Last updated: 23 September 2026
1. Who we are
Agora Consulting Solutions Ltd ("Agora", "we", "us") is the data controller for personal data collected through this website.
Registered address: 20 Wenlock Road, London N1 7GU, United Kingdom.
Privacy contact: enquiries@agoraconsulting.ai
2. Scope of this notice
This notice covers personal data we handle through the public website at agoraconsulting.ai, including the demonstration and enquiry form, the UK CDD Automation Benchmark 2026, and the storage and access technologies used in your browser. It does not cover personal data we process as a processor on behalf of clients within the Agora platform or under a services agreement, which is governed by the relevant contract and any client-facing documentation.
3. What we collect and where it comes from
Information you give us directly. When you submit the demonstration or enquiry form we collect your first name, last name, email address, and, if you choose to provide them, your company name and telephone number, together with the content of your message. Anything you send us by email is also collected in the same way.
Technical information. Requests to our website and to the backend functions that handle the enquiry form and benchmark questionnaire involve standard technical data such as your IP address and browser information. We use the IP address of a form or questionnaire submission on a short-term, in-memory basis to apply a rate limit that prevents abuse. We do not operate any analytics product on this website.
Benchmark questionnaire information. The UK CDD Automation Benchmark 2026 questionnaire is intended to be anonymous. It does not ask for your name, firm name, customer data or confidential client data. We collect the questionnaire choices you submit and use them to conduct, analyse and publish aggregate or anonymised research about UK customer due diligence and financial-crime operating practices. Participation is voluntary. If you choose to provide an email address for research or report updates, or follow-up about the research programme, we store it separately from the questionnaire answers and do not link it to your answers.
Advertising attribution information, after consent only. If you arrive through advertising on an AI assistant, AI-powered search or another referral service, the landing address may contain an advertising click reference (oppref). This is held in memory only and is written to your browser, and shared with the relevant third-party advertising measurement technology, only if you accept advertising measurement. The advertising measurement provider currently used on this website is OpenAI.
We do not buy contact lists and we do not collect personal data about you from third party data brokers for this website.
4. Why we use it, and our lawful bases
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Responding to your demonstration request or business enquiry, and arranging and following up a demonstration | Name, email, company, phone, message content | Legitimate interests (responding to a business enquiry and promoting our services to business contacts). Where the enquiry is a step towards a contract with you as an individual, Article 6(1)(b) (steps at your request before entering a contract) may also apply. |
| Keeping a record of the enquiry and any resulting business relationship, and meeting legal, tax and accountability obligations | Enquiry and correspondence records | Legitimate interests, and legal obligation where a specific retention duty applies |
| Conducting, analysing and publishing the UK CDD Automation Benchmark as aggregate or anonymised research | Anonymous questionnaire choices and limited technical information used to protect the questionnaire from abuse | Legitimate interests in researching UK CDD and financial-crime operating practices and publishing useful aggregate findings. To the extent a response constitutes personal data, we apply this basis with the safeguards described in this notice. |
| Sending research or report updates, or following up about the research programme, where you request this | Optional email address, stored separately from questionnaire answers | Your consent. You can withdraw it at any time by unsubscribing or contacting us. |
| Protecting the website, enquiry form and benchmark questionnaire from abuse, spam and excessive automated traffic | IP address, request metadata | Legitimate interests (security and availability of our systems) |
| Remembering your cookie choice so the consent banner does not reappear unnecessarily | A record of your consent choice in your browser | Strictly necessary for a service you have requested; no consent required under PECR |
| Measuring the effectiveness of Agora advertising and attributing demonstration requests to the advertising that led to them | Advertising click reference and a conversion signal, handled by OpenAI | Your consent (PECR for the storage and access, and UK GDPR consent for any resulting personal data) |
5. Our legitimate interests
Where we rely on legitimate interests, our interest is in operating a business to business website, responding properly to people who ask us for a demonstration or information, conducting and publishing aggregate research on UK CDD and financial-crime operating practices, keeping accurate records of our dealings, and keeping our systems secure. We limit the benchmark questionnaire to information needed for that research and do not ask for names, firm names, customer data or confidential client data. We consider this processing to be within the reasonable expectations of someone who chooses to contact us or participate in the benchmark and to have minimal privacy impact. You can object to this processing at any time using the contact details above.
6. Who receives your information
We do not sell personal data. We share it only with service providers who support the operation of this website, and with others where the law requires it.
- Website and backend platform providers. Our site and the function that receives the enquiry form run on our development and hosting platform, which uses Supabase infrastructure for backend functions and data services.
- Email delivery. Enquiry notifications are delivered through the email sending service provided by our platform. The content of a submission passes through a short-lived internal queue before delivery and is removed from that queue once sent.
- Email and business systems. Once an enquiry reaches us, it is handled in our own business email and productivity systems.
- Benchmark research systems. Questionnaire answers and optional research notification email addresses are stored in separate records by our website and backend platform provider. We use the answers only for aggregate or anonymised analysis and publication, and do not publish the identity of a firm or person.
- OpenAI. Only if you accept advertising measurement, the OpenAI Ads Pixel operates in your browser and receives a conversion signal when a demonstration request is submitted successfully. Your name, email address, telephone number, company and message are not included in that signal.
- Professional advisers, regulators and authorities where we are required or permitted to disclose information.
