Privacy Statement

1. Who we are

Anagallis Communications Ltd is a corporate and financial communications consultancy registered in England and Wales, company number 10007852, with its registered office at St. John's Innovation Centre, Cowley Road, Cambridge CB4 0WS.

We are the data controller for the personal information described in this notice. That means we decide how and why your information is used.

If you have any question about this notice or about how we handle personal information, contact Nigel Szembel at nigelszembel@anagallis.co.uk.

We are registered with the Information Commissioner's Office under registration number ZA742676.

2. What this notice covers

This notice explains how we collect and use personal information when you visit our website, contact us, or work with us as a client, supplier or professional contact. It also explains your rights and how to exercise them.

Separate arrangements may apply to information we handle on behalf of a client under a specific engagement. Whether we act as a controller or as a processor varies by engagement and is set out in the relevant contract. Where we act as a processor, the client is the data controller and we act on their instructions.

3. The information we collect

Information you give us directly. When you complete our contact form, email us, call us or meet us, we may collect your name, your employer and job title, your email address, your telephone number, and whatever you choose to tell us about your enquiry.

Information we collect automatically. When you visit our website we may collect your IP address, the type of device and browser you are using, the pages you view and how long you spend on them, and the site or search that brought you to us. Some of this is collected through cookies, which are covered in our Cookie Notice.

Information from other sources. We may collect information about you from publicly available sources such as your employer's website, company registers, professional networks and published media, where this is relevant to a business relationship or a prospective one.

We do not collect special category data such as information about your health or your political opinions, and we do not collect criminal offence data.

4. How we use your information, and our lawful basis

Data protection law requires us to have a lawful basis for using your personal information. The table below sets out what we use it for and which basis applies.

  
What we use it forWhyLawful basis

Responding to an enquirySo that we can answer your question and keep a record of our correspondenceLegitimate interests: running and responding to enquiries about our business
Providing our servicesSo that we can deliver the work we have been engaged to do and administer the engagementPerformance of a contract, or legitimate interests where the contract is with your employer
Maintaining business relationshipsSo that we can stay in contact with clients, prospective clients, journalists and professional contactsLegitimate interests: developing and maintaining professional relationships
Understanding how our website is usedSo that we can see how the site is performing and improve itConsent, given through our cookie banner
Meeting legal and regulatory obligationsSo that we can comply with tax, accounting, anti-money-laundering and other legal requirementsLegal obligation
Establishing or defending legal claimsSo that we can protect our position where a dispute arisesLegitimate interests: protecting our legal position

What we use it for	Why	Lawful basis
Responding to an enquiry	So that we can answer your question and keep a record of our correspondence	Legitimate interests: running and responding to enquiries about our business
Providing our services	So that we can deliver the work we have been engaged to do and administer the engagement	Performance of a contract, or legitimate interests where the contract is with your employer
Maintaining business relationships	So that we can stay in contact with clients, prospective clients, journalists and professional contacts	Legitimate interests: developing and maintaining professional relationships
Understanding how our website is used	So that we can see how the site is performing and improve it	Consent, given through our cookie banner
Meeting legal and regulatory obligations	So that we can comply with tax, accounting, anti-money-laundering and other legal requirements	Legal obligation
Establishing or defending legal claims	So that we can protect our position where a dispute arises	Legitimate interests: protecting our legal position

We do not send marketing emails and we do not operate a mailing list.

Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights. You can ask us for details of that assessment, and you can object to processing on this basis. See section 9.

5. Who we share your information with

We do not sell personal information, and we do not share it for anyone else's marketing. We share it only in the following circumstances:

With Squarespace, which hosts our website and provides its analytics. Squarespace is bound by contract to use the information only on our instructions.
With the provider of our email service, through which enquiries reach us.
With professional advisers, including lawyers, accountants and insurers, where necessary.
With a client or another adviser, where doing so is part of the engagement we have been asked to carry out, and you would reasonably expect it.
With regulators, law enforcement or other authorities, where we are required to do so by law.
With a buyer or successor, if our business is sold or reorganised.

6. Sending information outside the UK

Squarespace, which hosts our website, is based in the United States, so information collected through the site is transferred outside the United Kingdom. Squarespace uses the European Commission Standard Contractual Clauses together with the UK International Data Transfer Addendum approved by the Information Commissioner's Office as the legal basis for those transfers.

Where any other provider stores or accesses information outside the United Kingdom, we make sure it is protected by an appropriate safeguard, which will usually be UK adequacy regulations covering the destination country, or the International Data Transfer Agreement or Addendum approved for use in the UK.

7. How long we keep your information

We keep personal information only for as long as we need it, and then delete it or anonymise it.

Type of informationHow long we keep itEnquiries that do not lead to work24 months from the end of the last contactClient engagement records7 years from the end of the engagement, unless the contract makes other provisionEngagement material at the end of a mandateDeleted 24 months after the end of the contract, unless the contract makes other provisionFinancial and accounting records7 years, as required for tax purposesWebsite analyticsAs set by our website platform

8. How we keep your information secure

We take appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access. Access to client files is limited to the director. Multi-factor authentication is active across all our business systems, and information is encrypted in transit.

No transmission over the internet is completely secure. If you need to send us something sensitive, contact us first and we will agree a secure method.

9. Your rights

You have the following rights over your personal information:

To be told how we use it, which is what this notice is for.
To ask for a copy of the information we hold about you.
To have inaccurate information corrected.
To ask us to delete information, in certain circumstances.
To ask us to restrict how we use it, in certain circumstances.
To ask us to transfer it to you or another organisation, where it was provided by you and we rely on consent or a contract.
To object to our use of it where we rely on legitimate interests.
To withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at nigelszembel@anagallis.co.uk. We will respond within one month. If your request is complex, we may extend this by a further two months and will tell you if we do.

10. Making a complaint

If you are unhappy with how we have handled your personal information, you can complain to us directly and we will investigate.

Send your complaint to Nigel Szembel at nigelszembel@anagallis.co.uk, or write to us at our registered office. We will acknowledge your complaint within 30 days of receiving it, tell you who is handling it, and respond to it without undue delay.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You can complain to the ICO at any time, but we would prefer the chance to put things right first.

11. Changes to this notice

We may update this notice from time to time. The date at the foot of this page shows when it was last changed. If we make a significant change, we will say so on our website.

12. How to contact us

Anagallis Communications Ltd
St. John's Innovation Centre
Cowley Road
Cambridge
CB4 0WS
United Kingdom

Email makingcontact@anagallis.co.uk.

Telephone +44 7802 362088.