Privacy Notice.

Who I Am

This site, andersonco.uk, is run by Mrs Elle Anderson, an independent consultant trading as Anderson & Co, United Kingdom. I am the data controller for the personal data described here. You can reach me at elle [at] andersonco [dot] uk for anything in this notice.

What I Collect, and Why

The Product Templates signup. If you request the templates, I ask for your first name, last name and email address. The form is run by Kit (Kit.com, formerly ConvertKit). You must confirm your email address before anything is sent, and your details go onto my subscriber list. I use that list to deliver the toolkit and, occasionally, to share new writing. The legal basis is your consent, which you can withdraw at any time: every email has an unsubscribe link, and one click removes you.

CV requests. If you request my CV, the form asks for your first name, last name and email address. Like the toolkit signup it is run by Kit, and you must confirm your email address before I act on the request. Your details go onto the same subscriber list. The legal basis is your consent, and my legitimate interest in responding to a request you made. I use the details to send the CV, to follow up on your request and, occasionally, to share new writing. Every email has an unsubscribe link.

Buying the Product Field Kit. Purchases are handled by Stripe, through Stripe Managed Payments, who act as the reseller and merchant of record. They collect your payment details, address for tax and order information under their own privacy policy, and I never see your card details. Stripe shares your name, email address and order details with me so I can send you the kit and support you. I then add your name and email to my customer list in Kit, tagged as a Field Kit customer, so I can send you updates about the kit you bought. The legal basis is the contract between us and my legitimate interest in supporting customers. You can unsubscribe from anything that isn't about your purchase at any time.

The Product Field Kit app and free tools. The kit app and the free tools save your work only in your own browser on your own device. Nothing you type in them is sent to me.

The product sense coach. If you use the free product sense coach on the Field Kit page, your messages go to the same small Cloudflare proxy as the New Leaf coach, which forwards them to Anthropic's API and returns the reply without keeping a copy. Please don't share anything confidential.

Usage counts for the AI tools. The coach server counts how many people use New Leaf and the product sense coach, and how many sessions start. It also keeps a running total of how many times someone presses Start on New Leaf; each press sends an empty tick that carries nothing about you. In the same way, it counts how often each free New Leaf guide is downloaded: a download sends an empty tick naming only the guide. To count a person once a day, it keeps a scrambled, one-way code made from your network address for two days, then deletes it. It never stores names, email addresses or anything you type.

Page and click counts. On every page, including New Leaf, the same coach server counts which pages are visited and which links and buttons are pressed, so I can see which tools people find useful. Each visit sends a short label, such as the page name or the button’s wording. On New Leaf the label is only a fixed button name or link, never anything from your story. Cloudflare adds the country and town the visit came from, worked out from your network address. A person is counted once a day for each thing, using a scrambled code that’s deleted after two days. No cookies are used, and nothing you type is ever sent. Only I can see these counts.

Ask About Elle and live chat. On the home, About, CV, Services and Coaching pages, Miranda, my Executive Assistant (a digital agent built on Claude), answers questions about my work. Your question goes through the same coach server to Anthropic, the company that makes Claude, so an answer can be written. The conversation is saved, with the date, the page and the town and country it came from, so I can read it and follow up. It is not linked to your name or network address, and I delete it after twelve months. Please do not share anything confidential with Miranda. If you choose Message Elle, the chat runs on tawk.to, which keeps the conversation so I can reply, and which may set its own cookies to recognise a returning visitor.

Booking a conversation. Meeting bookings run through Microsoft Bookings, under Microsoft's own terms and privacy policy.

Site hosting and technical logs. The site is hosted on Cloudflare Pages, and its code is stored on GitHub. Like most hosts, Cloudflare may log visitor IP addresses for security and operational purposes under its own privacy policy. I do not receive those logs.

Live chat and visitor analytics. The chat window on this site is provided by tawk.to, which processes technical data about your visit: IP address, approximate location (city level), device and browser type and the pages you view. If you use the chat, the conversation and anything you choose to share in it are also processed so I can reply. The legal basis is my legitimate interest in understanding how the site is used and in answering visitors' questions. Chat and analytics providers act as my processors.

Who Else Touches the Data

I use a small number of processors to run this site: Kit (email list, toolkit delivery, CV requests and Field Kit customers), Stripe (Field Kit purchases), Cloudflare (hosting, the coach server and anonymous counts), GitHub (code storage) and Microsoft (bookings), plus tawk.to (live chat and visitor analytics). New Leaf, the coaching tool at andersonco.uk/newleaf, keeps everything you type on your own device, except the optional coach: messages you type into the coach panel go to a small proxy I run on Cloudflare, which forwards them to Anthropic's API and returns the reply without keeping a copy; Anthropic's API terms apply to those messages. The press page embeds a recording hosted by Vimeo, which sets no tracking cookies here because the player is loaded with its do-not-track option; Vimeo may still record technical data if you play the video. Some are based in the United States; transfers rely on the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses, per each provider's documentation. I do not sell personal data, and I do not share it with anyone else except where the law requires.

How Long I Keep It

Subscriber details stay on the list until you unsubscribe or ask me to delete them. CV request emails are kept for as long as the conversation is live and deleted when no longer needed. Chat transcripts and analytics data follow the retention settings of the provider, kept no longer than needed to answer you and understand site usage.

Your Rights

Under UK GDPR you can ask me for access to the personal data I hold about you, correction, deletion, restriction of processing, a portable copy or to object to processing based on legitimate interest. You can withdraw consent at any time without affecting the lawfulness of earlier processing. Email me at the address in the Who I Am section above, and I will respond within one month. If you are unhappy with how I handle your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

This site sets no cookies of its own. Embedded services (the Kit signup form, Microsoft Bookings and chat or analytics where enabled) may set their own cookies or similar technologies under their own policies; nothing here is used for advertising.

Changes

If this notice changes, the new version appears on this page with a new date at the top. Material changes to how subscriber data is used will be announced to the list before they take effect.