This Privacy Policy explains how Agiliton Ltd. collects, uses, and protects personal data when you visit agiliton.ai, contact us, or engage our services, in compliance with the EU General Data Protection Regulation (GDPR) 2016/679 and the UK GDPR.
1.The data we collect
| Category | Examples | When |
|---|---|---|
| Contact & enquiry data | Name, business email, company, role, the message or briefing request you send | When you contact us or book a briefing |
| Booking data | Scheduling details processed by Calendly when you book a call | When you use the booking link |
| Usage & device data | IP address, browser type, pages viewed, referring page | Automatically, when you use the Site |
| Client engagement data | Documents and materials a client provides for a project | Only under a signed Engagement Agreement |
2.How and why we use it
- to respond to your enquiry, arrange and hold briefings, and provide information you request;
- to provide, operate, and improve our services under an Engagement Agreement;
- to operate, secure, and improve the Site;
- to comply with legal, tax, and regulatory obligations.
Legal bases (GDPR Art. 6): your consent; our legitimate interests in running and promoting our business and securing the Site; performance of a contract with you or your organisation; and compliance with legal obligations.
3.Client data — isolation and AI training
Materials provided for a client engagement are processed within a dedicated, per-tenant boundary on UK/EU infrastructure. Your documents and process data are never used to train shared or third-party AI models. Access is restricted to the personnel and sub-processors working on your engagement, under confidentiality obligations. Data residency (UK or EU) and any additional terms are set out in your Engagement Agreement, and a DPIA and security questionnaire are available on request.
4.Sharing and sub-processors
We do not sell your personal data. We share it only with trusted service providers ("processors") who help us operate — for example, cloud hosting, scheduling (Calendly), email, and analytics providers — under contracts that require them to protect it and use it only on our instructions. We may also disclose data where required by law.
5.International transfers
We host and process data on UK/EU infrastructure. Where any transfer outside the UK/EEA is necessary (for example, a sub-processor), we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6.Retention
We keep personal data only for as long as necessary for the purposes above — enquiry and booking data for as long as needed to deal with your request and for a reasonable follow-up period; engagement data for the term of the engagement and any period required by contract or law; and then we delete or anonymise it.
7.Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email service@agiliton.eu. You also have the right to lodge a complaint with a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection; in the UK, the Information Commissioner's Office (ICO).
8.Cookies and analytics
The Site uses essential cookies needed for it to function and may use limited analytics to understand how the Site is used. Third-party features such as the Calendly booking widget and embedded fonts may set their own cookies. You can control cookies through your browser settings; blocking some may affect Site functionality.
9.Security
We apply organisational and technical measures appropriate to the risk, aligned with SOC 2 Type II and ISO 27001 control frameworks, including access controls, encryption in transit, per-tenant isolation for engagement data, and audit logging. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.
10.Changes to this policy
We may update this Privacy Policy from time to time; the "Last updated" date above reflects the current version. Material changes will be highlighted on this page.
11.Contact
Questions or requests about your personal data: service@agiliton.eu · Agiliton Ltd., Throumperon 29, Coral Bay Village, Peyia, 8575 Paphos, Cyprus.