We are committed to protecting your personal data and your right to privacy. This policy explains how AI Agency Ltd collects, uses, and safeguards your information.
Who We Are
AI Agency Ltd (“we”, “us”, “our”) is a performance marketing agency registered in England and Wales. We provide AI-augmented paid advertising and organic growth services to e-commerce, SaaS, B2B, and local service brands across the UK, US, Canada, and Australia.
AI Agency Ltd is the data controller responsible for your personal data. Our website is aiagencyltd.com. For all data enquiries, please use the contact details in Section 12.
Data We Collect
We collect personal data in the following ways:
Information you provide directly
- Contact & enquiry data — name, email address, phone number, company name, job title, and any message content submitted via our contact forms, ad audit request, or strategy call booking.
- Client onboarding data — business details, ad account access credentials (managed via platform-level permissions), billing information, and KPI targets provided during onboarding.
- Communications data — emails, Slack messages, and meeting notes exchanged with our team.
Information collected automatically
- Usage data — IP address, browser type, operating system, pages visited, time on site, referral source, and click behaviour (via cookies and analytics tools).
- Device data — device identifiers and settings when you access our site or client dashboards.
Information from third parties
- Analytics data from Google Analytics 4, Meta Pixel, TikTok Pixel, and LinkedIn Insight Tag (where installed on your website at your request).
- CRM enrichment data from publicly available professional sources (e.g., LinkedIn profiles) where relevant to a business enquiry.
How We Use Your Data
| Purpose | Details |
|---|---|
| Service delivery | Managing your ad campaigns, reporting dashboards, strategy calls, and all contracted deliverables. |
| Account management | Onboarding, invoicing, and client communications throughout our engagement. |
| Marketing & lead generation | Sending you relevant content, case studies, or updates — only with your consent or where we have a legitimate interest. |
| Ad audit delivery | Analysing your ad account data (with your permission) to produce the free Loom audit report. |
| Analytics & improvement | Understanding how our website and services are used so we can improve them. |
| Legal compliance | Meeting our obligations under UK GDPR, DPA 2018, and applicable tax/financial regulations. |
| Security | Detecting and preventing fraudulent or unauthorised activity on our systems. |
Legal Basis for Processing
We rely on the following lawful bases under UK GDPR:
- Contract — processing necessary to fulfil our services to you as a client.
- Legitimate interests — improving our services, direct marketing to existing clients and warm prospects, fraud prevention, and internal analytics. We always balance this against your privacy rights.
- Consent — for marketing emails to non-clients and for non-essential cookies. You may withdraw consent at any time.
- Legal obligation — where we are required to process data to comply with law (e.g., HMRC, Companies House).
Data Sharing & Third Parties
We do not sell your personal data. We only share it with trusted parties who need it to help us operate our business and deliver your services:
| Recipient | Purpose | Location |
|---|---|---|
| Meta, Google, TikTok, LinkedIn | Ad campaign management on your behalf | US / Global |
| Google (Analytics, Looker Studio) | Website analytics and client dashboard reporting | US |
| CRM & project management tools | Client relationship and workflow management | UK / US |
| Email & communication tools | Client and prospect communications | UK / US |
| Accounting & payment processors | Invoicing and financial transactions | UK |
| Legal and professional advisors | Where required for legal compliance | UK |
All third-party processors are subject to data processing agreements and are required to maintain appropriate security standards.
Cookies & Tracking Technologies
Our website uses cookies and similar technologies. These fall into the following categories:
- Strictly necessary — required for the website to function. These cannot be disabled.
- Analytics — help us understand how visitors use our site (e.g., Google Analytics 4). Only set with your consent.
- Marketing — used to deliver relevant advertising and track campaign performance (e.g., Meta Pixel, Google Ads conversion tags). Only set with your consent.
When you first visit our site, you will be presented with a cookie consent banner. You can manage or withdraw your cookie preferences at any time via the Cookie Settings link in our website footer.
International Data Transfers
Some of our third-party service providers operate outside the UK or EEA — primarily in the United States. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
- UK adequacy regulations or decisions.
- Standard Contractual Clauses (SCCs) approved by the UK ICO.
- The UK–US Data Bridge where applicable.
You can request details of the specific safeguards we apply to any international transfer by contacting us.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law:
- Prospect enquiries — up to 24 months from last contact, unless you ask us to delete sooner.
- Client records — for the duration of the contract plus 6 years (to comply with UK financial and legal obligations).
- Website analytics — up to 14 months (Google Analytics 4 default).
- Marketing consent records — until you withdraw consent or for 3 years from last interaction, whichever is sooner.
After these periods, data is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your data where there is no compelling reason for us to continue processing it.
- Restriction — ask us to pause processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests or for direct marketing (which we will always honour immediately).
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
- Automated decision-making — not be subject to solely automated decisions that significantly affect you.
To exercise any of these rights, contact us at privacy@aiagencyltd.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Children’s Privacy
Our services are intended for businesses and professionals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acknowledgment of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out: