Last updated: 19 July 2026
This notice explains how AI Agency Index collects and uses personal information when you browse the site, create an account, post a brief, apply as a specialist, place an order or contact us.
Who is responsible for your data
AI Agency Index is responsible for the personal data described in this notice. For privacy questions or requests, email info@aiagencyindex.co.uk or call 07903 505874.
Information we collect
- Account details such as your name, email address, telephone number, business name and login information.
- Project and marketplace information, including briefs, answers, budgets, timescales, quotes, enquiries, shortlists and messages.
- Specialist application, profile, service, experience, identity and membership information.
- Order, billing and transaction records. Payment card details are handled by the payment provider rather than stored in full by AI Agency Index.
- Support correspondence, reviews, reports and other information you choose to send.
- Technical information such as IP address, browser, device, referring page, cookie choices and site activity.
Please do not include passwords, payment card details, health information or other sensitive personal data in a public profile, project brief or ordinary message.
How and why we use information
- To create and secure accounts, provide marketplace features, process orders and deliver support where this is necessary for a contract or steps requested before a contract.
- To match briefs with relevant specialists, operate profiles, prevent misuse, improve the service and keep appropriate business records where we have a legitimate interest.
- To process payments, meet tax, accounting, fraud-prevention and legal requirements where required by law or necessary for our legitimate interests.
- To send optional marketing or use non-essential analytics and advertising technologies where consent is required and given.
You can withdraw consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.
How briefs and contact details are shared
Project information may be shown or sent to specialists where this is necessary to identify a suitable match. Contact details are handled according to the choices and notices shown in the relevant brief, enquiry or lead workflow. Specialists must use supplied information only to respond to the relevant opportunity and meet their own data protection obligations.
Public specialist profiles, services and reviews can be indexed by search engines. Do not publish information you do not want to be public.
Service providers and other recipients
We may use trusted providers for hosting, databases, email, customer support, analytics, security and payment processing. They may process data only for the services they provide to us and under appropriate contractual controls.
We may also disclose information where required by law, to protect users or the platform, to investigate fraud, or as part of a business sale or reorganisation subject to suitable safeguards. We do not sell personal data.
Cookies and analytics
Strictly necessary cookies support functions such as security, authentication, baskets and saved preferences. Other analytics or advertising technologies are used only in line with the consent choices shown on the site where consent is required. You can review or change those choices through the cookie controls.
International transfers
Some technology providers may process information outside the UK. Where this happens, we use an applicable adequacy regulation, contractual safeguards or another lawful transfer mechanism and assess the protection available.
How long we keep information
We keep personal data only for as long as needed for the purpose it was collected, including account operation, support, dispute handling, fraud prevention and legal, tax or accounting records. Retention periods vary by record type. We delete or anonymise information when it is no longer required, unless the law requires longer retention.
Security
We use proportionate technical and organisational measures to protect information, including access controls, encrypted network connections, backups and service monitoring. No internet service can guarantee absolute security, so you should use a unique password and protect access to your account.
Your data protection rights
Depending on the circumstances, UK data protection law gives you rights to be informed, access your data, correct inaccurate data, request erasure or restriction, object to processing, receive portable data and challenge certain solely automated decisions. These rights are not absolute and exemptions may apply.
Contact us to exercise a right. We may need to verify your identity before responding. You can also complain to the Information Commissioner's Office.
Children
The marketplace is intended for adults and business users. We do not knowingly invite children to create accounts or submit project briefs. Contact us if you believe a child has provided personal data through the service.
Changes to this notice
We may update this notice when the service, providers or legal requirements change. The latest version and update date will remain on this page. Material changes may also be highlighted through the site or by email where appropriate.
For general support, use the contact page.