Privacy Policy

Privacy Policy

Last updated: 8 May 2026

This Privacy Policy explains how STR8 FORWARD HOLDINGS LIMITED, trading as People+ Agentics, collects, uses, stores and protects personal information.

We respect your privacy and are committed to protecting your personal data in line with the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations.

The ICO states that organisations must provide clear privacy information explaining how and why personal data is used, including lawful basis, retention periods, recipients of data and individual rights. (ICO)

1. Who we are

People+ Agentics is the trading name of STR8 FORWARD HOLDINGS LIMITED, a limited company registered in England and Wales.

Company name: STR8 FORWARD HOLDINGS LIMITED
Trading name: People+ Agentics
Company number: 10839030
ICO registration number: ZA562172
Registered office: 124 City Road, Str8 Forward Holdings Limited, London, England, EC1V 2NX
Website: www.people-plus.ai
Email: [email protected]

For data protection purposes, we may act as either a Data Controller or a Data Processor.

We act as a Data Controller when we collect and use personal data for our own business purposes, such as enquiries, sales, marketing, website analytics, client management and administration.

We act as a Data Processor when we process personal data on behalf of our clients, for example when managing their lead databases, CRM workflows, SMS campaigns, AI assistants, appointment booking systems, automations or reporting.

The ICO explains that controllers are responsible for complying with UK GDPR and demonstrating compliance, while processors have more limited responsibilities and usually act on the controller’s instructions. (ICO)

2. What we do

People+ Agentics provides AI automation and business automation services, including:

AI automation

CRM automation

Database reactivation

SMS follow-up campaigns

Lead management

AI chatbots

Appointment booking

Sales and campaign reporting

Related automation and consultancy services

3. Personal data we collect

We may collect and process the following types of personal data.

Information you provide to us

This may include:

Name

Email address

Phone number

Company name

Job title

Website URL

Enquiry details

Messages sent to us by email, SMS, WhatsApp, website forms, social media or other channels

Appointment or booking details

Billing and payment-related information

Information collected automatically

When you use our website, we may collect:

IP address

Browser type

Device information

Pages visited

Time spent on the website

Referral source

Cookie and tracking information

Website interaction data

Client-provided data

When working with clients, we may process data they provide to us, including:

Customer or lead names

Email addresses

Phone numbers

Enquiry details

CRM records

Appointment information

Sales pipeline data

Communication history

Campaign engagement data

Call, SMS, email or chatbot interaction data

Reporting and performance data

Where this data relates to our client’s customers, prospects or leads, our client will usually be the Data Controller and we will usually act as the Data Processor.

4. How we use personal data

We use personal data to:

Respond to enquiries

Provide our services

Manage client relationships

Deliver AI automation and CRM automation services

Set up, monitor and improve marketing campaigns

Send SMS and email follow-up messages

Manage leads and appointments

Operate AI chatbots and automated workflows

Provide sales and campaign reporting

Process payments

Send service-related communications

Provide customer support

Improve our website, services and systems

Send marketing communications where permitted

Comply with legal, financial and regulatory obligations

Protect our business, systems and clients from misuse, fraud or security risks

5. Lawful basis for processing

We only process personal data where we have a lawful basis to do so.

Depending on the situation, we may rely on:

Contract

Where processing is necessary to provide services to you, manage our relationship with you, or take steps before entering into a contract.

Legitimate interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

This may include:

Responding to business enquiries

Managing client relationships

Running B2B marketing

Improving our services

Protecting our systems

Measuring campaign performance

Operating and improving automation workflows

The ICO confirms that UK GDPR applies to B2B marketing where personal data is used, such as when a business contact’s name or contact details are processed. It also says individuals have an absolute right to stop their data being used for direct marketing. (ICO)

Consent

Where you have given clear consent, such as accepting non-essential cookies or opting in to certain marketing communications.

Legal obligation

Where we are required to process data to comply with the law, such as accounting, tax, record-keeping or regulatory obligations.

6. AI and automation

As an AI automation agency, we use automation tools, AI systems, CRM platforms and workflow software to help deliver our services.

This may include:

Automating responses to enquiries

Routing leads to the correct person

Sending SMS or email follow-ups

Managing appointment booking flows

Summarising conversations

Analysing campaign performance

Segmenting leads

Supporting customer service workflows

Generating reports and operational insights

We do not use AI or automation to make legally significant decisions about individuals without appropriate human oversight.

