Privacy Notice
Last updated 6 October 2026 · applies to ndgm.co.uk
This notice explains how NDGM handles personal data collected through this website and our demo and account processes. It does not cover personal data we process on behalf of customers inside the platform — that is governed by our Data Processing Agreement, where the customer is the controller and NDGM is the processor.
1. Who we are
NDGM is a trading name of Agile Tech Global Solutions Limited, registered in England and Wales (company no. 14654678). Registered office: 27 Old Gloucester Street, London, WC1N 3AX. VAT registration no. GB 486 3793 36.
For website, demo and account data described here, we are the data controller. Contact our privacy team at [email protected]. ICO registration: ZB598122.
2. What we collect and why
| Data | Purpose | Lawful basis & legitimate interest |
|---|---|---|
| Name, work email, company, message (demo / contact forms) | Respond to your enquiry and arrange a demo | Legitimate interests — responding to a request you initiated |
| Account identifiers, authentication events, access logs (if you hold a login) | Operate, secure and support your account | Contract; legitimate interests in securing the service |
| Questions you type into Ask NDGM (the website assistant), the page you asked from, and your approximate country | Answer your question; let our team see what visitors ask so we can follow up on enquiries and improve the site | Legitimate interests — answering a question you chose to ask, and understanding demand for NDGM |
| Limited technical telemetry (IP, request metadata) | Security, abuse prevention, service reliability | Legitimate interests in protecting the service |
Ask NDGM’s answers are generated by open-weight AI models in hardware-isolated enclaves via Venice.ai. Questions are encrypted before they leave our servers and the provider cannot read them. Questions are also sent to the NDGM team as instant notifications via WhatsApp.
We do not buy personal data, and we do not run advertising or marketing tracking on this site.
3. Cookies
This site uses strictly necessary cookies only. We do not use analytics or marketing cookies, so no consent banner is required.
| Cookie | Purpose | Duration |
|---|---|---|
| Session / auth (HttpOnly) | Keeps you signed in to the console | Session |
| __cf_bm | Cloudflare bot mitigation (security) | ~30 minutes |
4. International transfers
NDGM is built and hosted in the UK. Some service providers operate outside the UK; where personal data is transferred internationally we rely on an appropriate safeguard — the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or the UK International Data Transfer Agreement / Addendum together with a transfer risk assessment. Each provider and its safeguard is listed on our Subprocessors page.
5. Retention
We keep personal data only as long as we need it:
- Demo and contact enquiries — for the duration of the conversation and up to 24 months afterwards for follow-up, then deleted.
- Ask NDGM questions — up to 30 days in our notification system, then deleted; kept with a demo request if you make one.
- Account data — for the life of the account and up to 12 months after closure.
- Security and access logs — typically up to 12 months, unless a longer period is required to investigate an incident or to meet a legal obligation.
At the end of the applicable period we delete or anonymise the data.
6. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and to data portability. We will respond to a request within one month. To exercise any right, email [email protected].
7. Automated decision-making
We do not make solely automated decisions with legal or similarly significant effects through this website. The platform's AI features operate under customer control and are described in the DPA.
8. Complaints
If you have a data-protection concern, please raise it with us first so we can put it right. In line with the Data (Use and Access) Act 2025, you can complain to us directly using the electronic form below, or by emailing [email protected]. We will acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk — but we'd appreciate the chance to resolve it first.
9. Changes
We may update this notice from time to time. The "last updated" date above reflects the current version; material changes will be highlighted here.