Privacy Policy & GDPR / RGPD Notice

1. Introduction

This Privacy Policy explains how L’Appui Anglo (‘we’, ‘us’, ‘our’) collects, uses, stores, and protects your personal data when you visit lappuianglo.com or contact us through this website.

L’Appui Anglo is a sole trader operating under that trading name. We are the data controller for all personal data collected through this website.

Contact details:

  • Email: contact@lappuianglo.com
  • Website: lappuianglo.com

This policy is designed to comply with:

  • The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
  • The French loi n° 78-17 du 6 janvier 1978 relative à l’informatique, aux fichiers et aux libertés (the ‘Loi Informatique et Libertés’), as amended by the French implementation of the EU GDPR (Regulation (EU) 2016/679)
  • The Privacy and Electronic Communications Regulations 2003 (PECR) (UK)
  • The French ePrivacy rules (transposing EU Directive 2002/58/EC)

2. What Personal Data We Collect

We collect personal data in the following ways:

2.1 Contact Form (WPForms)

When you submit an enquiry via our contact form, we collect:

  • Your first and last name
  • Your email address
  • The content of your message or enquiry

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR / EU GDPR) — processing is necessary to respond to your enquiry. Where you have given explicit consent via the GDPR checkbox on the form, we also rely on consent (Article 6(1)(a)).

2.2 Newsletter Sign-Up (Brevo)

If you tick the optional newsletter sign-up checkbox on our contact form, we collect:

  • Your name
  • Your email address

This data is passed to Brevo (formerly Sendinblue), our email marketing platform, and used to send you updates, news, and information about our services.

Legal basis: Consent (Article 6(1)(a) UK GDPR / EU GDPR). You may withdraw your consent at any time by clicking the unsubscribe link in any newsletter email, or by contacting us at contact@lappuianglo.com.

2.3 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect anonymised information about how visitors use our website, including:

  • Pages visited and time spent on each page
  • Approximate geographic location (country/region level)
  • Device type, browser, and operating system
  • Referral source (how you arrived at the site)

This data is aggregated and anonymised and does not identify you personally. Google Analytics data is processed under a data processing agreement with Google. IP anonymisation is enabled on this website.

Legal basis: Consent (Article 6(1)(a) UK GDPR / EU GDPR). You will be asked for your consent via our cookie banner before analytics cookies are set. You may withdraw consent at any time via the cookie settings on this website.

2.4 Cookies

Our website uses cookies. Please refer to our Cookie Policy (available via the cookie banner on this site) for full details of the cookies we use, their purpose, and how to manage your preferences.

In summary, we use:

  • Strictly necessary cookies — required for the website to function correctly (no consent required)
  • Analytics cookies (Google Analytics) — only set with your consent

2.5 Social Media

Our website contains links to our social media profiles on Instagram, Facebook, and TikTok. Clicking these links will take you to third-party platforms governed by their own privacy policies. We do not receive personal data from these platforms unless you interact with us directly through them.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

  • To respond to your enquiries and provide our services to you
  • To send you our newsletter, where you have opted in
  • To analyse website usage and improve our site through anonymised analytics
  • To comply with our legal obligations

We will never sell your personal data to third parties, nor use it for any purpose other than those described in this policy.

4. Third-Party Data Processors

We use the following trusted third-party services to process personal data on our behalf. Each is subject to a data processing agreement and appropriate safeguards:

WPForms (contact form plugin)

  • Purpose: Form submission processing
  • Provider: Awesome Motive, Inc.
  • Data stored: Form submissions held within WordPress

Brevo (formerly Sendinblue) — email marketing

  • Purpose: Newsletter distribution and email marketing
  • Provider: Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France
  • Data transferred: Name and email address of newsletter subscribers
  • Brevo is headquartered in France and operates under EU GDPR

Google Analytics

  • Purpose: Website analytics
  • Provider: Google LLC (EU data processed via Google Ireland Limited)
  • Data transferred: Anonymised usage data
  • Google operates under the EU-US Data Privacy Framework

WordPress / Hosting

  • Purpose: Website hosting and content management
  • Data stored: Form submissions and site data held on the hosting server

5. How Long We Keep Your Data

  • Contact form submissions: Retained for up to 12 months from the date of submission, or for as long as necessary to respond to and follow up on your enquiry.
  • Newsletter subscriber data: Retained until you unsubscribe or request deletion.
  • Analytics data: Retained in Google Analytics for 26 months (standard Google retention setting), in anonymised, aggregated form.

When your data is no longer required, it will be securely deleted or anonymised.

6. Your Rights

Depending on your country of residence, you have the following rights in relation to your personal data:

6.1 Rights under UK GDPR (for UK-based individuals)

  • Right of access — to request a copy of the data we hold about you
  • Right to rectification — to request correction of inaccurate data
  • Right to erasure (‘right to be forgotten’) — to request deletion of your data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time (where processing is based on consent)

6.2 Rights under French RGPD / Loi Informatique et Libertés (for France-based individuals)

You have the same rights as above (as these derive from EU GDPR), and additionally:

  • The right to define instructions regarding the use of your data after your death (droit de définir des directives relatives au sort de vos données après votre décès) — a right specific to French law

To exercise any of your rights, please contact us at contact@lappuianglo.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

7. Complaints and Supervisory Authorities

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority:

For UK residents:

  • Information Commissioner’s Office (ICO)
  • Website: ico.org.uk
  • Telephone: 0303 123 1113

For France residents:

  • Commission Nationale de l’Informatique et des Libertés (CNIL)
  • Website: cnil.fr
  • Address: 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07

We would, however, appreciate the opportunity to address your concerns before you approach a regulator, so please contact us first at contact@lappuianglo.com.

8. International Data Transfers

Your data may be processed outside the UK and/or the European Economic Area (EEA) by our third-party processors (notably Google LLC, which is based in the United States). Where this occurs, appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Participation in the EU-US Data Privacy Framework
  • UK International Data Transfer Agreements (IDTAs), where applicable

9. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include:

  • Use of reputable, GDPR-compliant third-party processors
  • Password-protected access to website administration
  • Regular WordPress and plugin updates to address security vulnerabilities

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children’s Data

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us at contact@lappuianglo.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this website. We encourage you to review it periodically. Material changes will be notified where reasonably practicable.

Last updated: June 2026Who we are