Who we are
This site is run by Farnam BV, trading as Agentique, at Mechelsesteenweg 271b, 2018 Antwerp, Belgium, registered in the Belgian Crossroads Bank for Enterprises under company number BE 1023.134.521. Farnam BV is the controller for all processing described here, which in plain terms means we decide why your data is used and we are the ones answerable for it.
Questions about your data, or any of the requests below, go to Manu Labarbe at manu@agent-ique.com. We answer within one month, as the GDPR requires, and usually within a day or two. If a request is genuinely complex we may take up to two further months, and we will tell you why within the first month rather than going quiet.
We have not appointed a Data Protection Officer, and we are not required to: we are not a public authority, our core activity is not large-scale systematic monitoring, and we do not process special-category data on a large scale (Art. 37 GDPR). Manu Labarbe handles data protection questions personally at the address above.
What we collect
When you fill in the contact form
Your name, work email, company name, and whatever you write in the message field. That is the whole list — we do not ask for anything we do not need to reply to you.
When you subscribe to our updates
Your email address, plus whether and when you opened or clicked an email, so we can tell whether the list is worth anyone's time.
When you simply read the site
Standard technical data your browser sends: IP address, browser and device type, referring page, and the pages you viewed. See Cookies for what is and is not set.
What we never collect
We do not ask for special-category data — health, beliefs, political opinions, biometrics — and we would rather you did not put any in the message field.
Why, and on what basis
Under the GDPR we need a lawful basis for each purpose. Ours are:
- To answer your enquiry. Basis: taking steps at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in responding to people who contact us (Art. 6(1)(f)).
- To deliver work you have engaged us for. Basis: performance of our contract with you (Art. 6(1)(b)).
- To send you our updates. Basis: your consent (Art. 6(1)(a)), given by ticking the box on the form. Withdrawing it is one click in any email, and it does not affect anything else.
- To keep the site working and secure. Basis: our legitimate interest in a site that functions and is not being abused (Art. 6(1)(f)).
- To meet our legal obligations. Basis: legal obligation (Art. 6(1)(c)) — accounting records, mostly.
Note that contacting us does not sign you up for marketing. Those are separate, and the second one is opt-in.
Who else sees it
We do not sell your data, and we do not share it for anyone else's marketing. It reaches three kinds of recipient:
- Our processors — each bound by a data processing agreement and able to act only on our instructions. In full, because a list you have to go and find is not really a list:
- Railway — hosting and the CRM database, so every contact record lives there.
- PostHog (EU cloud, Frankfurt) — product analytics and session replay, only once you have accepted.
- Resend — delivery of the alert emails our own team receives about a new enquiry.
- Anthropic — the assistant that researches a new enquiry. It receives the name, work email, company and message you submitted, together with what it finds publicly about the company. It is not used to train their models.
- Google Workspace — our mailboxes, so any reply we send you sits there.
- Professional advisers — accountants and lawyers, where they need it and are bound by confidentiality.
- Authorities — only where the law actually requires it.
Transfers outside the EU
We keep data in the EU wherever we can. Our analytics runs on PostHog's EU cloud in Frankfurt, so that one is not a transfer at all. Where a supplier processes data elsewhere, we rely on an adequacy decision or on Standard Contractual Clauses.
Current transfers to the United States: Railway (hosting and database),Resend (email delivery), Anthropic (enquiry research) andGoogle (our mailboxes). Google and, where they are certified, the others rely on the EU-US Data Privacy Framework; the remainder rely on Standard Contractual Clauses.
How long we keep it
- Contact form enquiries — 12 months from your last message, then deleted.
- Client records — for the duration of the engagement and then seven years after the end of the financial year they relate to, which is the retention period Belgian accounting and tax law imposes on us. We cannot delete these earlier, even on request.
- Mailing list — until you unsubscribe, plus a suppression record so we do not accidentally add you back.
- Server logs — 90 days, then deleted automatically.
- Website behaviour we record after you consent — 12 months from your last visit. If you withdraw consent we stop immediately and remove the identifier from your device.
- Session recordings — 30 days, after which PostHog deletes them and they are gone for us too. That is shorter than the 12 months above, which covers the page-by-page record we keep ourselves.
- Research our assistant produced about an enquiry — deleted with the enquiry it belongs to.
Your rights
Wherever you live, if we hold your data you can ask us to:
- Show you what we hold and give you a copy.
- Correct anything that is wrong or out of date.
- Delete it — we will, unless a legal obligation says otherwise.
- Restrict or object to a particular use, including anything based on legitimate interest.
- Take it with you in a portable, machine-readable format.
- Withdraw consent at any time, for anything based on it.