Where we process client customer data using AI or automation, we do so according to our client’s instructions and any applicable data processing agreement.

7. Marketing communications

We may send marketing emails or SMS messages to our own business prospects where permitted by law.

We may also send SMS or email campaigns on behalf of clients to their leads or customers, where instructed by the client and where the client is responsible for ensuring they have the correct permission or lawful basis to contact those individuals.

Marketing communications may be sent using platforms such as GoHighLevel, Twilio, WhatsApp, email systems or CRM tools.

You can opt out of our marketing messages at any time by using the unsubscribe option where available or by contacting us at:

[email protected]

We do not sell personal data to third parties.

PECR sits alongside UK GDPR and applies to electronic marketing, cookies and similar technologies, so businesses using these channels need to consider both sets of rules. (ICO)

8. Cookies and analytics

Our website uses cookies and similar technologies.

These may include:

Google Analytics

Meta Pixel

LinkedIn Insight Tag

We use these tools to:

Understand how visitors use our website

Measure website and marketing performance

Improve user experience

Support advertising and retargeting activity

Understand which content and campaigns are most effective

Some cookies are necessary for the website to work. Others, such as analytics, advertising and tracking cookies, may require consent.

The ICO explains that PECR applies to cookies and similar technologies, even where the data is anonymous. (ICO)

You can manage cookies through your browser settings and, where available, through our website cookie banner.

9. Payments

We may take payments through our website or payment links using Stripe.

Stripe may process payment information as an independent service provider. We do not store full card details directly on our own systems.

Payment data may be used to:

Process payments

Manage billing

Prevent fraud

Keep financial records

Comply with tax and accounting requirements

10. Platforms and service providers we use

We may use trusted third-party platforms and service providers to operate our business and deliver our services.

These may include:

GoHighLevel

Pipedrive

Google Workspace

Google Sheets

Zapier

OpenAI / ChatGPT

Twilio

Stripe

Calendly

Meta Ads

Google Ads

WhatsApp

LinkedIn advertising tools

Analytics, hosting, email, cloud storage and reporting providers

We only share personal data where necessary and require service providers to handle personal data securely.

11. International transfers

Some of the platforms we use may process or store data outside the United Kingdom.

Where this happens, we will take appropriate steps to ensure that personal data remains protected, such as relying on adequacy regulations, standard contractual clauses or other appropriate safeguards where required.

12. How long we keep personal data

We only keep personal data for as long as necessary for the purpose it was collected.

Our typical retention periods are:

Enquiry data: up to 24 months

Client records: for the duration of the client relationship and up to 6 years afterwards

Marketing data: until you unsubscribe or ask us to remove your details

Payment and billing records: usually up to 6 years for tax and accounting purposes

Website analytics data: according to the settings of the analytics provider

Client campaign data: as agreed with the client or set out in the relevant contract or data processing agreement

We may keep some information for longer where required by law, where there is an ongoing dispute, or where it is necessary to protect our legal rights.

13. How we protect personal data

We use appropriate technical and organisational measures to protect personal data.

These may include:

Password-protected systems

Access controls

Secure cloud platforms

Limited access to personal data

Data minimisation

Use of reputable service providers

Review of tools and workflows

Secure handling of client data

Staff or contractor access restrictions where applicable

However, no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

14. Your rights

Under UK data protection law, individuals have rights over their personal data.

These may include the right to:

Access personal data

Correct inaccurate personal data

Request deletion of personal data

Object to processing

Restrict processing

Request data portability

Withdraw consent where processing is based on consent

Object to direct marketing

Complain to the Information Commissioner’s Office

To exercise your rights, contact us at:

[email protected]

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk if you are unhappy with how your data has been handled.

15. Third-party links

Our website may contain links to other websites.

We are not responsible for the privacy practices, content or security of third-party websites. You should read their privacy policies before providing personal data.

16. Changes to this policy

We may update this Privacy Policy from time to time.

The latest version will be available on our website, with the “Last updated” date shown at the top.

17. Contact us

For questions about this Privacy Policy or how we handle personal data, contact:

STR8 FORWARD HOLDINGS LIMITED trading as People+ Agentics
Email: [email protected]
Website: www.people-plus.ai
Address: 124 City Road, Str8 Forward Holdings Limited, London, England, EC1V 2NX