Privacy Policy

1. Who we are

Agent Zero Ltd ("Agent Zero", "we", "us") is a consulting firm that helps companies comply with cybersecurity laws and standards. We operate the website agentzero.group (the "Site"). For the personal data described in this policy, Agent Zero Ltd acts as the data controller. You can reach us at info@agentzero.group.

2. What data we collect

We keep data collection to a minimum:

• Contact data. When you email us or use the contact form, we receive the information you choose to share, such as your name, email address, company and the content of your message. The form sends that message by email through our email provider. It is not stored in a database on this site.
• Technical data. Our hosting provider processes standard connection logs (for example IP address, browser type and requested pages) as needed to serve the Site securely and prevent abuse.

The Site itself does not use analytics or tracking cookies, and the contact form does not store your submission on our servers. See our Cookie Policy for details.

3. Why we process it and on what legal basis

• Responding to your enquiries — our legitimate interest in communicating with prospective and existing clients (Art. 6(1)(f) GDPR), or steps prior to entering into a contract with you (Art. 6(1)(b) GDPR).
• Operating and securing the Site — our legitimate interest in running a secure, reliable website (Art. 6(1)(f) GDPR).
• Complying with legal obligations — where applicable law requires us to retain or disclose information (Art. 6(1)(c) GDPR).

4. Sharing and transfers

We do not sell personal data. We share it only with service providers that help us operate — our email provider (Resend) and our hosting provider (Vercel Inc.) — under appropriate data-processing agreements. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

5. Retention

We keep correspondence for as long as needed to handle your enquiry and any follow-up engagement, and afterwards only as long as required for legitimate business or legal purposes. Hosting logs are retained for short periods defined by our hosting provider.

6. Your rights

Subject to the conditions of the GDPR, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and — where processing is based on consent — to withdraw that consent at any time. To exercise any of these rights, email info@agentzero.group. You also have the right to lodge a complaint with your local data protection supervisory authority.

7. Security

Security is our business. We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and data minimisation — the most effective of which is simply collecting very little.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent version, and material changes will be highlighted on this page.