Privacy
Last updated 31 August 2026
Second Pair provides an assistant that answers enquiries for small businesses. This explains what it collects, why, and how to have it removed.
You are talking to an assistant
When you message a business using Second Pair, the first reply is written by an AI assistant, not by a person. It says so at the start of every conversation.
The business sees everything the assistant says and everything you say, and can step in at any point. Ask for a person and the assistant stops and fetches one. It will never claim to be human.
What is collected
When you enquire through a business using Second Pair, we hold:
- Your name, and a phone number or email address if you give one
- What you have asked about, and anything you tell the assistant about it
- Photos you choose to attach
- The address where work is to happen, for trades that come to you
- Your appointments, and whether a deposit was paid
- The messages in your conversation
Only what you type. Nothing is bought in from anywhere else, and there is no tracking of you across other websites.
Why
To answer your enquiry, give you a price, book you in, and remind you before the appointment. That is the whole purpose. Your details are not used for marketing and are never sold or shared with anyone for their own purposes.
Who can see it
- The business you contacted. They can see the whole conversation. No other business on Second Pair can see any of it.
- Anthropic, whose model writes the replies. Conversations are not used to train it. Anthropic processes them in the United States, under the contractual terms the UK recognises for sending personal data abroad. That is the one point at which your conversation leaves the country, and it is worth saying so plainly rather than leaving it to be inferred.
- Supabase, where everything is stored — in London. Nothing held here leaves the United Kingdom.
- Stripe, if you pay a deposit. Card details go straight to Stripe and are never seen or held by Second Pair or by the business.
- Vercel, which runs the software itself, in London.
- Resend, if the business emails you — a confirmation, a reminder, or a reply.
- Twilio, if the business texts you.
- Meta, if you messaged the business on Instagram, Facebook or WhatsApp. That conversation is on Meta’s systems as well as ours, under their own privacy policy.
Nobody else. These are the only companies your details reach, and each of them only receives what it needs to do its part — Twilio gets a phone number and a message, not your appointment history.
Sub-processors
If you are a business using Second Pair, you are the controller of your own customers’ details and we process them on your behalf. Your own privacy notice has to name who else those details reach. This is that list, and you are welcome to reproduce it.
| Who | What they do | Where |
|---|---|---|
| Supabase | Stores everything: conversations, appointments, client records | United Kingdom (London) |
| Vercel | Runs the software | United Kingdom (London) |
| Anthropic | Writes the assistant’s replies. Not used to train the model | United States, under the UK’s approved transfer terms |
| Resend | Sends email: confirmations, reminders, password resets | United States, under the same terms |
| Twilio | Sends and receives text messages and calls, where connected | United States, under the same terms |
| Stripe | Takes deposits. Card details never reach us or the business | United States, under the same terms |
| Meta | Carries Instagram, Facebook and WhatsApp messages, where connected | United States, under their own terms with you |
Everything a business and its customers write is stored in London and stays in the United Kingdom. The companies above are the ones that act on it — sending a text, taking a payment, composing a reply — and each receives only what that job needs.
Two of them only apply once a business connects them. A business that has never connected a phone number has no dealings with Twilio; one that takes no deposits has none with Stripe. If you are writing your own notice, name the ones you actually use.
We will tell businesses before adding or replacing anyone on this list.
How long it is kept
Conversations and appointment records are kept while you are a customer of that business and for six years afterwards, which is how long UK businesses generally need to keep transaction records. Photos you attach are deleted when the business deletes the enquiry.
If a business closes its Second Pair account, everything of theirs is deleted.
Your rights
You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Ask the business you contacted, or write to us at the address below and we will pass it on and make sure it happens. We will respond within a month.
If you are not happy with how it is handled, you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
The chat window stores one identifier in your browser so your conversation survives a refresh. Nothing else. There is no advertising or analytics tracking.
Who is responsible
Second Pair is run as a sole trader in the United Kingdom, and is the data controller for what this notice describes. Each business using it is the controller for its own customers’ details; Second Pair processes those on their behalf.
Trading as second-pair.com.
13 Bugle Place, Newton Abbot, TQ12 1GZ, United Kingdom.
Contact
Written questions and requests to info@second-pair.com.
Second Pair has applied to register with the Information Commissioner’s Office as a data controller; the application reference is C2026410. The registration number will be shown here as soon as it is issued.
One line still to replace: the ICO application reference above becomes the registration number once it is issued.