PERSONAL DATA POLICY

Effective: Last updated 11 October 2025

1. Who NLM are

Next Level AI (“NLM”). NLM is the data controller for personal data collected on the NLM website, forms, and through our AI agents and phone systems.

2. What NLM collects

2.1 Personal (including also business) contact details (including but not limited to: name, email, phone, address).

2.2 Booking/transaction information (including but not limited to: service requested, appointments and calendar events; billing — processed by NLM’s billing provider).

2.3 Call data created by NLM service (including but not limited to: call metadata, recordings, and transcriptions where enabled — processed by NLM’s voice/AI provider).

2.4 Technical data (including but not limited to: IP, device, cookies — see Cookies).

2.5 In some cases, personal data may be provided to NLM by NLM’s business clients through their CRM for the purposes above.

3. Why NLM uses personal data

3.1 To provide and support NLM services, respond to enquiries, and manage accounts (contract/legitimate interests).

3.2 To improve quality, safety, and performance (e.g., QA on recordings where enabled) (legitimate interests — e.g., service quality, security, abuse/fraud prevention).

3.3 To send service messages and important updates (legitimate interests/legal obligation).

3.4 To send optional marketing where you agree (consent/legitimate interests).

3.5 To meet compliance duties (legal obligation).

3.6 Where automation supports decisions, a human is involved, and a person can request human review.

4. Sharing and International transfers

NLM uses trusted service providers (e.g., hosting, telephony/voice AI, CRM, email, analytics, payment processing) who act under contract and only on NLM instructions. Some providers may process data outside the state or legal region where the personal data originated. When NLM transfers data, NLM uses safeguards required by applicable legal requirements (for example, standard contractual clauses or equivalent); a person can contact NLM to obtain information about those safeguards.

For payments made via Stripe, Klarna, Revolut, or card via GoHighLevel, these providers act as independent controllers for their own processing and publish their own privacy notices.

5. How long NLM keeps data

NLM keeps personal data only as long as needed to provide and support the Service and to run NLM, then deletes or anonymises it.

For call recordings/transcripts, the Client sets the retention (where enabled) and NLM follows that setting; if none is set, NLM applies its own retention in line with legal requirements. Routine backups roll off on a cycle.

6. Statutory/contractual requirement

Some information is necessary to enter into or perform the service (e.g.: destination, phone number, routing email). If it is not provided, NLM may be unable to deliver the service.

7. Legal rights

A person can: access, correct, erase, restrict or object to processing, and request portability. Where NLM relies on consent, a person can withdraw it at any time. A person can also complain to the data protection authority.

8. Automated decisions

NLM does not make decisions with legal or similarly significant effects based solely on automated processing. Automation supports call routing and scheduling suggestions; significant decisions are not made by automation alone.

9. Cookies & analytics

NLM uses necessary cookies to run the site and optional analytics/advertising cookies with a person’s consent. A person can change cookie settings in a browser.

10. Contact

Questions or requests: [email protected].
(NLM has no person for data-protection purposes; if that changes, this notice will be updated.)

11. Updates

NLM may update this policy. NLM will post changes here with a new “Effective” date.