Privacy notice.

Who I am

This site, andersonco.uk, is run by Elle Anderson, trading as Anderson & Co, United Kingdom. I am the data controller for the personal data described here. You can reach me at elle@andersonco.uk for anything in this notice.

What I collect, and why

The Product Toolkit signup. If you request the toolkit, I ask for your first name, last name, and email address. The form is run by Kit (Kit.com, formerly ConvertKit). You must confirm your email address before anything is sent, and your details go onto my subscriber list. I use that list to deliver the toolkit and, occasionally, to share new writing. The legal basis is your consent, which you can withdraw at any time: every email has an unsubscribe link, and one click removes you.

CV requests. If you request my CV, the form collects your email address and anything you tell me about what you are hiring for. It is delivered to me by Formspree. The legal basis is your consent and my legitimate interest in responding to you. I use it to send the CV and follow up on your request, nothing else.

Booking a conversation. Meeting bookings run through Microsoft Bookings, under Microsoft's own terms and privacy policy.

Site hosting and technical logs. The site is hosted on GitHub Pages. Like most hosts, GitHub may log visitor IP addresses for security and operational purposes under its own privacy policy. I do not receive those logs.

Live chat and visitor analytics. The chat window on this site is provided by tawk.to, which processes technical data about your visit: IP address, approximate location (city level), device and browser type, and the pages you view. If you use the chat, the conversation and anything you choose to share in it are also processed so I can reply. The legal basis is my legitimate interest in understanding how the site is used and in answering visitors' questions. Chat and analytics providers act as my processors.

Who else touches the data

I use a small number of processors to run this site: Kit (email list and toolkit delivery), Formspree (form delivery), GitHub (hosting), and Microsoft (bookings), plus tawk.to (live chat and visitor analytics). Some are based in the United States; transfers rely on the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses, per each provider's documentation. I do not sell personal data, and I do not share it with anyone else except where the law requires.

How long I keep it

Subscriber details stay on the list until you unsubscribe or ask me to delete them. CV request emails are kept for as long as the conversation is live and deleted when no longer needed. Chat transcripts and analytics data follow the retention settings of the provider, kept no longer than needed to answer you and understand site usage.

Your rights

Under UK GDPR you can ask me for access to the personal data I hold about you, correction, deletion, restriction of processing, a portable copy, or to object to processing based on legitimate interest. You can withdraw consent at any time without affecting the lawfulness of earlier processing. Email elle@andersonco.uk and I will respond within one month. If you are unhappy with how I handle your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

This site sets no cookies of its own. Embedded services (the Kit signup form, Microsoft Bookings, and chat or analytics where enabled) may set their own cookies or similar technologies under their own policies; nothing here is used for advertising.

Changes

If this notice changes, the new version appears on this page with a new date at the top. Material changes to how subscriber data is used will be announced to the list before they take effect.