Skip to main content
Reeve Consult

Free Guide · AI & automation

Would a chatbot help your customers get answers?

Review the questions customers ask, how a chatbot would answer them and when the conversation needs a person.

The short answer

Can an AI chatbot really help my small business, and what are the risks?

An AI chatbot is software that answers visitors' questions in conversation. It can handle repeat questions, collect enquiry details, offer booking links and cover out-of-hours messages. But it can be wrong, cannot use judgement or take responsibility, and needs approved content, testing, a route to a person and UK GDPR checks. It suits businesses with many repetitive questions. It does not replace staff.

Key facts

What to know before you read on

Who this is for. Owners and managers of UK small businesses who are weighing up a website or messaging chatbot and want a balanced view of the benefits, limits, costs and legal checks.

  • A rule-based chatbot follows fixed scripts. An AI chatbot uses a language model to write replies. Many products combine both.
  • The UK Government AI Playbook says it is difficult to build an AI system that gives 100% accurate outputs under all conditions.
  • You are responsible for what your chatbot tells customers. UK consumer law bars traders, and people acting for them, from giving false or misleading information.
  • If a chatbot handles personal data, UK GDPR applies: privacy information, a supplier contract and, often, an impact assessment.
  • The NCSC says prompt injection may never be fully fixed, so limit what a chatbot can access or do.

01

What is an AI chatbot, and how is it different from a rule-based one?

A chatbot is software that converses with website or messaging visitors. A rule-based chatbot follows fixed scripts and menus. An AI chatbot uses a language model to write replies. Many products combine both, using rules for sensitive steps and AI for open questions.

The difference changes what can go wrong. A scripted bot can only say what you wrote, so it is predictable but fails on unexpected questions. An AI bot copes with varied wording but can say things nobody wrote, which is useful and risky. AI chatbots are often set to answer from your own approved content, a method called retrieval augmented generation (RAG). The UK Government AI Playbook warns that RAG tools are susceptible to indirect prompt injection.

A hybrid design uses rules for bookings, payments and handover, and AI only for open questions. It gives you control where it matters most.

02

What can a chatbot genuinely do well for a small business?

Chatbots do five jobs reasonably well: answering repeated factual questions, collecting enquiry details, offering booking slots, covering out-of-hours messages and passing complex cases to a person with the conversation attached.

  • Frequently asked questions, where the answer is already on your site.
  • Lead qualification, asking the same few questions every time.
  • Booking, showing real availability and confirming slots.
  • Out-of-hours cover, saying when a person will reply.
  • Escalation, passing the chat and its history to a person.

Each works best when the answers come from content you wrote and keep current. Where the bot has no content, it should say it does not know. Left alone, an AI bot may guess.

03

What can a chatbot not do, or not do reliably?

A chatbot cannot take responsibility, use real judgement or be relied on to be accurate every time. It may invent facts, misread an upset customer or reveal information if manipulated. It should not give legal, medical or financial advice.

The UK Government AI Playbook says language models can create content that appears plausible but may be factually incorrect, and that it is difficult to produce an AI system giving 100% accurate outputs under all conditions. It adds that they are not domain experts and not a substitute for professional advice.

Typical weak points are prices, stock and policies it was never given or that have changed, complaints and distressing situations, ambiguous questions where it should ask rather than guess, and attempts to override its instructions.

04

Who is responsible if my chatbot gets something wrong?

You are. A chatbot speaks for your business, and UK consumer protection law bars traders, and people acting for them, from giving consumers false or misleading information. Check your supplier contract, but do not assume it removes your duties to customers.

The CMA's guidance on the unfair trading provisions of the Digital Markets, Competition and Consumers Act 2024, which apply from 6 April 2025, defines a trader as including a person acting on the trader's behalf. It says traders should not give consumers objectively false information and that factual claims should be supported by evidence. The guidance does not mention chatbots, so applying it to chatbot answers is our reading of the principle, not a ruling.

