Last updated 14 August 2026. Clients hand me the true state of their businesses. Privacy isn’t a compliance page here — it’s the working condition of the whole practice. But here is the compliance page anyway, plainly written.
Anaptyx UK (Jessica Middleton) is the data controller for personal information handled through this website and our engagements. Contact for anything in this policy: hello@anaptyxuk.com.
anaptyxuk.com is a static website. It sets no cookies, runs no analytics, uses no tracking pixels and embeds no third-party advertising. The free interactive experience runs entirely in your browser: your answers are not recorded, stored or sent anywhere. Forms on this site open an email in your own mail app rather than storing anything on the site. That is why there is no cookie banner — there is nothing to consent to.
When you contact us or apply — your name, email address and whatever you choose to tell us about your business. Used to reply to you and assess fit. Lawful basis: our legitimate interest in responding to enquiries, and steps taken at your request before entering a contract.
When you become a client — contact details, booking details, and the business information you share for the engagement: financial data, organisational information, and your account of the business. This can include information about other people in your business (roles, responsibilities, pay); you are responsible for being entitled to share it, and we handle it with the same care as everything else. Used solely to deliver the engagement. Lawful basis: performance of a contract, and our legitimate interest in doing the work properly.
When you pay — payment is processed by Stripe. We receive confirmation of payment and your billing details; we never see or store your card number. Lawful basis: performance of a contract and our legal obligations to keep business records.
We do not buy data, sell data, or send marketing emails to people who haven’t asked for them.
We use a small number of established providers to run the practice: Microsoft 365 (email, calendars, bookings and secure file storage on OneDrive), Stripe (payments), and Netlify (website hosting). Each processes data under its own security and data-processing commitments, and some may process data outside the UK under recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses. We do not share your information with anyone else unless the law requires it.
Enquiries that go nowhere are deleted within a year. Client engagement materials — evidence packs, working papers, readings — are kept for the duration of the engagement and then retained securely for up to six years, in line with UK record-keeping norms for business and tax purposes, after which they are deleted. If you would like your engagement materials deleted sooner, ask; unless a legal obligation prevents it, we will.
Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected, to have it deleted where there is no lawful reason to keep it, to object to or restrict processing, and to receive a copy in a portable format. Write to hello@anaptyxuk.com and it will be handled personally, normally within a month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk — though we would rather you told us first, and we will deal with it properly.
Data protection law sets the floor, not the standard. Everything a client shares in an engagement is treated as confidential regardless of whether it is technically “personal data”, and anything ever published about client work is anonymised beyond recognition. The case files on this site are about patterns, not identities.
If this policy changes, the new version appears here with a new date at the top. If a change materially affects existing clients, we will tell you directly.