AGENTU

Privacy Policy

Back to Home

Last Updated: 27 June 2025

1. Introduction

Welcome to Agentu Ltd. We are a cybersecurity software and consultancy company committed to protecting the privacy and security of our clients' and users' information. This Privacy Policy outlines how we collect, use, store, and protect your personal data.

This policy applies to data collected through our website (including our contact form), during the provision of our services, and for our marketing and billing purposes.

2. About Us & Our Contact Details

Agentu Ltd is the "data controller" for the personal information we process, unless otherwise stated. This means we are responsible for deciding how we hold and use personal information about you.

  • Company Name: Agentu Ltd
  • Registered Address: 10 Campbell Crescent, East Grinstead, West Sussex, RH19 1JR
  • Company Number: 16191406
  • Contact for Data Protection Queries: [email protected]

3. The Data We Collect

We keep our data collection to a minimum. The types of personal data we may collect include:

  • Identity Data: Your first name and last name.
  • Contact Data: Your email address and the company you work for.
  • Client Service Data: Personal data provided to us by clients to enable us to deliver our software and consultancy services. This may include network information, IP addresses, employee contact details, and other system data necessary for cybersecurity assessments and support.
  • Communications Data: The content of your message when you contact us via our form, and any subsequent email or other communications.
  • Financial Data: Billing and payment information if you procure our paid services.
  • Marketing and Communications Data: Your preferences in receiving marketing from us.

We do not knowingly collect any "special categories" of personal data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).

4. How We Collect Your Data

We collect data in the following ways:

  • Direct Interactions: When you fill in our website contact form (hosted via Google Forms), correspond with us by email, or engage with us to procure our services.
  • Provision of Services: When we perform consultancy or provide software, we may process data held on your systems as a necessary part of the service. In these cases, we act as a "data processor" and our activities are governed by a contract with you, the "data controller."

5. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances and under these legal bases:

Purpose of Processing Type of Data Lawful Basis for Processing
To respond to your enquiries Identity, Contact, Communications Legitimate Interest (to respond to enquiries and grow our business)
To provide our services Identity, Contact, Client Service, Financial Performance of a Contract with you
To manage our client relationship Identity, Contact, Financial, Communications Performance of a Contract; Legitimate Interest (to keep our records updated)
For billing and accounting Identity, Contact, Financial Performance of a Contract; Legal Obligation (for tax purposes)
For direct marketing Identity, Contact Consent, or Legitimate Interest (to market similar services to existing corporate clients)

6. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to employees and trusted third parties who have a business need to know and are subject to a duty of confidentiality.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. For tax purposes, the law requires us to keep basic information about our clients (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers.

8. Disclosures of Your Personal Data

We may share your personal data with the parties set out below for the purposes detailed in the table above:

  • Service providers who provide IT and system administration services (e.g., Google for our contact form).
  • Professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
  • HM Revenue & Customs, regulators, and other authorities based in the United Kingdom who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

9. International Transfers

Our website contact form is hosted by Google Forms, which may involve transferring your data outside the United Kingdom (UK). When we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring that transfers will only happen to countries that have been deemed to provide an adequate level of protection for personal data, or by using specific contracts approved for use in the UK which give personal data the same protection it has in the UK.