Santa Calls · Last updated: 23 October 2026
The short version
This page explains how we look after information. Ask a grown-up to read it with you.
We only know your first name and the things your grown-up told us. We record your call so we can check it went well and that you're safe. We don't share what you say with anyone, unless we're worried you might not be safe. Then we would tell people whose job is to help keep children safe. After 30 days, we delete the recording.
Santa Calls is provided by EZ AI Solutions Ltd, trading as EZ AI Agency, a company registered in England and Wales (company number 16046837). Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We are the "controller" of your personal data, which means we decide how it is used and we are responsible for looking after it. We are registered with the Information Commissioner's Office (ICO), registration reference ZB931641.
Questions about your data? Email [email protected].
We ask you not to give us surnames, addresses, school names, health information or anything sad or sensitive. Father Christmas will never ask your child for these.
Data protection law says we need a lawful reason (a "lawful basis") for each way we use your data. Here they are:
| What we do | Our lawful basis |
|---|---|
| Take your booking and payment, and send confirmations and reminders | Contract: we need it to provide the service you've bought |
| Make the call, using your child's details so Father Christmas can personalise it | Contract |
| Record and transcribe calls, check call quality and deal with complaints or refunds | Legitimate interests: making sure the service works properly and fairly |
| Review calls to keep children safe, and contact the police or children's services if we believe a child may be at risk | Legitimate interests, and vital interests if a child is in immediate danger |
| Keep a "do not call" record if someone asks us to stop calling | Legitimate interests: respecting that request |
| Run the "Try Me Now" demo | Legitimate interests: answering your questions about the service |
| Keep business and tax records | Legal obligation |
| Send you news and offers, such as a reminder when bookings open next year | Consent: only if you tick the box to say yes. You can unsubscribe at any time using the link in any email. |
| Understand how people use our website, using Google Analytics | Consent: only if you accept analytics cookies (see section 11) |
We do not use your data to make automated decisions that have legal or similarly significant effects on you. The AI creates Father Christmas's side of the conversation; it does not make decisions about you or your child.
Children deserve extra protection, so we design Santa Calls with their best interests first:
If a child mentions something sensitive during a call, such as a health matter, we do not use it for anything, except where we need to act to keep a child safe. UK data protection law allows us to use this kind of information to safeguard children.
We never sell your data. We share it only with the suppliers who help us run Santa Calls, under contracts that limit how they can use it:
| Supplier | What they do for us | Where |
|---|---|---|
| HighLevel | Our booking, calendar, customer records, email, text message and AI voice platform. HighLevel uses its own suppliers for hosting (Google Cloud, Amazon Web Services), calls and messages (Twilio, Mailgun) and AI (including OpenAI and Retell AI). | USA |
| Stripe | Takes your payment securely | USA and EU |
| Our email hosting provider | Hosts our [email protected] inbox | Ask us for details |
| Google (Google Analytics) | Website usage statistics, only if you accept analytics cookies | USA |
We may also share information:
Schools and parents' associations: if you used a school's elf code, we may tell the school or association how many times its code was used. We never tell them who used it, and we never share your or your child's details with them.
Some of our suppliers store or access data in the USA, and HighLevel's support team may access it from India. When data leaves the UK, we make sure it is protected by one of the safeguards UK law requires: the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") or the UK Addendum to the EU Standard Contractual Clauses. Email us if you'd like more detail.
| Information | How long |
|---|---|
| Call recordings and transcripts | 30 days after the call |
| Your child's details from the booking form | 30 days after the call, or after our last call attempt |
| "Try Me Now" demo recordings | 30 days |
| Booking and payment records | 6 years, because tax law requires it |
| Emails and complaints | 12 months after we've resolved them |
| "Do not call" record | The phone number only, for as long as we need to honour the request |
If there is a safeguarding concern or an open complaint, we keep the relevant recording and notes for as long as needed to deal with it, and review them at least once a year.
We use suppliers with strong security, limit who can access your data to the people who need it, and protect our accounts with secure passwords and two-step sign-in. If something ever goes wrong with your data that puts you at risk, we will tell you and the ICO as the law requires.
You have the right to:
As a parent or carer, you can use these rights on your child's behalf. To make a request, email [email protected]. It's free, and we will reply within one month. We may ask you to confirm your identity first.
If you're unhappy with how we've handled your or your child's data, please email us first at [email protected]. We will acknowledge your complaint within 30 days and respond as quickly as we can.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Cookies are small files saved by your browser. We use two kinds:
We do not use advertising cookies. You can change your mind at any time using our cookie banner or by clearing your browser's cookies.
We may update this policy from time to time. We will post the new version here with a new "last updated" date, and tell you by email if the changes affect a booking you've already made.