set up an assistant.
• Communications: messages and emails you send us.
• Billing information: invoices and payment records (we do not store full card details).
• Message data processed for Clients: WhatsApp messages, names, phone numbers, appointment details and enquiry details sent by our Clients' customers.

4. How and why we use personal data

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we rely on the following lawful bases:

• Contract: to provide, set up and support our services for Clients.
• Legitimate interests: to respond to enquiries, improve our services, keep our systems secure and run our business.
• Legal obligation: to keep accounting and tax records and comply with the law.
• Consent: where we ask for it, for example for marketing emails. You can withdraw consent at any time.

5. Who we share data with

We do not sell personal data. We share it only with trusted service providers who help us run our services, such as:

• Meta Platforms (WhatsApp Business Platform), to send and receive WhatsApp messages;
• Anthropic (Claude AI models), to understand messages and generate replies;
• Google (Google Sheets and Google Calendar), to record enquiries and manage bookings;
• GitHub, to host this website;
• our server hosting provider in the UK/EU, to run our services and store data securely;
• accountants, professional advisers and authorities where required by law.

6. International transfers

Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep data

We keep personal data only as long as needed for the purposes above. Client account data is kept for the duration of our contract and up to 6 years afterwards for legal and accounting reasons. WhatsApp messages processed for Clients are kept for 90 days by default and then deleted, unless the Client instructs otherwise. All message data processed for a Client is deleted or returned when our contract with that Client ends.

8. Security

We use appropriate technical and organisational measures to protect personal data, including access controls and encrypted connections.

9. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent. To exercise these rights, contact us at info@mustiksupply.com. We will respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

10. Cookies

This website does not use cookies or tracking tools. Our website host may log basic technical information (such as IP address) for security purposes.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated.