Privacy Policy

Who we are

Anacruses Associates Ltd (Company No. 14420827, VAT No. 468 6796 17) is an ISO management systems consultancy based in Hertfordshire, UK. We are the data controller for personal data collected through this website.

Contact: rob.pragnell@anacruses.co.uk  |  07792 259840

We are registered with the Information Commissioner's Office (ICO).

What data we collect and why

Contact form

When you submit our contact form, we collect your name, email address, and the content of your message. We use this to respond to your enquiry. The legal basis is our legitimate interest in responding to business enquiries. Data is processed by Netlify (our hosting provider) and stored in accordance with their data processing terms.

Newsletter subscription

When you sign up for our newsletter, we collect your email address. We use this to send you periodic ISO Insights emails. The legal basis is your consent. Your data is stored by Brevo (formerly Sendinblue), our email marketing platform, which is based in the EU and processes data in accordance with GDPR. You can unsubscribe at any time using the link in any email we send.

Website analytics

We use Google Analytics 4 to understand how visitors use our website. This collects anonymised data about pages visited, time on site, and traffic sources. Google Analytics uses cookies. The legal basis is your consent, which you can manage via our cookie settings. Google may transfer data to the United States — this is covered by Google's Standard Contractual Clauses.

Sales pipeline and lead generation

We use automated tools to identify businesses that may benefit from ISO consultancy services, using publicly available information. Where we contact businesses, we do so on the basis of legitimate interest. We do not collect or store personal data about individuals without their knowledge in any system that is not required to be disclosed under data protection law.

How long we keep your data

Contact form enquiries: up to 2 years from last contact, or until you ask us to delete it.

Newsletter: until you unsubscribe, at which point your email is removed from our active list within 10 days.

Analytics data: 14 months (Google Analytics default retention period).

Who we share your data with

We do not sell your personal data. We share data only with the following processors, each bound by data processing agreements:

• Netlify, Inc. — website hosting and form processing (US, covered by SCCs)
• Brevo SAS — email marketing platform (EU)
• Google LLC — analytics (US, covered by SCCs)
• Anthropic, PBC — AI-assisted content generation (US, covered by SCCs)

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Object to processing based on legitimate interest
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, contact us at rob.pragnell@anacruses.co.uk. We will respond within one calendar month.

Cookies

We use the following cookies:

• Google Analytics (_ga, _ga_*): Analytics cookies — set only with your consent
• Brevo (sib_cuid): Set when you interact with our newsletter signup form
• Cookie consent (anacruses_cookie_consent): Remembers your cookie preferences

You can manage your cookie preferences at any time using the cookie settings link in the footer.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated. Significant changes will be notified to newsletter subscribers.