Privacy notice

This notice explains how AndersonRisk Limited uses personal information: when you visit this website, when you contact us, and when you take part in a review we carry out for an organisation. We keep it short because we collect very little.

Who we are

AndersonRisk Limited is the controller of your personal information. We are registered in England and Wales, company number 09386279, with our registered office at 10 Fairway Close, Harpenden, AL5 2NN. For anything about your information, email Richard Anderson at rca@andersonrisk.com.

When you visit this website

The site sets no cookies and uses no analytics or tracking. It has no forms. Our hosting provider, Netlify, automatically records technical information when pages are requested, including your IP address, browser type and the time of your visit. This is used only to deliver the site securely and reliably, and Netlify keeps it for a limited period under its own policies.

When you contact us

If you email or phone, we receive your name, contact details and whatever you choose to tell us. We use this to reply, to discuss possible work, and to keep a record of our correspondence. We do not add you to a mailing list or send you marketing unless you ask us to.

When you take part in a review

If your organisation engages us, we may interview you and receive board papers and other documents that mention you. We use this information only to carry out the review for your organisation. Interview comments are treated in confidence, and our reports present findings without attributing views to named individuals unless you agree. The engagement letter with your organisation sets out how long review material is kept and how it is returned or destroyed.

Our lawful basis

We rely on our legitimate interests in responding to enquiries, running our business and carrying out reviews. Where we have a contract with you, we rely on that contract. We also keep some records because the law requires it, for example for tax and company purposes.

Who else handles your information

We use a small number of trusted providers who process information on our behalf: Netlify, which hosts this website, and Microsoft 365, supplied through GoDaddy, which provides our email. We do not sell your information or share it with anyone else, except where the law requires it or with our professional advisers under a duty of confidence.

Netlify and Microsoft are based in the United States, so some information may be processed outside the UK. Where that happens, it is protected by safeguards recognised under UK data protection law.

How long we keep it

We keep correspondence for as long as it is useful, and business records for up to six years after our last dealings with you, unless the law requires longer. Review material is kept as agreed in the engagement letter.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to ask for it to be transferred to someone else. To use any of these rights, email rca@andersonrisk.com. We will respond within one month.

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

If we change how we use personal information, we will update this page and the date at the top.