Get in touchThe providers that process personal information for Agent Build Club, what each one handles, where, and on what transfer basis.
Anyone who wants to know which providers handle their information for us
Version 1.1
October 24, 2026
This page lists the providers that process personal information on behalf of Commsarc Limited, trading as Agent Build Club (“ABC”, “we”, “us”, “our”). It forms part of our privacy information and is read together with our Privacy Policy at /privacy-notices/privacy-policy.
We keep the list here, rather than inside the Privacy Policy, so that it can be kept current without the policy having to change.
A processor is an organisation that handles personal information on our behalf and on our instructions. It may not use that information for its own purposes. We remain the controller and stay responsible for how the information is used.
We engage every processor under a written contract that meets Article 28 of the UK GDPR. Each contract requires the processor to:
Some providers also process a limited amount of information as a controller in their own right, for example to administer accounts or to understand how their platform is used. Where that happens, the provider’s own privacy notice applies to that processing.
Some of our providers process information outside the UK. Where they do, we rely on UK adequacy regulations where they apply. These cover, for example, countries in the European Economic Area and, for organisations certified to it, the UK Extension to the EU-US Data Privacy Framework.
Where no adequacy regulations apply, we use the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and we carry out a transfer risk assessment before the transfer starts.
| Provider | What it does for us | What it handles | Where it processes | Transfer basis |
|---|---|---|---|---|
| Webflow, Inc. | Hosts our website and its content | Technical information from visits to the site, such as IP address and device type, and anything sent through a form built on the site | United States | UK Extension to the EU-US Data Privacy Framework |
| Google LLC (Google Analytics) | Measures how our website is used, only where you allow analytics cookies | Technical and usage information from visits to the site, such as pages viewed, device type and approximate location | United States | UK Extension to the EU-US Data Privacy Framework, under Google’s data processing terms [confirm the terms are accepted in our Analytics account] |
| Typeform, S.L. | Runs our forms for registrations, enquiries and feedback, our research surveys, and our AI interviews, including the optional interview in our registration forms | Your answers to our forms and surveys; the text or audio of an AI interview, and its summary | Spain (EU); response data may be stored in the United States [confirm the hosting region on our plan] | UK adequacy regulations for the EU; onward transfers to the United States under Typeform’s own safeguards [confirm, including the sub-processors used for the AI interview] |
| Luma Labs, Inc. (Luma) | Runs event registration and ticketing | Names, email addresses, registrations, your answers to registration questions and attendance | United States | Standard Contractual Clauses under Luma’s data processing agreement [confirm it includes the UK Addendum], with a transfer risk assessment |
| CircleCo, Inc. (Circle) | Hosts our community spaces and sends our newsletter | Profile information, posts, comments and messages, group membership, activity in the space, and newsletter subscriptions | United States | UK Addendum to the EU Standard Contractual Clauses, under Circle’s data processing addendum |
| Formagrid Inc (Airtable) | Holds our registration, contact and programme records | Registration and contact details, records of introduction requests, and programme records | United States | UK Addendum to the EU Standard Contractual Clauses, under Airtable’s data processing addendum |
| Zapier, Inc. | Moves information between our forms, records and email tools | Whatever passes between those tools, such as registration and contact details | United States | UK Extension to the EU-US Data Privacy Framework |
| MailerSend, Inc. | Sends our registration confirmations and programme emails | Names, email addresses, the content of the emails and whether they are delivered and opened | European Union (Belgium) for storage; MailerSend, Inc. is based in the United States | UK adequacy regulations for the EU, and the UK Extension to the EU-US Data Privacy Framework |
| Zoom Communications, Inc. (Zoom) | Runs our online calls, including one-to-one research interviews and online sessions | Names, email addresses and meeting details; the audio, video and chat of a call; and a recording or transcript only where you have agreed to one | United States, and other countries where Zoom runs its data centres | UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses and the UK IDTA under Zoom’s data processing addendum [confirm the addendum applies to our account, and whether AI features such as meeting summaries are switched off] |
| Microsoft (Microsoft 365) [confirm the contracting entity] | Books and holds our one-to-one interviews with businesses and innovators, and runs our email, calendar and documents | Names, email addresses, booking details and correspondence; the audio, video and notes of interviews held on it; and a recording or transcript only where you have agreed to one | United Kingdom for our core stored data; some services may process data in the European Union or the United States [confirm our tenant’s data location] | UK adequacy regulations for the EU, and the UK Extension to the EU-US Data Privacy Framework, under Microsoft’s data protection addendum |
When we add or replace a processor, we update this page and its version history before the new provider starts handling personal information. Because our documents describe what each collection point does rather than which tool runs it, a change of provider is recorded here without the Privacy Policy or programme notices having to change.
If you would like a copy of the data processing agreement or transfer risk assessment for a particular provider, email privacy@agentbuild.club. We will send it to you, with any commercially confidential terms removed.
| Version | Effective date | Changes |
|---|---|---|
| 1.1 | 24 October 2026 | Added Zoom and Microsoft 365, for online calls and one-to-one research interviews. Typeform’s entry now covers research surveys and AI interviews. |
| 1.0 | 15 October 2026 | First version. The list of processors moved here from the Privacy Policy. |
Questions about any of this? Email privacy@agentbuild.club
← All privacy notices