Privacy Notice

Anisar (operated by EREWHON LIMITED) respects your privacy and is committed to protecting your personal information.

For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is EREWHON LIMITED, 71–91 Aldwych, London, WC2B 4HN, United Kingdom.

This Privacy Notice explains how we collect, use, disclose, store and protect personal information when you visit our website, contact us or otherwise interact with us.

We process personal information in accordance with applicable UK data protection and privacy legislation, including:

• the UK General Data Protection Regulation (UK GDPR);
• the Data Protection Act 2018;
• the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), where applicable; and
• the Data (Use and Access) Act 2025, including relevant amendments to UK data protection legislation.

Depending on how you interact with us, we may collect and process personal information including:

Contact information

• Name
• Job title
• Company or organisation
• Email address
• Telephone number
• Business address

Communications

Information you provide when you contact us, including email correspondence, enquiries, requests for information, feedback and other communications with us.

Technical and website information

• IP address
• Browser type and version
• Device information
• Operating system
• Date and time of access
• Pages or resources requested
• Referring website or source
• Technical logs relating to website security and performance

Marketing information

• Your marketing preferences
• Newsletter subscriptions
• Records of consent
• Information relating to your interaction with our communications

We may collect personal information:

• directly from you when you contact us;
• when you submit an enquiry through our website;
• when you subscribe to a newsletter or other communication;
• automatically through our website and related technologies;
• through our business relationship with you or your organisation;
• from publicly available business sources; or
• from business partners or service providers where permitted by law.

Where we obtain personal information from sources other than directly from you, we will provide the information required under applicable data protection legislation where required.

Responding to enquiries

We use your contact information and the information contained in your enquiry to communicate with you and respond to your request. The lawful basis may be Article 6(1)(b) UK GDPR (steps at your request before entering into a contract, or to perform a contract) or Article 6(1)(f) UK GDPR (our legitimate interests in managing business communications).

Providing and managing our services

We may process personal information where necessary to provide our services, manage customer and supplier relationships, administer contracts, communicate regarding projects or services, and maintain appropriate business records — under Article 6(1)(b) UK GDPR, or Article 6(1)(f) for business-to-business relationships.

Website operation and security

We process certain technical data to provide and maintain our website, detect and prevent security threats, protect our IT systems, investigate technical problems, maintain performance, and prevent misuse — under Article 6(1)(f) UK GDPR.

Compliance with legal obligations

We may process personal information where necessary to comply with applicable laws, regulatory requirements, court orders, tax and accounting obligations, or lawful requests from competent authorities — under Article 6(1)(c) UK GDPR.

Establishing or defending legal claims

Where necessary, we may process and retain information for the establishment, exercise or defence of legal claims, relying on our legitimate interests under Article 6(1)(f) UK GDPR and any other applicable legal basis.

If you voluntarily subscribe to our newsletter or expressly request marketing communications, we may use your contact information to send you company news, business updates, project information, information about our services, and invitations or other relevant communications. Where consent is required, the lawful basis is Article 6(1)(a) UK GDPR.

You may withdraw your consent or unsubscribe at any time by using the unsubscribe option in the relevant communication, or by contacting us at info@anisar.com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Where electronic marketing is carried out, we will also comply with applicable requirements under PECR.

Our website may use cookies and similar storage or access technologies. Some technologies may be necessary for website functionality, security, network management, user preferences, or delivery of services requested by the user.

Where cookies or similar technologies require consent under applicable UK law, we will request your consent before using them. You can manage or withdraw your choices through the cookie settings available on our website. Non-essential cookies will not be used without consent where consent is legally required.

We may share personal information with trusted third parties where necessary for legitimate business purposes or where required by law, including providers of:

• Website hosting and infrastructure
• Cloud computing services
• Email and communication services
• IT support
• Cybersecurity services
• Newsletter and marketing systems
• Professional services such as legal, accounting or auditing services

Where a service provider processes personal information on our behalf, we take appropriate steps to ensure contractual and data protection requirements are in place. We may also disclose personal information where required by law, in response to lawful requests from public authorities, to protect our legal rights, in connection with legal proceedings, or as part of a corporate restructuring, merger, acquisition or sale.

We do not sell personal information to third parties.

Some of our service providers or business partners may process personal information outside the United Kingdom. Where such a transfer is subject to UK international data transfer restrictions, we take appropriate steps to ensure compliance with applicable law, which may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses;
• another legally recognised appropriate safeguard; or
• an applicable statutory exception.

Where required, we also undertake appropriate assessments regarding the protection of personal information in the destination country.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected. When determining an appropriate retention period, we may consider the nature and purpose of the information, the duration of our relationship with you, contractual requirements, legal and regulatory obligations, accounting and tax requirements, potential disputes or legal claims, and security and fraud prevention requirements.

Once personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our applicable retention procedures.

We take appropriate technical and organisational measures designed to protect personal information from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, or other unlawful processing.

Access to personal information is limited, where appropriate, to individuals and service providers who require access for legitimate business purposes. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Depending on the circumstances, you may have the following rights under UK data protection law:

To exercise any of these rights, contact info@anisar.com. We may need to request appropriate information to verify your identity before processing certain requests.

If you have concerns about how EREWHON LIMITED collects, uses, stores or otherwise processes your personal information, you have the right to make a data protection complaint directly to us at:

EREWHON LIMITED, 71–91 Aldwych, London, WC2B 4HN, United Kingdom — info@anisar.com

We will acknowledge a complaint within the period required by law and, without undue delay, investigate it, keep you informed where appropriate, and communicate the outcome.

You also have the right to raise concerns with the UK's data protection supervisory authority, the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom — Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns directly before you approach the ICO, although this does not affect your right to contact them.

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy notice of any third-party website before providing personal information.

We may update this Privacy Notice from time to time to reflect changes to our website or services, how we process personal information, our service providers, or applicable legal or regulatory requirements. The latest version will be made available on our website, and significant changes may also be communicated through other suitable means.

If you have questions about this Privacy Notice, wish to exercise your data protection rights, or wish to make a data protection complaint, please contact:

↑ Back to top