Privacy Policy

How Foundry Works collects, uses, and protects your data.

Last updated: 24 October 2026

Who We Are

Foundry Works ("we", "us", or "our") is an AI agent services company incorporated in England and Wales. We build, deploy, and manage AI agent teams for businesses.

• Company: Foundry Works Ltd
• Company number: 14591937 (England and Wales)
• Registered address: 128 Pierce Road, London, E17 9QH, United Kingdom
• Email: hello@foundryworks.ai

For the purposes of UK GDPR, we are the data controller in relation to the personal data described in this policy.

What Data We Collect

Information you provide directly

• Name, email address, phone number, and company name (when you contact us, book a consultation, or purchase a service)
• Payment information processed via Stripe (we do not store card details)
• Content and communications you send us via forms or email
• Website URL and business information you provide for AI audit and research services

Information collected automatically

• Cookies and usage data via Google Analytics (anonymised, IP anonymised)
• Server logs including browser type, pages visited, and referral source
• Chatbot interactions if you use our AI-powered tools on client websites

How We Use Your Data

• To deliver the services you have purchased (AI audits, agent builds, consulting)
• To respond to enquiries and book consultations
• To send service-related communications (report delivery, project updates)
• To improve our website and service delivery
• To comply with our legal obligations

We do not sell your personal data to third parties.

Legal Basis for Processing

Under UK GDPR, we process personal data on the following legal bases:

• Contract: Processing necessary to deliver services you have requested
• Legitimate interests: Improving our services, basic analytics (you can opt out)
• Consent: Optional PostHog analytics and marketing communications — you can withdraw at any time
• Legal obligation: Financial record-keeping, fraud prevention

Third-Party Processors

We use the following third-party service providers, each acting as a data processor under our instructions:

• Stripe — Payment processing. Stripe Privacy Policy
• Resend — Email delivery (report delivery, enquiry responses). Resend Privacy Policy
• Google Analytics — Website analytics with IP anonymisation enabled. Google Privacy Policy
• OpenClaw — AI agent platform for service delivery. OpenClaw Privacy Policy

Optional PostHog analytics

With your consent, we use PostHog’s EU service to understand page visits and link or button clicks. It uses browser identifiers, cookies or local storage, and device and referral information. These identifiers are not your name or email address.

PostHog is not loaded until you accept analytics. We do not enable session recording, capture form contents or send typed search queries, URL query strings or fragments in PostHog event data. Browser Do Not Track and Global Privacy Control signals keep this analytics off.

Use Analytics settings at the bottom left of any page to accept or reject PostHog analytics. Rejecting it leaves the website available. Withdrawing consent stops further capture and clears PostHog browser persistence; it does not automatically erase events already sent. We remember your choice in local storage for up to 180 days. PostHog privacy information.

Cookies

Our existing analytics services and the optional PostHog integration help measure website use. PostHog cookies and storage are enabled only after you accept analytics using the site controls. This installation does not enable PostHog advertising features or session recording.

You can disable cookies in your browser settings at any time. Disabling cookies may affect some site functionality.

Data Retention

• Enquiry data: Retained for 24 months from last contact, unless a service engagement begins
• Client data: Retained for 7 years to comply with UK financial record-keeping obligations
• Analytics data: Retained for 26 months in anonymised form
• Marketing contacts: Retained until you withdraw consent

Your Rights (UK GDPR)

You have the following rights in relation to your personal data:

• Access: Request a copy of the data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal retention periods)
• Restriction: Request limited processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw at any time

To exercise any of these rights, contact us at hello@foundryworks.ai. We will respond within 30 days.

International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions where available.

Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews of our AI agent systems.

Children's Data

Our services are not directed at individuals under 18. We do not knowingly collect data from children.

Changes to This Policy

We will update this Privacy Policy periodically and notify significant changes via email or a notice on our website.

Complaints

If you have concerns about how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.