7. International transfers
Our service providers are international organisations and personal data may be processed outside the United Kingdom, including in the United States, depending on where those providers operate. Where that happens, transfers are made under the safeguards and contractual arrangements those providers put in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another mechanism permitted under UK data protection law. Where a provider offers a data transfer mechanism under UK data protection law, we rely on that mechanism as set out in the provider's current published terms and documentation.
8. How long we keep it
- Enquiry and correspondence data. If your enquiry does not lead to a business relationship with Agora, we keep your enquiry and correspondence data for 24 months after the last meaningful interaction with you, after which we delete it or securely archive it. If your enquiry does lead to a business relationship, we keep your data for the duration of that relationship and for as long as we need it for legal, tax or accountability purposes.
- Anonymous benchmark responses. We retain questionnaire responses as research data for as long as reasonably needed to maintain and validate the published benchmark and make longitudinal comparisons. The questionnaire is designed not to collect information that identifies a firm or person.
- Optional benchmark email address. We retain it until you unsubscribe or withdraw your consent, or until the research programme is discontinued, whichever happens first. It remains stored separately from questionnaire answers and is not linked to them.
- Your cookie choice. Stored in your browser until you clear it, change it, or the consent record version changes.
- Advertising click reference. Stored in your browser's session storage only after you accept advertising measurement, and cleared when the session ends or when you withdraw consent.
- Rate limiting data. Held only in memory for a short period and not stored.
- Storage set by OpenAI. Controlled by OpenAI. We do not state retention periods for it because we cannot verify them.
9. Your rights
Subject to the circumstances and the lawful basis we rely on, you have the right to ask for access to your personal data, to have inaccurate data corrected, to have data erased, to restrict processing, to object to processing, and to receive certain data in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Right to object. Because we rely on legitimate interests for responding to enquiries, benchmark research, record keeping and security, you have the right to object to that processing on grounds relating to your particular situation. Tell us and we will stop unless we can show compelling legitimate grounds that override your interests.
To exercise any right, email enquiries@agoraconsulting.ai.
If you supplied an optional email address for benchmark updates, you can also withdraw your consent using the unsubscribe option in a message we send you. Because benchmark answers are intended to be anonymous and are not linked to that email address, we may not be able to identify a particular response as yours.
10. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Contact details are published on the ICO website at ico.org.uk.
11. Marketing
Submitting the demonstration form does not sign you up to marketing. We use the details you provide to respond to your enquiry and to arrange and follow up the demonstration you asked for. This website has no newsletter or marketing subscription.
If we later send electronic direct marketing, we will do so only where we have an appropriate basis under the Privacy and Electronic Communications Regulations, and every message will include a simple way to opt out. You can tell us at any time that you do not want marketing contact.
If you voluntarily provide an email address with the benchmark, we use it only for the research or report updates, or research follow-up, that you requested. It is not added to a general marketing list. You can unsubscribe or withdraw your consent at any time.
12. Cookies and similar technologies
We use storage and access technologies in two categories. Non-essential advertising measurement is switched off until you actively accept it, and refusing is as easy as accepting.
Strictly necessary
We store a small record of your cookie choice in your browser so the consent banner does not reappear unnecessarily. This is strictly necessary to provide a function you asked for and does not require consent under PECR.
Advertising measurement
Purpose. To measure the effectiveness of Agora advertising on AI assistants, AI-powered search, search engines, referral platforms or other third-party digital services, and to attribute demonstration requests and enquiries to the advertising that led to them.
Provider. OpenAI. The technology is the OpenAI Ads Pixel, loaded from OpenAI's content delivery network.
What it involves. When you arrive through a relevant advertisement or referral, the landing address may contain an advertising click reference (oppref). We hold that reference in memory only and store it in your browser solely after you have consented to advertising measurement. If you consent, the OpenAI Ads Pixel is loaded and may itself set or read storage on your device under OpenAI's own terms. If you submit the demonstration form successfully, a single conversion event (lead_created) is reported to OpenAI. Your name, email address, telephone number, company and message are not included in that event.
Legal basis. Your consent. Nothing in this category loads, and no advertising storage is written, unless you actively accept. Continuing to browse is not consent.
Cookie names and retention. Any cookies or local storage set by the OpenAI Pixel are controlled by OpenAI. We do not list names or retention periods because we do not wish to state values we cannot verify. If a detailed cookie table is required, these should be confirmed from OpenAI's own published documentation.
Changing or withdrawing your consent
You can change your choice at any time using the Cookie settings control in the footer of every page, or the button below.
When you withdraw consent we stop initialising the OpenAI Pixel, send no further conversion events, and clear the advertising click reference we hold. Storage already placed on your device by OpenAI during the period of consent is controlled by OpenAI and cannot be deleted by this website; you can remove it through your browser's cookie and site data settings.
We do not run any other advertising, analytics or marketing technologies on this website.
13. Automated decision-making
This public marketing website does not carry out automated decision-making producing legal or similarly significant effects about you, and does not profile visitors. This statement is about the website only. Automated processing within the Agora platform, when delivered to a client, is governed by the relevant client contract and documentation.
14. Children
This website and our services are intended for business users and are not directed to children. We do not knowingly collect personal data from children through this website.
15. Changes to this notice
We may update this notice to reflect changes to our website, our providers or the law. The date at the top shows when it was last updated. For any privacy question, email enquiries@agoraconsulting.ai or write to Agora Consulting Solutions Ltd, 20 Wenlock Road, London N1 7GU.