™Updated 19 September 2026.
Who is responsible
The venue using the robot is the controller of the data collected there. BodyBot Ltd processes that data for the venue as its processor, under a written agreement. BodyBot Ltd, 35 Alleyne Road, Birmingham B24 8EJ, company number 17076857, bot@bodybot.co.uk.
What the robots collect
The voice and text of conversations with the robot, task logs, and the venue’s own content such as menus and opening hours. Cameras and sensors are used for navigation and to avoid collisions. We do not store identifiable images or video unless the venue has asked for a feature that needs them and has agreed the lawful basis and the notices with us in writing.
Why
To answer questions, carry out tasks, keep the robots working safely, and improve the venue’s knowledge base from the questions people actually ask.
Where it is kept
On our dedicated server in London, encrypted in transit and at rest, with access control and logging.
Service providers
Speech recognition, conversation and text to speech are provided through BodyBot AI. Before deployment, we identify in the venue’s written data-processing agreement any external service providers used for hosting, speech processing or conversation features. Any transfer outside the UK is made under UK GDPR transfer safeguards. Venues get 30 days’ notice of any new sub-processor.
How long
Interaction logs are kept for the period agreed with the venue and then deleted. Anonymised usage statistics may be kept longer.
Your rights
Ask the venue first, as it is the controller. You can also write to bot@bodybot.co.uk and we will help the venue respond. You can complain to the Information Commissioner’s Office at ico.org.uk.