Privacy & your information

1. Who we are

Agilinks Limited (company number 13328801), trading as Agilinks, is the controller responsible for the personal information it uses to manage enquiries and business relationships through agilinks.com.

Business name: Agilinks Limited
Registered office: 105 London Road, Luton, Bedfordshire, LU1 3RG
Correspondence address: 37 Blackbrook Lane, London, United Kingdom
Privacy contact: contact@agilinks.com

This notice covers our website, resource requests, course enquiries, quotations and booking administration. Last updated: 11 November 2026.

2. Information we collect

We collect information you provide when contacting us: your name, work email address, organisation, course of interest and any message. You may also provide your team size, preferred delivery format and timing. Required form fields are marked; other fields are optional. If you choose not to provide contact details, we may be unable to reply or prepare a proposal.

Cheat-sheet requests: we collect your business email address, the resource requested, whether you ask us to contact you about that course, and the request date and notice version. Your email domain is used to screen out common personal/disposable services. This check does not verify your identity, employer or mailbox ownership. Only your email is required for the resource request; a training conversation is optional.

If your organisation proceeds with a booking, we also handle the business contact, purchase order, invoice and payment-reference information needed to administer it. We do not collect card details or take payments on the website; payments are arranged by bank transfer.

Our website does not provide learner accounts or host implementation workbooks, learning-progress records or assessment results. Workbooks downloaded or supplied for a course remain with your organisation unless you choose to share approved evidence. Assessment interviews, surveys or learner information needed for a booked engagement require separate scoping of purposes, access, retention and any processor arrangements before collection. Please do not include learner lists, health information, bank credentials or confidential business information in an enquiry.

Hosting services also process technical information such as IP addresses, browser details, access logs and page-view information, as explained below.

3. Why we use your information

We use your information to respond to your request, discuss suitable courses, prepare quotations, arrange delivery and administer agreed bookings, purchase orders and invoices. We also use relevant records to handle questions or complaints, protect our services and meet legal obligations.

Legitimate interests: when you act on behalf of your employer, we rely on our legitimate interests in responding to requested business enquiries, managing business relationships and protecting our services. We limit this use to information relevant to those purposes and consider your rights and reasonable expectations.

Requested resources: we rely on legitimate interests in providing and securing our business resources and administering the request. We send a request notification to contact@agilinks.com. Downloading does not authorise promotional follow-up. If you separately ask for a course conversation, we use your details to respond to that specific request; we do not treat it as newsletter consent.

Contract: where you personally enter a contract with us, we use information necessary to take steps you request before entering that contract and to fulfil it. An employer’s contract does not automatically make this the lawful basis for processing its employees’ details.

Legal obligation: we retain and disclose information where necessary to meet applicable accounting, tax or other legal requirements.

We do not add you to a mailing list when you enquire, use your enquiry to train an AI model, or make solely automated decisions about you with legal or similarly significant effects.

4. Where your information goes

Enquiry correspondence is handled through our business email service, Google Workspace. Information is available to authorised Agilinks personnel and to service providers where needed to operate our email, website or agreed booking administration. Our website is hosted through OpenAI Sites and its hosting infrastructure. The website server validates enquiry fields and passes submitted enquiries to Google’s authenticated Gmail API. This connection is authorised to send email; it does not read our inbox. Server credentials are encrypted in the website’s configuration storage and are not exposed to visitors.

Relevant invoice and transaction records may be shared with our bank, accountant or professional advisers, or with authorities where legally required. We share only information relevant to the purpose. An enquiry is not automatically forwarded to another training provider, trainer or certification body.

If an agreed course requires personal information to be shared with an external trainer or awarding organisation, we will explain the recipient, purpose and applicable arrangements before collecting or sharing that information.

Our technology providers operate internationally, so information may be processed outside the UK. For restricted transfers, our policy is to use UK adequacy arrangements where applicable or appropriate contractual safeguards, such as the UK Addendum to standard contractual clauses. You can ask us for information about the safeguards relevant to your data and how to obtain a copy.

