Privacy Notice

1. Who we are

Agents of Output ("we", "us") is a managed AI services company and a Synextra company. We design, build, and run AI agents for business clients on infrastructure we manage. We are registered with the Information Commissioner's Office (ICO) as required under the Data Protection (Charges and Information) Regulations 2018.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the controller of the personal data described in this notice, except where we process data on a client's behalf (see section 5).

2. What this notice covers

This notice explains how we handle personal data when you visit this website, contact us, or book a discovery session. Data we process while delivering agent services to a client is governed by the contract with that client, summarised in section 5.

3. Personal data we collect

• Enquiry and booking data. When you book a discovery session or contact us, we collect the details you provide: typically your name, work email address, company name, and anything you tell us about your processes.
• Correspondence. Records of our communications with you.
• Technical data. Standard server logs (IP address, browser type, pages requested) used to run and secure the website.

We do not knowingly collect personal data from children, and this website is not directed at them.

4. How and why we use it

• To respond to you and run discovery sessions — legitimate interests (responding to a business enquiry you initiated), or steps prior to entering a contract.
• To operate and secure this website — legitimate interests in keeping the service available and safe.
• To meet legal obligations — compliance with laws that apply to us.

We do not sell personal data, and we do not use it for third-party advertising.

5. Data we process for clients

When we run AI agents for a client, the client remains the controller of the data those agents process, and we act as a processor under a written agreement. That data is processed on isolated Azure tenancies that we manage — no co-mingling between clients — with UK data residency available. Clients own every input and output, and a full audit trail is exportable on request. The client's own privacy notice governs that processing.

6. Where your data lives

Our service infrastructure runs on Microsoft Azure. UK data residency is available for client workloads. Where a transfer of personal data outside the UK occurs — for example through one of the service providers described in section 7 — we rely on UK adequacy regulations or appropriate safeguards such as the ICO's International Data Transfer Agreement or Addendum.

7. Who we share it with

• Our group. Synextra, our parent company, where needed to deliver services or run the business.
• Service providers. Suppliers who support the website and our operations — for example our scheduling provider when you book a discovery session, and our cloud hosting provider. They act under contract and on our instructions.
• Professional advisers and authorities where the law requires or permits it.

8. How long we keep it

We keep enquiry and correspondence data for as long as needed to handle your enquiry and for a reasonable period afterwards, and contractual records for the periods required by law. Retention periods are documented in our internal retention schedule.

9. Your rights

Under the UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected and, in some circumstances, erased;
• restrict or object to our processing, including any direct marketing;
• data portability, where processing is based on consent or contract; and
• withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these rights, contact us via the contact page. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

10. Security

We apply technical and organisational measures appropriate to the risk, including isolated client tenancies, access controls, and audit logging. Our information security practices are operated within the Synextra group's certified management framework.

11. Changes to this notice

We will post any changes on this page and update the date at the top. Significant changes will be flagged more prominently.

12. Contact

Questions about this notice or our handling of your data: use the contact page and we will route your query to the right person.

This document is pending final legal review.