A notice saying "this chatbot may make mistakes" helps set expectations but does not replace getting the answers right.

05

How much does a chatbot cost?

Cost depends on the type of chatbot and who builds it, and prices change often, so this guide gives no figures. Expect some mix of subscription, usage charges, set-up, content preparation, testing, upkeep and staff time for handover.

The costs people overlook are usually ongoing: keeping content current, reading transcripts, fixing wrong answers and staffing the handover. Use a small, time-limited pilot to learn them before committing to a long contract.

06

Does my business actually need a chatbot?

Probably only if you get many repeated questions, enquiries outside staffed hours or slow first responses, and have accurate written content. If enquiries are few, complex or sensitive, a clearer website, FAQ page or contact form may do more.

Official figures show how common AI use has become, not whether it works. The ONS reported that in June 2026 about 28% of businesses with 0 to 9 employees and about 35% of those with 10 or more used at least one AI technology. Among adopters with 10 or more employees, only 10% described their use as extensive. Earlier ONS analysis found that difficulty identifying business use cases, cost and lack of expertise were the most commonly reported barriers. The ONS does not report chatbots separately.

07

What do UK data protection rules require when I use a chatbot?

If the chatbot handles personal data, UK GDPR applies. Tell people what you do with their data when you collect it, have a written contract with the supplier, collect only what you need, and consider a data protection impact assessment, because AI can count as innovative technology.

TopicWhat the ICO says
Privacy informationGive it at the time you collect data, in concise, transparent, intelligible and accessible language
Supplier contractA written contract covering documented instructions, confidentiality, security, sub-processors, help with people's rights, deletion or return, and audits
Impact assessmentInnovative technology, including AI, is on the ICO list. Two risk factors together usually mean you need one
Automated decisionsSolely automated decisions with a legal or similarly significant effect need safeguards, including genuine human review
Chatbot data protection checklistIn the download ↓
UK data protection points for a chatbot (ICO guidance, some of it under review)

ICO guidance is under review after the Data (Use and Access) Act 2025, and the automated decision guidance is still in draft, so check the latest versions. Collect only what you need, and ask visitors not to type sensitive details.

08

How should a chatbot hand over to a person?

A good handover is easy to trigger, fast and keeps context. Offer a visible "talk to a person" option, send the transcript to whoever picks up, set honest expectations on waiting time, and provide a callback or email option when nobody is available.

Hand over automatically when the conversation involves a complaint, a payment problem, health, legal or safety concerns, signs of distress or repeated misunderstanding.

The ICO's draft automated decision guidance says human intervention cannot be tokenistic: reviewers should be able to influence the outcome and have authority to change the decision. The AI Playbook likewise calls for meaningful human control.

09

How do I keep a chatbot accurate and safe after launch?

Limit it to approved content, test it with real and awkward questions before launch, review conversations regularly and fix wrong answers quickly. Give it the least access it needs, because people may try to manipulate it, and keep logs so problems can be traced.

The AI Playbook also calls for testing before deployment and monitoring afterwards for drift, bias and hallucinations. Review a sample of transcripts every week and update content whenever prices or policies change.

10

How should I trial a chatbot without much risk?

Run a narrow pilot. Choose one job, such as FAQs or booking, write the approved answers, test before launch, label the bot clearly with an easy route to a person, then review transcripts weekly and judge it on wrong answers, handovers and customer feedback.

  1. Pick one job

    Choose a task with plenty of repeat questions and low risk if an answer is slightly off.

  2. Write the approved answers

    Use your own policies and website content and name an owner for keeping it current.

  3. Label it and add handoverFull step in the download ↓
  4. Launch small and review weeklyFull step in the download ↓

Reeve Consult offers AI consultancy and web development. If you want a second opinion on whether a chatbot suits a workflow, you can contact us. No specific saving or result is promised.

The download

What's inside

A guide to repeated questions, enquiry capture, booking links, handovers, running costs and a limited first trial.

Define the chatbot’s job

Choose what it should answer from approved information.