Provider information: Google’s data transfer frameworks and OpenAI’s privacy policy. Providers may also process some technical or account information for their own purposes under their notices.

5. Cookies and website information

The Insights page loads our article collection using a Holo-hosted script when you visit that page. Your browser connects to Holo to retrieve it, sharing technical connection information such as your IP address and browser details. Articles may load images or links from external services. The integration is not loaded on other pages and does not automatically send an enquiry or subscribe you to marketing.

Our WhatsApp enquiry button opens an external WhatsApp chat only when you select it. No WhatsApp widget or tracking script is loaded by this website. WhatsApp handles connection and account information under its own privacy policy. If you send us a message, we use your number, profile information and message to respond to your enquiry and manage the business relationship. Opening the link does not send a message automatically or subscribe you to marketing.

Some course pages offer an optional video preview hosted by HeyGen. The external player loads only after you choose to watch. Loading it shares your IP address, browser and connection information with HeyGen, which may also process playback information or use cookies under its privacy policy. You can read the transcript without loading the player.

We do not add advertising pixels, marketing trackers or third-party advertising cookies. Fonts and website images are served with the website rather than loaded directly from external font or image services.

The hosting platform records visitor and page-view statistics and may process technical information for security, reliability and access management. Authentication and security cookies may be used where access controls apply. These hosting activities are separate from the information you enter in an enquiry.

We do not place form contents into website analytics. For spam prevention, enquiries and gated downloads use Google reCAPTCHA only after you actively agree to load the security check in the submission form. Refusing this optional third-party interaction means the online submission cannot complete; you can instead email contact@agilinks.com to enquire or request the resource. This security check can process browser, device and interaction information under Google’s privacy policy. It is not used by Agilinks for advertising. To limit automated abuse, the enquiry service temporarily keeps random request references, delivery status and a daily keyed digest of the connection address in protected server storage. Enquiry text is not stored in these abuse-prevention records; they are removed after 48 hours on the next service request. If we introduce optional tracking that requires consent, it will remain disabled until you choose to enable it. You can also control cookies through your browser settings; blocking necessary cookies may affect access or functionality.

6. How long we keep information

Resource-request notifications that do not develop into a discussion are covered by a six-month retention limit from the request. A separately requested course conversation follows the enquiry retention period. Mailbox retention requires periodic review by authorised staff; it is not enforced by the browser.

Enquiries that do not result in a booking are retained for up to six months after the conversation closes, then deleted unless a continuing discussion, complaint or legal requirement justifies keeping a relevant record longer.

A request notification is business correspondence, not permission to add the address to a marketing list. For bookings and financial records, we retain the information needed for the applicable accounting and tax record-keeping period and for handling contractual obligations or legal claims. The period depends on the record, the end of the relevant accounting period, and any unresolved matter. We delete information when those purposes no longer require it.

Form entries are held in page memory while you prepare your request and are cleared when you close the form or leave the page. Copies you send by email become business correspondence covered by the retention rules above. A file you download remains on your device until you delete it, and your browser may separately remember autofill information.

Deleted correspondence may remain in provider recovery systems or backups until the provider’s normal deletion cycle completes. Hosting providers manage technical records under their applicable service and privacy terms.

7. Your rights

Depending on the circumstances, you can request access to your personal information, correction of inaccurate details, deletion, restriction of processing or a portable copy of information. These rights have conditions: for example, we may need to retain records to meet a legal obligation or address a legal claim. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.

You have the right to object to our use of your information based on legitimate interests. You can object to direct marketing at any time.

To exercise a right or ask a privacy question, email contact@agilinks.com. We may need reasonable information to verify your identity. We normally respond within one month; if a lawful extension or exception applies, we will explain it.

You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. You do not need our permission to do so.

8. Changes to this notice

We update this notice when our services or information-handling practices change. The date above shows the latest revision. Where a change affects how we use your information, we will provide further information as required.