Privacy Policy

Who we are

The data controller is AGI Automations Ltd (company no. 16553679), registered office 14 Aldbourne Avenue, Liverpool, L25 6JE.

For any question about this policy or your data, email [email protected].

What we collect

• Enquiry and booking details — your name, work email, firm name, role and anything you send us by email.
• Correspondence — emails and call notes when you contact us or we work together.
• Engagement data — information about your firm's operations that you share during a Foundation Session or build. This is governed by the engagement agreement and, where we process personal data on your behalf, a data processing agreement under UK GDPR Article 28.
• Usage data — pages visited and device information, collected only if you accept analytics cookies. See the Cookie Policy.

Why we use it, and our lawful basis

• To reply to enquiries and arrange sessions — legitimate interests, or steps prior to entering a contract.
• To deliver engagements and invoice for them — contract.
• To keep accounting and tax records — legal obligation.
• To understand how the site is used, through anonymised traffic statistics — legitimate interests.
• To send occasional updates to people who have asked for them — consent. Every email includes an unsubscribe link.

We do not sell personal data, and we do not use it for automated decision-making that has a legal or similarly significant effect on you.

Who we share it with

We use a small number of service providers who process data on our behalf under contract:

• Website hosting — Cloudflare
• Email and calendar — Microsoft 365 (Outlook)
• CRM — Notion
• Analytics — Cloudflare, which records anonymised traffic statistics without cookies
• Accounting — our accountant and accounting software provider

We may also disclose data where required by law, or to professional advisers such as our accountant or solicitor.

International transfers

Some providers store data outside the UK. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Enquiries that do not lead to work — 24 months from last contact.
• Client and engagement records — six years after the engagement ends, for accounting and legal claims.

Your rights

You have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email us. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it first.

Security

Access to personal data is limited to the people who need it, protected by multi-factor authentication, and held on providers with recognised security certifications.

Changes

We will update this page when our practices change. The date at the top shows the current version.