Privacy notice

Last updated: 11 October 2026 (draft)

Who we are

TrustedAIAgencies (trustedaiagencies.com) is operated by [LEGAL ENTITY NAME, company number, registered address] (“we”, “us”). We are the data controller for the personal data described here. Contact: hello@trustedaiagencies.com. [ICO registration number, if required]

What we collect and why

Data	Purpose	Lawful basis (UK GDPR)
Details you submit on the Get matched form (name, email, company, project description, budget, location)	To recommend agencies and, with your agreement, introduce you to them	Consent, and steps at your request before entering a contract
Details agencies submit (name, work email, agency details)	To create, correct, verify or remove listings, and to manage paid plans	Legitimate interests; contract for paid plans
Business information about agencies from public sources (business name, website, town, services)	To publish an accurate directory	Legitimate interests
Technical data processed by our hosting provider (for example IP address in server and security logs)	To deliver and secure the site	Legitimate interests

If your business is listed

We compile listings from public sources: the business’s own website and public directories such as Zapier’s partner directory. For most listings this is information about a company. For sole traders and freelancers it can include your name, business name, website, town or city, the services and tools your website mentions, any prices you publish, and the source links and date we checked them. This is personal data, and we did not collect it from you directly.

• Why and on what basis: to help businesses find providers of AI and automation services. We rely on legitimate interests (UK GDPR Article 6(1)(f)) and have assessed that this limited, already-public business information does not override your interests.
• Where it appears: on your profile page and in listing pages on this site. Listings also feed our open dataset (/api/agencies.json) and llms.txt files, which others may reuse. Individuals trading under their own name are not named in those bulk files.
• How long: we keep a listing while it is accurate and the business appears to be active, and review listings at least every [12] months. Removed listings are deleted from the site and datasets at the next update.
• Your right to object: you can object to this processing, or ask us to correct or remove your listing, at any time by emailing hello@trustedaiagencies.com or using the agency form. We will act within one month, and normally within five working days. You also have the other rights listed below.

Sharing

We share Get matched requests only with the agencies you agree to. We use these service providers (processors): Cloudflare (hosting, security and email routing), Formspree (form handling) and Stripe (payments for agency plans). [Add email provider; update if you use the Cloudflare Pages Function instead of Formspree.] Some of them process data outside the UK, for example in the USA; where they do, transfers rely on the UK–US data bridge or the UK International Data Transfer Addendum to the EU standard contractual clauses. [Confirm the mechanism for each provider.] We do not sell personal data.

Cookies and analytics

The site does not set advertising, analytics or tracking cookies, and no analytics is installed. [If you add Cloudflare Web Analytics, which is cookieless, mention it here. Tools that set cookies, such as GA4, need consent under PECR.]

How long we keep data

Get matched requests: [12 months] after your last contact. Listing data: see “If your business is listed” above. Agency correspondence: for as long as the listing exists plus [12 months]. Payment records: as required by law (normally six years).

Your rights

You can ask to access, correct, delete or restrict use of your data, object to processing, withdraw consent, or request a copy in a portable format. Email us at the address above. You can also complain to the Information Commissioner’s Office (ico.org.uk).