This Privacy Policy explains how Anhome ("we", "us") collects, uses, discloses, and protects personal data when you use our website, and the rights you have over that data. It is written to comply with the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
Who we are
The data controller responsible for your personal data is [Anhome - registered entity name & address]. For any privacy question or to exercise your rights, contact us at [email protected].
What data we collect
- Contact data you provide - e.g. the email address you submit when subscribing to our newsletter.
- Usage data - privacy-friendly, aggregated analytics about which pages are viewed. Not used to identify you.
- Technical data - IP address, browser, and device info collected automatically in server logs for security and diagnostics.
- Cookie data - see our Cookie Policy for the full breakdown.
Lawful basis for processing
Under the GDPR we rely on the following lawful bases:
- Consent - for the newsletter and non-essential cookies. You may withdraw consent at any time.
- Legitimate interests - for security, fraud prevention, and aggregate site analytics, balanced against your rights.
- Legal obligation - where we must retain or disclose data to comply with the law.
How we use your data
- To send the newsletter you requested.
- To measure and improve which content is useful, in aggregate.
- To keep the site secure and operating correctly.
We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal effects.
Sharing and processors
We share data only with vetted processors acting on our instructions (e.g. email-delivery and analytics providers), each bound by a data-processing agreement. We may disclose data where required by law.
International transfers
Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision.
Data retention
We keep newsletter contact data until you unsubscribe or ask us to delete it. Aggregated analytics are retained no longer than necessary; server logs are rotated on a short cycle.
Your rights
Subject to applicable law, you have the right to:
- Access - request a copy of the personal data we hold about you.
- Rectification - correct inaccurate or incomplete data.
- Erasure - ask us to delete your data ("right to be forgotten").
- Restriction - limit how we process your data.
- Portability - receive your data in a portable format.
- Object - object to processing based on legitimate interests or direct marketing.
- Withdraw consent - at any time, without affecting prior lawful processing.
California residents additionally have the right to know, delete, correct, and opt out of any sale/sharing of personal information, and not to be discriminated against for exercising these rights. To exercise any right, email [email protected]. We respond within the timeframes required by law (30 days under GDPR; 45 days under CCPA).
Children's privacy
The site is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Complaints
You may lodge a complaint with your local supervisory authority (in the EEA/UK, your Data Protection Authority). Please contact us first at [email protected] so we can resolve the matter.
Changes to this policy
We will post any changes here and update the "last updated" date above. Material changes will be highlighted.