Privacy & cookies.

This notice explains how Anthēon uses information from this website. For privacy questions or requests, contact hello@antheon.co.uk.

Enquiries

If you email us or submit the enquiry form, we use your name, email address, selected service and message to review and respond to your request. The form stores accepted messages in a private inbox hosted by Supabase. It does not send an automatic confirmation email. Only authorised Anthēon administrators can access that inbox. If the form cannot save your message, it tells you and offers email instead.

We process enquiries to take steps you request before entering a contract, or for our legitimate interest in responding to other business correspondence. Please do not include passwords, payment details or sensitive personal information.

Optional analytics

When enabled, we use Google Analytics 4 only after you accept optional analytics. It helps us understand visits to our public pages, service and contact-link clicks, form starts and accepted enquiries. A contact click does not tell us whether a call or message was completed. An accepted enquiry is not a qualified lead or sale.

We do not send form contents, names, email addresses, phone numbers, query strings or private account pages through our tracking helpers. Google may process technical information such as device and browser details when its analytics service is active. Read Google’s privacy policy for information about its service. Advertising personalisation and Google signals are disabled in our implementation. Vercel Web Analytics is not loaded.

You can reject analytics and continue using the site and its forms. You can withdraw your choice here or through “Cookie choices” on public pages. Withdrawal stops further collection and clears accessible Google Analytics cookies; it does not delete information already received by Google. Review cookie choices

Cookies and other storage

• Your analytics choice: stored on your device for up to 180 days so we can respect it. This preference is separate from optional analytics.
• Optional Google Analytics cookies: Google may set first-party cookies beginning _ga after acceptance. Our configured lifetime is up to 180 days, without automatic renewal.
• Essential functionality: the intro uses session storage to remember whether it has played. Private account and client-preview access use necessary session cookies where applicable.

Browser controls can clear local storage and cookies. Doing so may reset your preferences or sign you out of private areas.

Private accounts and service providers

Authorised private dashboard users have account and service records stored in Supabase. Google integrations requested through the private dashboard use access-controlled credentials; these are separate from optional public website analytics. Vercel hosts the website and may process necessary request and security logs to operate and protect it. Supabase, Vercel, Google and our email provider may process data under their respective service arrangements, including outside the UK where applicable safeguards are required.

Security, retention and your rights

We use access restrictions, request validation and rate limits to protect the enquiry inbox. Rate-limit identifiers are hashed; form contents are not added to application logs. We review enquiry and account records and retain them only as needed to handle the request, provide the service or meet applicable record-keeping duties.

Depending on the circumstances, you can request access, correction, deletion or restriction of your information, object to processing based on legitimate interests, and withdraw analytics consent. Email us to exercise those rights. You can also raise a concern with the Information Commissioner’s Office.

Notice updated 6 October 2026. This notice describes the current implementation; the business owner must review the controller details, retention periods and provider arrangements before production activation.