Plan the handover

Give customers an easy route to a person with the conversation attached.

Compare the running costs

Include content preparation, testing, usage, upkeep and staff review.

Frequently asked questions

Straight answers

Answers to common questions about this topic.

What is a rule-based chatbot?

A rule-based chatbot follows scripts you write, using buttons, menus or keyword matching. It can only say what it was given, which makes it predictable and easy to check, but it fails on questions outside the script.

Can an AI chatbot replace my customer service staff?

Not safely. A chatbot can take repeat questions and out-of-hours messages, but it cannot use judgement, take responsibility or handle complaints well. Plan for a person to take over when it is unsure.

Do I have to tell customers they are talking to an AI?

You should. UK data protection law expects openness about how personal data is used, and consumer law prohibits misleading customers. Say it is an automated assistant. If you sell into the EU, check the latest EU AI Act transparency rules.

Is a chatbot GDPR compliant?

No product is compliant by itself. Compliance depends on how you use it: privacy information, a written contract with the supplier, limited data collection, sensible retention and an impact assessment where the risk calls for one.

Can a chatbot take bookings or payments?

It can offer booking slots and confirm bookings through a link or integration. Do not ask customers to type card details into a chat. Send them to a secure payment page run by your payment provider.

What happens to chat transcripts?

Transcripts that identify someone are personal data. Decide how long you keep them, who can read them and whether your supplier keeps copies or uses them for its own purposes. Put the answers in your contract and privacy notice.

How do I know if my chatbot is working?

Review a sample of real transcripts each week. Track wrong or unsupported answers, how often people ask for a person, complaints and customer feedback. A high number of chats alone does not show the bot is helping.

Sources

Where this comes from

Figures and rules on this page come from these sources. Check the original before relying on a number, as regulations and prices change.

  1. ONS: Artificial intelligence in UK businesses, 2023 to 2026 (released 20 July 2026) ↗June 2026 adoption by size band, 10% (10+ employees) and 17% (0 to 9 employees) of adopters reporting extensive use, the main barriers from earlier ONS analysis, and that the survey counts any reported use and does not report chatbots separately.
  2. GOV.UK: Artificial Intelligence Playbook for the UK Government (10 February 2025) ↗Plausible but incorrect output, the difficulty of 100% accuracy, retrieval augmented generation, prompt injection in RAG tools, testing and monitoring, and meaningful human control. Written for government departments.
  3. NCSC: Prompt injection is not SQL injection (it may be worse), 8 December 2025 ↗Prompt injection may never be fully fixed; reduce likelihood and impact, apply least privilege and monitor.
  4. ICO: When do we need to do a DPIA? ↗Innovative technology including AI on the ICO list, and two risk factors together usually indicating a DPIA. Page notes the guidance is under review.
  5. ICO: What needs to be included in the contract? (controllers and processors) ↗The Article 28 contract terms for a processor: instructions, confidentiality, security, sub-processors, assistance, deletion or return, and audits.
  6. ICO: The right to be informed ↗Privacy information must be given at the time data is collected, in concise, transparent, intelligible and easily accessible form.
  7. ICO: What are the ADM safeguards? (draft guidance, updated March 2026) ↗Safeguards for solely automated decisions with significant effects: information, genuine human intervention and the ability to contest. Marked as draft.
  8. CMA: Unfair commercial practices guidance (CMA207), 18 November 2025 ↗A trader includes a person acting on its behalf; traders should not give objectively false or misleading information; factual claims should be supported by evidence. Does not mention chatbots.

Free download

Keep this guide to hand

Review the questions customers ask, how a chatbot would answer them and when the conversation needs a person.

  • Define the chatbot’s job
  • Plan the handover
  • Compare the running costs

Always free. No card, no trial. Prefer to talk it through? Book a free call or email [email protected].

Free download

Free Guide: Would a chatbot help your customers get answers?

We use your details to send the download and, with your permission, relevant follow-up content. We never sell your data. Unsubscribe any time. See our privacy information.