Privacy Policy

Introduction

AgentGoverning is an independent, non-commercial standards body for AI agent governance. This privacy policy explains how we collect, use, and protect personal data submitted through our website at agentgoverning.com.

We are committed to handling personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data We Collect

We collect personal data through the contact form on our website, and in a limited form through analytics (described below). Through the contact form this may include:

• Name
• Email address
• Organisation name
• Message content

We do not operate advertising trackers or third-party profiling tools. We use PostHog analytics (hosted in the EU, acting as our processor) in two ways. Anonymous counting, without cookies: by default we count the pages viewed, clicks (never what you type) and browser and device type, with nothing stored on or read from your device and no identifier kept for you; your IP address and browser details are used only briefly to produce aggregate counts. Our lawful basis is our legitimate interests in understanding and improving the service, and you can object at any time by choosing “Don’t count my visits at all” under the “Cookie settings” link at the foot of each page. Analytics with device storage and masked session replay, only if you accept: PostHog also keeps a random device ID in your browser’s local storage so we can see how individual visitors use the site, and may record your session with all text, images and inputs masked, so we see how pages are used but not what is on your screen. Our lawful basis is your consent, which you can withdraw at any time under “Cookie settings”; withdrawing stops the recording. PostHog analytics data is kept for 12 months and then deleted; IP addresses are discarded, not stored with it. Otherwise we use functional cookies only, as described in our Cookie Policy.

Legal Basis for Processing

We process personal data on the basis of legitimate interests under Article 6(1)(f) of the UK GDPR. Our legitimate interest is responding to enquiries about the AGS standard, verification processes, regulatory engagement, and research collaboration. We have assessed that this processing does not override your fundamental rights and freedoms.

For analytics, anonymous counting without cookies relies on our legitimate interests in understanding and improving the service (Article 6(1)(f)), and you can object to it at any time; analytics with device storage relies on your consent (Article 6(1)(a)), which you can withdraw at any time. Both are controlled from the “Cookie settings” link at the foot of each page.

How We Use Your Data

Personal data submitted through the contact form is used solely to:

• Respond to your enquiry
• Facilitate engagement regarding the AGS standard, verification, or research
• Maintain records of correspondence for continuity

Data Retention

Contact form submissions are retained for 12 months from the date of submission. After this period, personal data is permanently deleted unless there is a lawful basis for continued retention.

Data Sharing

We do not sell, rent, or share personal data with third parties. Personal data is not transferred to any commercial entity, advertising network, or data broker. Where we use infrastructure providers to operate this website, such providers act as data processors under appropriate contractual safeguards.

International Transfers

We do not routinely transfer personal data outside the United Kingdom. Analytics data is processed by PostHog in the EU, which the UK recognises as providing adequate protection. If any transfer becomes necessary, it will be conducted in compliance with UK GDPR requirements, including the use of appropriate safeguards such as standard contractual clauses.

Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to restrict processing — request that we limit how we use your data

To exercise any of these rights, contact us at framework@agentgoverning.com. We will respond within one calendar month.

Contact for Privacy Queries

For all privacy-related enquiries, including requests to exercise your data rights:

framework@agentgoverning.com

Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Governing Law

This privacy policy is governed by and construed in accordance with the laws of England and Wales.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated effective date. We do not provide individual notice of policy changes.