Privacy Policy
Your privacy and data protection rights
The Agent Bureau® ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 (DUAA), and other applicable UK data protection laws.
1. Who We Are
Data Controller: The Agent Bureau Ltd (trading as The Agent Bureau®)
Legal Entity: The Agent Bureau Ltd
Company Registration Number: 17309820
Registered in: England and Wales
Registered Office:
128 City Road, London, EC1V 2NX, United Kingdom
Email: enquiries@TheAgentBureau.co.uk
Telephone: +44 3300 242 670
Website: https://theagentbureau.co.uk
If you have any questions about this Privacy Policy or our data practices, please contact us using the details above.
2. Information We Collect
2.1 Personal Information You Provide
We may collect the following types of personal information:
- Contact Information: Name, email address, telephone number, postal address
- Business Information: Company name, job title, business address, industry sector
- Account Information: Username, password (encrypted), account preferences
- Payment Information: Billing address, payment card details (processed securely through third-party payment processors)
- Communication Data: Correspondence with us via email, phone, or online forms
- Marketing Preferences: Your preferences for receiving marketing communications
2.2 Information Collected Automatically
When you visit our website or use our services, we may automatically collect:
- Technical Data: IP address, browser type and version, device type, operating system
- Usage Data: Pages visited, time spent on pages, click patterns, referral sources
- Cookies and Similar Technologies: See our Cookie Policy section below
- Log Data: Server logs, error logs, access times
2.3 Information from Third Parties
We may receive personal information about you from third parties, including:
- Business partners and referral sources
- Publicly available sources (e.g., Companies House, LinkedIn)
- Service providers who assist us in providing our services
- Social media platforms (if you interact with us on social media)
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Service Provision
- To provide, maintain, and improve our AI agent services
- To process your service requests and manage your account
- To configure and deploy AI agents according to your requirements
- To provide customer support and respond to your enquiries
- To process payments and manage billing
- To send service-related communications (e.g., account updates, service notifications)
3.2 Business Operations
- To manage our business relationships with clients and partners
- To conduct business analytics and improve our services
- To prevent fraud and ensure security
- To comply with legal obligations and regulatory requirements
- To enforce our terms and conditions
3.3 Marketing and Communications
- To send you marketing communications (with your consent or where permitted by law)
- To inform you about new services, features, or updates
- To invite you to events, webinars, or partner programs
- To conduct market research and customer surveys
You can opt-out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
4. Legal Basis for Processing
Under UK GDPR and the Data (Use and Access) Act 2025, we must have a legal basis for processing your personal data. We rely on the following legal bases:
- Contractual Necessity: To perform our contract with you (e.g., providing AI agent services)
- Legitimate Interests and Recognised Legitimate Interests: For our business operations, fraud prevention, and service improvement, we rely on legitimate interests or recognised legitimate interests under the DUAA where applicable, ensuring that our interests do not override your rights and freedoms
- Consent: Where you have given clear consent (e.g., marketing communications)
- Legal Obligation: To comply with applicable laws and regulations
- Vital Interests: To protect your or another person's vital interests (rare circumstances)
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with the following parties:
5.1 Service Providers
We work with trusted third-party service providers who help us operate our business, including:
- Cloud hosting and infrastructure providers (with UK data residency)
- Payment processors
- Email service providers
- Analytics and marketing tools
- Customer support platforms
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
5.2 Business Partners
We may share limited information with business partners (e.g., referral partners) where necessary for legitimate business purposes, always in accordance with this Privacy Policy.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or regulatory authority, or to protect our rights, property, or safety, or that of our clients or others.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.
6. International Data Transfers and UK Data Residency
UK Data Residency Guarantee: We are committed to maintaining UK data residency for your personal data. Your data is stored and managed in UK data centres. AI processing may use approved international providers under UK GDPR–compliant safeguards (e.g., Standard Contractual Clauses, adequacy decisions).
In limited circumstances, we may transfer data outside the UK, but only:
- To countries with adequate data protection laws (as determined by the UK government)
- Using appropriate safeguards (e.g., Standard Contractual Clauses approved by the UK)
- With your explicit consent
- Where necessary for the performance of a contract with you
We will always ensure that any international transfers comply with UK GDPR requirements and provide adequate protection for your personal data.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security assessments and penetration testing
- Staff training on data protection
- Incident response procedures
- Regular backups and disaster recovery plans
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Our retention periods are based on:
- The nature of the data and the purpose for which it was collected
- Legal, regulatory, and contractual requirements
- The potential need to resolve disputes or enforce agreements
When data is no longer needed, we will securely delete or anonymise it in accordance with our data retention policies.
9. Your Data Protection Rights
Under UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025, you have the following rights:
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances.
Right to Data Portability
You can request transfer of your data to another service provider in a structured format.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
As an AI agent service provider, we recognise the importance of transparency and control over automated decision-making. You have specific rights regarding significant decisions made about you based solely on automated processing (including profiling):
- Right to be Informed: You have the right to be informed when a significant decision about you is made based solely on automated processing, including the logic involved and the significance and envisaged consequences of such processing
- Right to Make Representations: You have the right to make representations to challenge any automated decision that significantly affects you
- Right to Human Intervention: You have the right to obtain human intervention, express your point of view, and contest the decision
- Right to Review: You may request a review of any automated decision-making process that affects you
Note: Our AI agents are designed to support business operations and are typically used for administrative, operational, and analytical purposes. Where our AI agents make decisions that significantly affect individuals, we ensure appropriate safeguards and human oversight are in place.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at enquiries@TheAgentBureau.co.uk. We will respond to your request within one month (or up to three months for complex requests).
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with the law. Visit ico.org.uk for more information.
10. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience, analyse usage, and assist with marketing efforts.
Cookie Consent Under the Data (Use and Access) Act 2025: In accordance with the DUAA cookie consent reforms, explicit consent is no longer required for non-intrusive cookies that are essential for website functionality or provide basic statistical information. We deploy these cookies automatically to improve your experience and website functionality.
Types of cookies we use:
- Essential Cookies: Required for the website to function properly. These are deployed automatically and do not require consent.
- Functional Cookies: Remember your preferences and settings to enhance your experience. These are deployed automatically as non-intrusive cookies.
- Analytics Cookies: Help us understand how visitors use our website through basic statistical analysis. These non-intrusive analytics cookies are deployed automatically.
- Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These cookies require your explicit consent before deployment.
You can control cookies through your browser settings, including the ability to block or delete cookies. However, disabling essential or functional cookies may affect website functionality and your user experience.
For detailed information about our cookie usage, please refer to our Cookie Policy (available on our website) or contact us.
11. Children's Privacy
Our services are designed for businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email notification to registered users (for significant changes)
- Displaying a notice on our website
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
The Agent Bureau Ltd
(trading as The Agent Bureau®)
Registered Office:
128 City Road, London, EC1V 2NX, United Kingdom
Company Registration Number: 17309820
Registered in: England and Wales
Email: enquiries@TheAgentBureau.co.uk
Telephone: +44 3300 242 670
For data protection enquiries, you can also contact our Data Protection Officer (if appointed) at the same address or email address above.
This Privacy Policy is effective as of 09.07.2026 and complies with UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 (DUAA), and other applicable UK data protection legislation.