Privacy Policy.

This policy explains what personal data we collect, why we collect it, how we look after it, and the choices and rights you have. It applies to this website and to enquiries you make with us.

Who we are

The Outcome Agency Ltd (“we”, “us”, “our”) is a company registered in England and Wales under company number [company number], with its registered office at 108 North Ormsby Road, Middlesbrough, UK. For the personal data described in this policy, we are the data controller.

We are registered with the Information Commissioner’s Office (ICO) under registration number [ICO registration number]. If you have any question about this policy or your data, contact us at info@theoutcome.agency.

Data we collect

We only collect what we need to respond to you and run our business:

• Details you give us when you complete a form, book a diagnosis, or email us, such as your name, work email, telephone number, company, and the content of your message.
• Communications you exchange with us, including emails, call notes, and meeting records.
• Technical and usage data your device shares automatically, such as IP address, browser type, and the pages you view, together with any analytics we enable (see Cookies).

We do not intentionally collect special category data (such as health or ethnicity) through this site, and we ask that you do not send it to us in enquiries.

How we use it

• To respond to your enquiry, arrange a diagnosis, and provide the services you ask for.
• To manage our relationship with you and administer contracts and invoicing.
• To operate, secure, and improve this website.
• To send you information you have asked for, or, where permitted, occasional updates about our work (you can opt out at any time).
• To meet our legal, accounting, and regulatory obligations.

We do not sell your personal data, and we do not use it to make solely automated decisions that produce legal or similarly significant effects about you.

Legal bases

Under UK GDPR we rely on the following lawful bases:

• Legitimate interests — to respond to enquiries, run and promote our business, and keep our systems secure, balanced against your rights.
• Contract — to take steps at your request before entering an agreement, and to deliver services once engaged.
• Consent — for optional analytics cookies and any marketing you opt into. You can withdraw consent at any time.
• Legal obligation — where we must keep records for tax, accounting, or other legal requirements.

Client & project data

When we build and run AI for a client, we often handle personal data that belongs to that client’s business. In those engagements the client is usually the data controller and we act as a data processor, handling data only on their documented instructions under a separate written agreement (including, where required, a data processing agreement). We limit access to what a project needs, and we return or delete project data at the end of an engagement in line with that agreement.

Sharing & sub-processors

We do not sell or rent personal data. We share it only with trusted providers who help us operate, and only as far as needed. These may include:

• Website hosting and infrastructure providers.
• Email, calendar, and business productivity tools.
• Analytics providers (only where you have consented).
• Payment and accounting providers.
• AI model and automation providers used to deliver our services, engaged under terms that restrict them to processing on our or our client’s instructions.
• Professional advisers and, where legally required, authorities and regulators.

A current list of the sub-processors we use for a given engagement is available to clients on request.

International transfers

Some of our providers may process data outside the UK. Where they do, we rely on an adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, so your data receives an equivalent level of protection.

Retention

We keep personal data only as long as we need it for the purposes above, then delete or anonymise it. Enquiry data is typically kept for up to 24 months from our last contact, unless we enter an engagement, in which case client records are kept for the life of the contract and for as long afterwards as the law and good practice require (for example, for tax and accounting).

Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and least-privilege practices. More detail is in our Security statement.

Your rights

Subject to the conditions in UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to erase your data.
• Restrict or object to our processing.
• Data portability.
• Withdraw consent where we rely on it.

To exercise any of these, email info@theoutcome.agency. We respond within one month. There is normally no charge.

Cookies

We use essential cookies to make the site work and, with your consent, analytics cookies to understand how it is used. You control this through the banner on your first visit and can change your mind at any time. Full detail is in our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it last changed. Significant changes will be made clear on this page.

Contact & complaints

For any privacy question or to exercise your rights, contact us:

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it with you first.

This policy is provided in good faith and reflects how we work. Please have it reviewed by a qualified adviser and complete the bracketed details before you rely on it publicly.