Privacy Policy
How Foundry Works collects, uses, and protects your data.
Last updated: 28 March 2026
Who We Are
Foundry Works ("we", "us", or "our") is an AI agent services company incorporated in England and Wales. We build, deploy, and manage AI agent teams for businesses.
- Company: Foundry Works Ltd
- Company number: 14591937 (England and Wales)
- Registered address: 128 Pierce Road, London, E17 9QH, United Kingdom
- Email: [email protected]
For the purposes of UK GDPR, we are the data controller in relation to the personal data described in this policy.
What Data We Collect
Information you provide directly
- Name, email address, phone number, and company name (when you contact us, book a consultation, or purchase a service)
- Payment information processed via Stripe (we do not store card details)
- Content and communications you send us via forms or email
- Website URL and business information you provide for AI audit and research services
Information collected automatically
- Cookies and usage data via Google Analytics (anonymised, IP anonymised)
- Server logs including browser type, pages visited, and referral source
- Chatbot interactions if you use our AI-powered tools on client websites
How We Use Your Data
- To deliver the services you have purchased (AI audits, agent builds, consulting)
- To respond to enquiries and book consultations
- To send service-related communications (report delivery, project updates)
- To improve our website and service delivery
- To comply with our legal obligations
We do not sell your personal data to third parties.
Legal Basis for Processing
Under UK GDPR, we process personal data on the following legal bases:
- Contract: Processing necessary to deliver services you have requested
- Legitimate interests: Improving our services, basic analytics (you can opt out)
- Consent: Marketing communications — you can withdraw at any time
- Legal obligation: Financial record-keeping, fraud prevention
Third-Party Processors
We use the following third-party service providers, each acting as a data processor under our instructions:
Cookies
We use minimal cookies on our website. Google Analytics cookies are used with IP anonymisation. We do not use advertising cookies or tracking pixels.
You can disable cookies in your browser settings at any time. Disabling cookies may affect some site functionality.
Data Retention
- Enquiry data: Retained for 24 months from last contact, unless a service engagement begins
- Client data: Retained for 7 years to comply with UK financial record-keeping obligations
- Analytics data: Retained for 26 months in anonymised form
- Marketing contacts: Retained until you withdraw consent
Your Rights (UK GDPR)
You have the following rights in relation to your personal data:
- Access: Request a copy of the data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal retention periods)
- Restriction: Request limited processing in certain circumstances
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, withdraw at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
International Transfers
If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions where available.
Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews of our AI agent systems.
Children's Data
Our services are not directed at individuals under 18. We do not knowingly collect data from children.
Changes to This Policy
We will update this Privacy Policy periodically and notify significant changes via email or a notice on our website.
Complaints
If you have concerns about how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.