Define the chatbot’s job
Choose what it should answer from approved information.
Free Guide · AI & automation
Review the questions customers ask, how a chatbot would answer them and when the conversation needs a person.
The short answer
An AI chatbot is software that answers visitors' questions in conversation. It can handle repeat questions, collect enquiry details, offer booking links and cover out-of-hours messages. But it can be wrong, cannot use judgement or take responsibility, and needs approved content, testing, a route to a person and UK GDPR checks. It suits businesses with many repetitive questions. It does not replace staff.
Key facts
Who this is for. Owners and managers of UK small businesses who are weighing up a website or messaging chatbot and want a balanced view of the benefits, limits, costs and legal checks.
01
A chatbot is software that converses with website or messaging visitors. A rule-based chatbot follows fixed scripts and menus. An AI chatbot uses a language model to write replies. Many products combine both, using rules for sensitive steps and AI for open questions.
The difference changes what can go wrong. A scripted bot can only say what you wrote, so it is predictable but fails on unexpected questions. An AI bot copes with varied wording but can say things nobody wrote, which is useful and risky. AI chatbots are often set to answer from your own approved content, a method called retrieval augmented generation (RAG). The UK Government AI Playbook warns that RAG tools are susceptible to indirect prompt injection.
A hybrid design uses rules for bookings, payments and handover, and AI only for open questions. It gives you control where it matters most.
02
Chatbots do five jobs reasonably well: answering repeated factual questions, collecting enquiry details, offering booking slots, covering out-of-hours messages and passing complex cases to a person with the conversation attached.
Each works best when the answers come from content you wrote and keep current. Where the bot has no content, it should say it does not know. Left alone, an AI bot may guess.
03
A chatbot cannot take responsibility, use real judgement or be relied on to be accurate every time. It may invent facts, misread an upset customer or reveal information if manipulated. It should not give legal, medical or financial advice.
The UK Government AI Playbook says language models can create content that appears plausible but may be factually incorrect, and that it is difficult to produce an AI system giving 100% accurate outputs under all conditions. It adds that they are not domain experts and not a substitute for professional advice.
Typical weak points are prices, stock and policies it was never given or that have changed, complaints and distressing situations, ambiguous questions where it should ask rather than guess, and attempts to override its instructions.
04
You are. A chatbot speaks for your business, and UK consumer protection law bars traders, and people acting for them, from giving consumers false or misleading information. Check your supplier contract, but do not assume it removes your duties to customers.
The CMA's guidance on the unfair trading provisions of the Digital Markets, Competition and Consumers Act 2024, which apply from 6 April 2025, defines a trader as including a person acting on the trader's behalf. It says traders should not give consumers objectively false information and that factual claims should be supported by evidence. The guidance does not mention chatbots, so applying it to chatbot answers is our reading of the principle, not a ruling.
A notice saying "this chatbot may make mistakes" helps set expectations but does not replace getting the answers right.
05
Cost depends on the type of chatbot and who builds it, and prices change often, so this guide gives no figures. Expect some mix of subscription, usage charges, set-up, content preparation, testing, upkeep and staff time for handover.
The costs people overlook are usually ongoing: keeping content current, reading transcripts, fixing wrong answers and staffing the handover. Use a small, time-limited pilot to learn them before committing to a long contract.
06
Probably only if you get many repeated questions, enquiries outside staffed hours or slow first responses, and have accurate written content. If enquiries are few, complex or sensitive, a clearer website, FAQ page or contact form may do more.
Official figures show how common AI use has become, not whether it works. The ONS reported that in June 2026 about 28% of businesses with 0 to 9 employees and about 35% of those with 10 or more used at least one AI technology. Among adopters with 10 or more employees, only 10% described their use as extensive. Earlier ONS analysis found that difficulty identifying business use cases, cost and lack of expertise were the most commonly reported barriers. The ONS does not report chatbots separately.
