AgentPratham

UK GDPR Article 14 Notice

Website Data Notice

Published by AgentPrime Ltd

Last updated: To be completed: publication date to be set when this notice is signed off

This document contains items marked for completion.

Who we are

Data controller: AgentPrime Ltd, registered in England and Wales, company number 17073425. Our registered office and ICO registration details are on our Legal page.

ICO registration: ZC114543.

Data protection contact: contact@agentprime.co.uk.

What this notice is about

AgentPrepare is a website audit tool that visits publicly available websites and assesses how well they work for AI agents. When we audit a website, we may process personal data that appears on its publicly accessible pages: for example names, job titles, and contact details a business has published on its own site.

This notice is for individuals whose personal data we obtained indirectly, from a public website, rather than from you yourself. It is the notice Article 14 UK GDPR requires us to publish. If you interact with us directly (running an audit, holding an account), our Privacy Policy applies instead.

Why we process this data (purpose and lawful basis)

Purpose: to assess the AI readiness of publicly available websites and produce audit reports for the person or organisation that requested the audit.

Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR). We have carried out and documented a Legitimate Interests Assessment. Our conclusion, in short:

  • The data we encounter appears on publicly accessible pages that you or your organisation published.
  • The websites we audit are business websites, processed in a commercial context.
  • We do not use personal data from audited sites to target, profile, or make decisions about anyone.
  • We do not sell it or use it for marketing.
  • You can object at any time (see below).

What data we process

Whatever personal data happens to appear on the publicly accessible pages we visit, typically: names and professional titles, email addresses and phone numbers published in contact sections, business addresses, and professional profile information. We do not seek out personal data, and our audit reports do not reproduce it: reports contain scores, technical findings, and structural analysis of the website.

Where the data comes from

Publicly accessible pages of websites submitted to us for auditing. Our crawler identifies itself with the user agent string AgentPrepareBot/1.0 and visits up to 150 pages per audit.

Who we share it with

  • The client who requested the audit receives the report. Reports contain scores and technical analysis, not personal data from your website.
  • Browserless (remote browser infrastructure) renders the pages we audit, as our processor.
  • Supabase (cloud database and storage) stores audit data, as our processor.
  • Anthropic (AI provider, US) generates narrative report text from structured technical output about the website, as our processor. Anthropic does not use data submitted through the API to train its models.
  • Vercel (hosting) and Inngest (background job processing) operate the service infrastructure, as our processors.

We do not sell your data.

International transfers

Some processors process data in the United States. Transfers are protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework, as applicable per processor. To be completed: the specific transfer mechanism for each processor is being confirmed and will be listed here

How long we keep it

  • Captured page content (the raw material that may contain personal data): retained for up to 12 months after the audit, then nullified from our records.
  • Audit scores and technical findings (no personal data content): To be completed: retention period will be stated here once our automated deletion process is live

Your rights

You have the right to: access the personal data we hold about you; have it corrected; have it erased; restrict our processing; and object to processing based on legitimate interests. If you object we will stop processing your data unless we can demonstrate compelling legitimate grounds.

Site exclusion: if you operate a website and want it excluded from future audits, contact us at contact@agentprime.co.uk and we will add your domain to our exclusion list.

To exercise any right, contact contact@agentprime.co.uk. We respond within one month, free of charge. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Automated decision-making

We do not make automated decisions about individuals. Our clients receive analysis about websites; any decisions based on it are theirs, and none of it concerns individual people.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last updated.

AgentPrime Ltd, company number 17073425. Registered office and ICO registration details are on our Legal page.