Privacy Policy

1. Introduction

2. Who We Are

3. What Data We Collect

We may collect and process the following types of personal data:

4. How We Use Your Data

We use your data for the following purposes:

• To provide our services - Managing client projects, processing transactions, and delivering projects.
• To communicate with you - Responding to enquiries, support requests, marketing updates, and direct messages.
• To improve website performance - Analysing usage data to optimise user experience.
• To manage marketing - Sending updates you have consented to, following up on an AI roadmap you asked for, and measuring how our own campaigns perform. We do not run website retargeting or advertising trackers.
• To ensure compliance and security - Preventing fraud, managing legal obligations, and safeguarding data.

We rely on the following lawful bases for processing personal data:

• Contractual necessity - When data processing is required to fulfil a contract.
• Legitimate interests - Such as improving services, preventing fraud, maintaining security, and contacting people at incorporated businesses about services relevant to their role, and following up with people who ask for an AI roadmap. We have recorded a legitimate interests assessment for this outreach and for the AI roadmap tool.
• Consent - For newsletters, marketing to individuals and sole traders who have not asked us for anything, cookies, and analytics (users can opt out anytime).

B2B outreach. If we contact you about our services in a business context, we use your work contact details and public information about your role and company. We only contact people at incorporated businesses. If you were not already connected with David, every message we send to start or follow up a conversation tells you how to opt out, and the first one links to this policy. If you were already one of his LinkedIn connections, he may message you directly without that line, and a reply asking him to stop is all it takes. If you ask us to stop, we add you to a suppression list so you are never contacted again.

We use AI tools to help research your company's public information, to judge how relevant our services are likely to be to your role, and to draft messages. If you are one of David's LinkedIn connections, we may also search public sources for your name together with your company's name. We do that only to check we have the right company and that you are based in the UK, so you are not sent a message about a company you do not work for. A person reads and approves every message before it is sent, and no decision about you is made automatically.

The service providers who process this data on our instructions are a CRM, a workflow automation platform, email hosting, an email verification service, web search and page-reading services, and an AI model provider.

AI roadmap tool. We use what you give us to produce your AI roadmap, keep its link working and send it to you. If you used a work email, David may follow up now and then. If you used a personal webmail address, you get the roadmap email only, and we follow up only if you reply or book a call. The lead score decides whose follow-up comes first, and no decision about you is made automatically. The hashed IP address limits how many roadmaps one connection can request, which protects the tool from spam and abuse. You can ask us to stop at any time by replying to any email from us, and we record that you asked. Our lawful basis is legitimate interests.

5. How We Share Your Data

We may share your data with:

• Legal Authorities - If required by law, regulation, or legal process.
• Service Providers - Hosting and infrastructure (Vercel, whose request logs include IP addresses), bot protection on our contact form (Cloudflare Turnstile, which receives your IP address and browser signals to check you are not a bot, under Cloudflare's Turnstile Privacy Addendum), email delivery for contact form messages (Resend), error monitoring (Sentry), analytics providers (Google Analytics), and customer management tools (MS 365, Slack). Sentry receives technical reports about errors and page performance. It does not record your session, and we remove request contents, cookies and IP address headers from each report before it is sent.
• AI Roadmap Tool - Database hosting (Supabase, UK region), bot protection (Cloudflare Turnstile, which receives your IP address and browser signals to check you are not a bot, under Cloudflare's Turnstile Privacy Addendum) and email delivery (Resend). Roadmap requests, with your details and result, are normally emailed to David's mailbox (Google Workspace) as a notification.
• Business Transfers - If we sell or merge our business, your data may be transferred to the new entity.

We do not sell personal data to third parties.

6. International Data Transfers

Some of our service providers operate outside the UK, including in the EEA and the US. Where data is transferred internationally, we ensure adequate protection, including:

• Where a provider is certified under the UK-US data bridge, we rely on that. Otherwise we rely on the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses in the provider's data processing terms. Transfers to the EEA rely on the UK's adequacy regulations.
• UK GDPR-compliant measures for data protection.

7. Cookies & Tracking Technologies

Our website uses cookies and tracking technologies to enhance user experience and provide analytics.

You can manage your cookie preferences using our Cookie Consent Manager or disable cookies in your browser settings.

8. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy. Retention periods include:

• Client and contract data - Stored for up to 7 years for legal and financial record-keeping.
• Marketing data - Retained until you opt out.
• B2B outreach data - Deleted after 6 months without engagement, keeping only a minimal suppression record so we never contact you again after an opt-out.
• B2B outreach conversations - If you reply or we arrange a meeting, we keep the record while the conversation or working relationship continues, and review it at least once a year.
• AI roadmap data - AI roadmap answers and contact details are deleted automatically 24 months after you ask for the roadmap, by a check that runs every month. The notification emailed to David's mailbox is kept as a business record while we're in touch, and reviewed at least once a year.
• Workflow logs - Our workflow automation platform keeps a technical log of each run for up to 30 days, then deletes it automatically.
• Website analytics - Data is anonymised and stored for up to 24 months.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, contact us at: hello@agenticise.co.uk

You can also complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first, so please email hello@agenticise.co.uk. We acknowledge every complaint within 30 days.

10. Security Measures

We implement strict security controls to protect your data, including:

• Data encryption for sensitive information.
• Access controls to limit data exposure.
• Regular security audits to prevent unauthorised access.

11. Third-Party Links & External Websites

Our website may contain links to external websites. We are not responsible for their privacy practices and encourage users to review their privacy policies separately.

12. Changes to This Privacy Policy

We may update this policy periodically. Changes will be posted on this page with a revised “Last Updated” date.

13. Contact Us

For any privacy concerns or data requests, contact:

Interested in learning how AI automation can recover hours and unlock capacity while maintaining data privacy? Read our blog for insights on bespoke AI automation.