07
If the chatbot handles personal data, UK GDPR applies. Tell people what you do with their data when you collect it, have a written contract with the supplier, collect only what you need, and consider a data protection impact assessment, because AI can count as innovative technology.
| Topic | What the ICO says |
|---|---|
| Privacy information | Give it at the time you collect data, in concise, transparent, intelligible and accessible language |
| Supplier contract | A written contract covering documented instructions, confidentiality, security, sub-processors, help with people's rights, deletion or return, and audits |
| Impact assessment | Innovative technology, including AI, is on the ICO list. Two risk factors together usually mean you need one |
| Automated decisions | Solely automated decisions with a legal or similarly significant effect need safeguards, including genuine human review |
| Chatbot data protection checklist | In the download ↓ |
ICO guidance is under review after the Data (Use and Access) Act 2025, and the automated decision guidance is still in draft, so check the latest versions. Collect only what you need, and ask visitors not to type sensitive details.
08
A good handover is easy to trigger, fast and keeps context. Offer a visible "talk to a person" option, send the transcript to whoever picks up, set honest expectations on waiting time, and provide a callback or email option when nobody is available.
Hand over automatically when the conversation involves a complaint, a payment problem, health, legal or safety concerns, signs of distress or repeated misunderstanding.
The ICO's draft automated decision guidance says human intervention cannot be tokenistic: reviewers should be able to influence the outcome and have authority to change the decision. The AI Playbook likewise calls for meaningful human control.
09
Limit it to approved content, test it with real and awkward questions before launch, review conversations regularly and fix wrong answers quickly. Give it the least access it needs, because people may try to manipulate it, and keep logs so problems can be traced.
The AI Playbook also calls for testing before deployment and monitoring afterwards for drift, bias and hallucinations. Review a sample of transcripts every week and update content whenever prices or policies change.
10
Run a narrow pilot. Choose one job, such as FAQs or booking, write the approved answers, test before launch, label the bot clearly with an easy route to a person, then review transcripts weekly and judge it on wrong answers, handovers and customer feedback.
Choose a task with plenty of repeat questions and low risk if an answer is slightly off.
Use your own policies and website content and name an owner for keeping it current.
Reeve Consult offers AI consultancy and web development. If you want a second opinion on whether a chatbot suits a workflow, you can contact us. No specific saving or result is promised.
The download
A guide to repeated questions, enquiry capture, booking links, handovers, running costs and a limited first trial.
Choose what it should answer from approved information.
Give customers an easy route to a person with the conversation attached.
Include content preparation, testing, usage, upkeep and staff review.
Frequently asked questions
Answers to common questions about this topic.
A rule-based chatbot follows scripts you write, using buttons, menus or keyword matching. It can only say what it was given, which makes it predictable and easy to check, but it fails on questions outside the script.
Not safely. A chatbot can take repeat questions and out-of-hours messages, but it cannot use judgement, take responsibility or handle complaints well. Plan for a person to take over when it is unsure.
You should. UK data protection law expects openness about how personal data is used, and consumer law prohibits misleading customers. Say it is an automated assistant. If you sell into the EU, check the latest EU AI Act transparency rules.
No product is compliant by itself. Compliance depends on how you use it: privacy information, a written contract with the supplier, limited data collection, sensible retention and an impact assessment where the risk calls for one.
It can offer booking slots and confirm bookings through a link or integration. Do not ask customers to type card details into a chat. Send them to a secure payment page run by your payment provider.
Transcripts that identify someone are personal data. Decide how long you keep them, who can read them and whether your supplier keeps copies or uses them for its own purposes. Put the answers in your contract and privacy notice.
Review a sample of real transcripts each week. Track wrong or unsupported answers, how often people ask for a person, complaints and customer feedback. A high number of chats alone does not show the bot is helping.
Sources
Figures and rules on this page come from these sources. Check the original before relying on a number, as regulations and prices change.
Free download
Review the questions customers ask, how a chatbot would answer them and when the conversation needs a person.
Always free. No card, no trial. Prefer to talk it through? Book a free call or email [email protected].
Keep reading
Understand AI, automation and agents, then choose a task to trial with clear rules and someone checking the result.
Get the guide ↗Plan acknowledgements, qualifying questions, a limited follow-up sequence and booking, with a person responsible for the conversation.
Get the guide ↗List the work your team repeats, assess the risks and estimate the benefit after checking time and tool costs.
Get the guide ↗