Email manu@agent-ique.com and we will action it. There is no charge and you do not need to give a reason. We may ask you to confirm who you are, but only where we genuinely cannot tell — we will not use identity checks as a delaying tactic.
If you think we have handled it badly, you can complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels — dataprotectionauthority.be. We would rather you told us first, but it is your call.
Cookies
Nothing here profiles you across other sites and there are no advertising pixels. Unless you accept analytics, this site puts nothing at all on your device — no cookies for sessions, for security or for anything else. There is no "strictly necessary" list below because there is nothing in it.
Analytics
We use PostHog, on its EU cloud in Frankfurt, to see which pages earn their place. Alongside pages and clicks it notes clicks that landed on nothing, how quickly the page rendered, and any error the page throws — and an error report can carry its message, a stack trace and the address you were on. What it does depends on what you have told us:
- Before you choose — nothing whatsoever is stored on your device: no cookies, no local storage, no identifier of any kind. PostHog counts the visit against a hash it works out on its own servers from a value it rotates and destroys daily, so tomorrow you read as a different person to it. We see pages, clicks and referrers in aggregate, and there is no session recording, because recording needs storage it does not have.
- If you decline — the same, and it stays that way: no cookies, and nothing that recognises you on a later visit. Two small things are written, and both exist to honour the refusal rather than to follow you — a note that you said no, so that we stop asking, and a tab-scoped id that PostHog discards the moment you close the tab.
- If you accept — PostHog sets a cookie so your visits join up over time, and may record a replay of your session. Every form field in those replays is masked, always: what you type into the contact form is never in one. Accepting also switches on the first-party record described below, and lets us connect both to you by name if you get in touch — see Putting a name to a visit.
You can change your mind at any time, and it takes one click: Cookie preferences, in the footer of every page. Declining is not a second-class option — nothing about the site works less well for it. Your browser can block or clear the lot independently.
Our own record of your visit
Also only if you accept, we keep a record of the visit in our own CRM rather than in a third party's: a cookie named aq_vid, kept for a year, holding a random id that is not your name and not your email. Against it we note which pages you opened, how far down them you read, and when you follow a link off this site.
The purpose is narrow and worth stating plainly: if you get in touch, we would like to see what you had already read, so the conversation starts somewhere useful rather than at the beginning. Decline, or simply ignore the banner, and none of it happens — no id is generated and nothing is sent. Withdraw later and we delete the id from your device at the same moment we stop collecting.
Putting a name to a visit
This is the part most notices leave you to work out for yourself, so here it is plainly. Everything above is collected against a random id rather than a name. The moment you send us an enquiry, we connect that id to you — which means the pages you read before you were willing to say who you were become part of your record, and the session replay PostHog made becomes a replay we can find by your name and watch.
Two limits on that are worth stating. It only ever happens if you accepted analytics: decline or ignore the banner and there is no id to connect and no replay to find. And your name and your email are never sent to PostHog — the connection is held here, in our own CRM, and PostHog goes on knowing you only as a random string.
Withdraw consent and we stop, delete the id from your device, and no longer open those recordings. You can also ask us for a copy of them, or ask us to delete them, and we can now actually find them to do either — which was not true when the visit and the person were kept apart.
Things we embed
Some parts of the page are fetched from other companies' networks: the 3D scenes on the homepage and the workshops page come from Spline, our scripts from the jsDelivr and unpkg CDNs, and some portrait images from randomuser.me. We checked each of them — none sets a cookie. They do unavoidably see your IP address and which file you asked for, which is true of anything loaded over the internet. Our fonts are served from our own domain precisely so they do not. Our fonts are served from our own domain precisely so they do not.
AI and automated decisions
Since we build agents for a living, it is worth being explicit: nothing on this site makes an automated decision that produces a legal or similarly significant effect on you. Your enquiry is read by a person.
Here is exactly what happens, because we would rather over-explain this than have you guess. When an enquiry arrives, an assistant built on Anthropic's Claude reads what you submitted — your name, work email, company and message — and researches your company from public sources. It writes a short brief and a fit score, and it drafts a reply. Anthropic processes this as our processor under their commercial terms and does not use it to train their models.
That score is a note to ourselves, not a decision about you. It does not decide whether you get a reply, what you are quoted, or anything else with a legal or similarly significant effect, so Art. 22 GDPR is not engaged. A person reads every enquiry and every drafted reply before anything is sent. If you would rather we did not run this on your enquiry at all, say so in the message field or email us and we will switch it off for you and delete what it produced.
Changes to this notice
When this changes we update the date at the top. If a change materially affects how we handle your data, we will tell the people it affects rather than quietly amending the page.
Prefer to ask a person? Get in touch and we will answer directly.