Privacy Policy

Last updated: 22 January 2026

This Privacy Policy explains in detail how Activate & Barrel ("Activate & Barrel", "A&B", "we", "us", or "our") collects, uses, stores, and protects personal data when you use our website and platform. We are committed to protecting your privacy and handling data responsibly in accordance with UK GDPR and EU GDPR.

1. Who We Are

Activate & Barrel is a UK-based software company providing an AI-native sales engagement platform for B2B teams. For the purposes of data protection law, we act as:

  • Data Controller for account, billing, and website data

  • Data Processor for prospect, contact, and communication data uploaded or connected by customers

2. Scope of This Policy

This policy applies to:

  • Visitors to our website

  • Trial and paying users of the platform

  • Customer data processed within Activate & Barrel workspaces

It does not cover third-party websites or services you access via integrations.

3. Data We Collect

We may collect and process the following categories of data.

Account and Identity Data

  • Name

  • Work email address

  • Company name

  • Role or job title

  • Login credentials (hashed)

Billing and Commercial Data

  • Billing contact details

  • Subscription plan information

  • Payment status and invoices

Platform Usage Data

  • Feature usage and interaction logs

  • Message drafting and approval actions

  • Timestamps and activity history

Connected Communication Data

  • Emails, LinkedIn messages, WhatsApp messages, and related metadata

  • Conversation history and timestamps

  • Prospect and company records synced or uploaded by you

Technical and Device Data

  • IP address

  • Browser type and version

  • Operating system

  • Session identifiers

  • Cookies and similar technologies

4. How We Use Personal Data

We use personal data to:

  • Provide, operate, and maintain the platform

  • Generate AI-assisted drafts, prioritisation, and insights

  • Enable multi-channel communication from a unified inbox

  • Authenticate users and manage accounts

  • Process payments and manage subscriptions

  • Monitor usage for security, abuse prevention, and performance

  • Improve product functionality and user experience

  • Communicate service updates, support messages, and legal notices

5. Legal Bases for Processing

We process personal data under the following legal bases:

  • Contractual necessity: to deliver the service you signed up for

  • Legitimate interests: to improve the platform, ensure security, and prevent misuse

  • Consent: where explicitly required, such as certain cookies or marketing communications

  • Legal obligation: where required by law or regulation

6. AI and Automated Processing

Activate & Barrel uses AI to assist with prioritisation, drafting, and analysis. This may involve processing:

  • Prospect context

  • Conversation history

  • Company and role information

  • User-provided knowledge base content

Important safeguards:

  • AI output is advisory only

  • Outbound messages always require human review and approval

  • Data is processed within your workspace and tenant

  • We do not use your private data to train public or shared AI models

No fully automated decision-making with legal or similarly significant effects is performed.

7. Data Sharing and Subprocessors

We may share personal data with trusted subprocessors solely to operate the service, including:

  • Cloud hosting and infrastructure providers

  • Database and monitoring providers

  • AI service providers

  • Payment processors

  • Meeting intelligence providers you explicitly connect

All subprocessors are contractually bound to protect data and act only on our instructions.

We do not sell personal data.

8. International Data Transfers

Some subprocessors may process data outside the UK or EU. Where this occurs, we apply appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

9. Data Retention

We retain personal data:

  • For as long as your account is active

  • As necessary to provide the service

  • As required to comply with legal, tax, or regulatory obligations

Upon account termination, data is deleted or anonymised within reasonable timeframes unless retention is legally required.

10. Data Security

We implement appropriate technical and organisational measures, including:

  • Encryption in transit and at rest

  • Role-based access controls

  • Tenant-level data isolation

  • Audit logs and monitoring

  • Secure development and deployment practices

While no system is completely secure, we take reasonable steps to protect your data.

11. Your Data Protection Rights

Depending on your location, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent where applicable

Requests can be made by contacting us using the details below.

12. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication and session management

  • Security

  • Analytics and performance monitoring

You can manage cookies through your browser settings.

13. Children’s Data

Activate & Barrel is not intended for individuals under the age of 18. We do not knowingly collect data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or website.

15. Contact and Complaints

For privacy-related questions or requests:

privacy@activateandbarrel.com

If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with your local data protection authority.