Privacy and Cookie Policy

This Privacy and Cookie Policy explains how I Enterprise Ltd (trading as AgenticEcom) collects, uses, stores and protects your personal data when you use this website or buy from us. We are a UK-based business committed to complying with applicable data protection law, including the UK GDPR and Data Protection Act 2018, the EU GDPR where applicable, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller: I Enterprise Ltd (trading as AgenticEcom)
Registered Office: Suite 2.06b, C4di @Thedock, 31-38 Queen Street, Hull, East Riding Of Yorkshire, England, HU1 1UU
Company No: 13225768 (England and Wales)  |  VAT No: GB372459574
Contact: support@agenticecom.net

1. What Personal Data We Collect

• Identifiers: name, email address, billing address, IP address, account username
• Payment data: processed securely by our payment provider — we do not store full card numbers
• Commercial information: order and licence history, products purchased or browsed
• Device and internet activity: browser type, operating system, pages visited, referral source, cookie data
• Geolocation data: country and region inferred from IP address for tax and fraud purposes
• Communications: records of correspondence and support tickets when you contact us

We do not require or collect a telephone number.

2. How We Use Your Data

• To process your orders, deliver your products and licences, and manage your account (contract performance)
• To provide customer support and respond to your enquiries
• To send service communications such as order confirmations and licence/renewal notices
• To send marketing communications — with your consent, or to corporate subscribers on the basis of our legitimate interests as described in sections 9 and 9a — you may opt out at any time
• To improve our website, products and services (legitimate interests)
• To detect and prevent fraud (legitimate interests / legal obligation)
• To comply with our legal and tax obligations

3. Legal Bases for Processing

• Contract performance — to fulfil your order, deliver licences and manage your account
• Legal obligation — e.g. VAT and financial records, fraud prevention
• Consent — for non-essential cookies, and for marketing email to individual subscribers (withdraw at any time)
• Legitimate interests — analytics, fraud detection, service improvement, and business-to-business prospecting as described in section 9a, where not overridden by your rights

4. Who We Share Your Data With

• Payment processors — to take payment securely under their own data-processing terms
• Cloud, hosting and platform providers — acting as data processors under written agreements
• Marketing and analytics platforms — subject to your cookie and marketing preferences
• Professional advisers — legal and accounting, under confidentiality obligations
• Regulatory and law-enforcement authorities — where required or permitted by law

We do not sell your personal data.

5. International Data Transfers

As a business serving customers globally, we may transfer personal data outside the UK and EEA. Where we do, we ensure appropriate safeguards are in place, including UK adequacy regulations, EU adequacy decisions, or International Data Transfer Agreements / Standard Contractual Clauses.

6. Data Retention

We retain personal data only as long as necessary for the purposes above and as required by law. Transaction and financial records are kept for a minimum of six years in line with UK HMRC requirements. Marketing-consent records are kept until you withdraw consent. Business prospect data is kept for no more than 12 months after our last contact where there has been no reply, and is then deleted.

7. Your Rights (UK & EU GDPR)

You have the rights of access, rectification, erasure, restriction, data portability, objection, and to withdraw consent at any time. To exercise any right, email support@agenticecom.net; we respond within one calendar month.

You may also complain to the Information Commissioner's Office (ICO): ico.org.uk. EU residents may complain to the supervisory authority in their member state.

8. Children's Privacy

This website is not directed at children under 13 (or 16 where required). We do not knowingly collect data from children. If you believe we have, please contact us so we can remove it.

9. Marketing Messages (PECR)

We send marketing email to individual subscribers — including sole traders and unincorporated partnerships — only with consent, or under the soft opt-in where you are an existing customer and we are marketing similar products. We send marketing email to corporate subscribers — limited companies, LLPs, other corporate bodies and Scottish partnerships — without prior consent as permitted by regulation 22 of PECR, relying on legitimate interests under UK GDPR and subject to the safeguards described below. We may also contact a named person at a business through a professional networking platform on which they publish a profile identifying their professional role. Every message we send identifies us, gives a valid address for opting out, and is stopped permanently on request.

9a. Business Prospect Data

Where we approach a business that is not yet a customer, we may process: the business contact details published on that business's own website — typically a generic address such as info@ or sales@, and in some cases a named person's business address where the business publishes one; the name, job title, employer and public profile address of a named person at that business where they publish a professional profile identifying their role; and the page we tested, the publicly advertised platform it runs on, the publicly visible software components and extensions it uses, the measurement our testing returned and the date it was taken.

We obtain this information from publicly accessible sources: the business's own website, professional networking platforms such as LinkedIn, and publicly available company information. We do not buy, rent or licence prospect lists. We do use our own software to read pages that a business publishes on its own website, and to record the business contact details, company information and technical measurements published there. We do not use automated tools, scripts or browser extensions to extract data from professional networking platforms: where we hold a profile address, it is either one the business publishes on its own website or one we found by searching that platform by hand.

We may contact you by email, or by a message sent through the professional networking platform on which your profile appears.

Where we obtain your details from a source other than you, we will tell you within one month of obtaining them, or at the time we first contact you if that is sooner. That is why a link to this notice appears in the first message we send.

Our lawful basis is our legitimate interests (Article 6(1)(f) UK GDPR) in promoting our services to businesses likely to benefit from them. We have carried out a legitimate interests assessment and a copy is available on request. Where the recipient is an individual subscriber — a sole trader or an unincorporated partnership — we do not send marketing email without consent.

You have an absolute right to object to direct marketing at any time, under Article 21(2) UK GDPR. Reply to any message and say so, or email support@agenticecom.net, and we will stop immediately. We will keep a record of your details on a do-not-contact list for the sole purpose of ensuring we do not contact you again. We keep prospect data for no more than 12 months after our last contact where there has been no reply, and then delete it.

If you are unhappy with how we have handled your personal data, you can complain to us at support@agenticecom.net and we will respond. You may also complain to the Information Commissioner's Office at ico.org.uk.

10. Cookies and Tracking

We use cookies and similar technologies to improve your experience. We request consent before placing non-essential cookies, and you can manage your preferences via your browser or our cookie consent tool. The cookies we use are listed below.

Cookie Name	Description
FORM_KEY	A randomly generated key used to prevent forged requests.
PHPSESSID	Your session ID on the server.
GUEST-VIEW	Allows guests to view and edit their orders.
PERSISTENT_SHOPPING_CART	A link to your cart and viewing history if you have asked us to remember you.
STORE	The store view or language you have selected.
MAGE-CACHE-SESSID / MAGE-CACHE-STORAGE	Facilitate browser caching to make pages load faster.
PRIVATE_CONTENT_VERSION / X-MAGENTO-VARY	Facilitate caching of content to make pages load faster.

11. Security

We apply appropriate technical and organisational measures to protect your data, including SSL/TLS encryption in transit and access controls at rest. No internet transmission is completely secure, but we will notify you and the ICO of any breach as required by law.

12. Third-Party Links

Our website may link to third-party sites. We are not responsible for their privacy practices and recommend reviewing their policies.

13. Changes to This Policy

We may update this policy; material changes will be posted here with a revised date.

Last updated: August 2026