Privacy notice
This notice explains how Agpo Limited collects and uses personal data when you visit agpo.uk or contact us through it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Agpo Limited is the controller of the personal data described in this notice. We are a company registered in England and Wales, company number 17424543, with our registered office at 41 Victoria Road, Frome, BA11 1RR.
For anything to do with your personal data, contact Alfie Pearson, Co-Founder, at alfie.pearson@agpltdmedia.com or write to us at the address above. We have not appointed a Data Protection Officer because we are not required to.
2. What we collect
When you use our contact form
- Your name and the company you work for
- Your work email address
- The services you tell us you are interested in
- Anything you choose to write in the message box
Please do not include sensitive information (such as health details) in your message. We do not need it.
When you email us or we work together
Your contact details, the content of our correspondence and, if you become a client, the business contact details and information needed to deliver our services and invoice you.
When you visit the site
Like all websites, ours is delivered by servers that receive technical information from your browser, such as your IP address, browser type, the page requested and the time of the request. Our hosting provider, Cloudflare, processes this to deliver the site and protect it from abuse. We do not use this information to identify you.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Replying to your enquiry and discussing whether we can help | Taking steps at your request before entering into a contract (6(1)(b)), and our legitimate interest in responding to people who contact us (6(1)(f)) |
| Delivering services to you and managing our relationship if you become a client | Performance of a contract (6(1)(b)) |
| Keeping business, accounting and tax records | Legal obligation (6(1)(c)) |
| Keeping the website secure, preventing spam and fixing faults | Our legitimate interest in running a secure, working website (6(1)(f)) |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and expect the use to be one you would reasonably expect. You can ask us for more detail about this assessment.
We will not add you to a marketing list because you used the contact form. If we would like to send you marketing in future we will ask first, and you can opt out at any time.
You do not have to give us any personal data, but if you do not provide a name and email address we will not be able to reply to your enquiry.
4. Who we share it with
We do not sell your personal data. We only share it with service providers who process it on our behalf, under contract and on our instructions:
- Cloudflare, Inc.: website hosting, security and delivering contact form submissions to us by email
- Our business email and document provider: where our inboxes and files are held
- Our customer relationship management (CRM) provider: if we start working together, to keep track of our conversations and projects
- Our accountants, bank and professional advisers: where needed for invoicing, accounts and legal advice
We may also disclose personal data if the law requires it, for example to HMRC or in response to a valid request from a regulator or the police.
5. International transfers
Some of our service providers, including Cloudflare and our CRM provider, are based in the United States or process data there. Where personal data is transferred outside the UK, we make sure it is protected by an adequacy regulation (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or by the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses approved for use in the UK.
6. How long we keep it
- Enquiries that do not lead to work together: deleted within 12 months of our last contact
- Client records: kept for the length of our relationship and then for 6 years, to meet tax and accounting rules and in case of legal claims
- Technical and security logs: kept by our hosting provider for a short period, normally no more than 30 days
7. Cookies
We do not use advertising, analytics or tracking cookies, and we do not use tracking pixels. Our fonts are hosted on our own site, so visiting does not send your data to a font provider. Cloudflare may set a strictly necessary cookie to protect the site from automated abuse. Strictly necessary cookies do not require consent.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you (access)
- ask us to correct data that is wrong or incomplete (rectification)
- ask us to delete your data (erasure)
- ask us to limit how we use your data (restriction)
- object to us using your data where we rely on legitimate interests
- object at any time to us using your data for direct marketing
- ask us to transfer data you gave us to another organisation (portability), where this applies
Some of these rights only apply in certain circumstances. To use any of them, email alfie.pearson@agpltdmedia.com. It is free and we will respond within one month. We may need to confirm your identity first.
We do not make decisions about you using solely automated processing, including profiling, that have legal or similarly significant effects.
9. Keeping your data secure
The site is served over an encrypted connection (HTTPS). Access to enquiries and client information is limited to Agpo's founders, and we use appropriate technical and organisational measures to protect it.
10. Children
Our services are for businesses. This website is not aimed at children and we do not knowingly collect their personal data.
11. Complaints
If you have a concern about how we use your data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
12. Changes to this notice
We will update this notice if the way we handle personal data changes. The date at the top shows when it was last revised.