1. Introduction

AnchorPoint Business Advisors Ltd (“AnchorPoint”, “we”, “us”, or “our”) is committed to protecting your privacy and handling personal information responsibly. This Privacy Policy describes how we collect, use, disclose, store, and safeguard personal information when you visit our website, submit an enquiry, request a consultation, subscribe to our updates, or otherwise engage with us through our online channels.

AnchorPoint is a professional advisory firm focused on areas such as regulatory compliance, risk management, AML/CFT, licensing support, data protection and privacy, governance, training, and cybersecurity. Because our website is designed primarily to inform visitors about our services and allow them to contact us, the personal information we collect through the website is generally limited to information needed to respond to your enquiry, improve the website, manage subscriptions, and operate our business responsibly.

This Privacy Policy is intended to be public-facing website content. It is not an internal operating manual. Where you become a client, attend a program, or engage us for a professional assignment, additional terms, engagement letters, confidentiality provisions, and service-specific notices may apply.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through:
• our website and its pages;
• enquiry, contact, and consultation request forms;
• newsletter, alert, or insight subscription features;
• emails, calls, or messages initiated through the website;
• cookie banners, consent tools, analytics tools, and similar website technologies; and
• other online interactions that arise directly from the website.

This Privacy Policy does not automatically apply to third-party websites, platforms, or services that may be linked on our website. Those platforms operate under their own privacy practices, and you should review their own privacy notices before sharing information with them.

3. The personal information we may collect

Depending on how you interact with us, we may collect the following categories of personal information:

A. Information you provide directly
This may include your name, email address, phone number, company name, job title, jurisdiction, subject line, enquiry details, and any information you include in a message, attachment, or consultation request.

B. Subscription and communication information
If you subscribe to receive updates, alerts, newsletters, articles, or thought leadership content, we may collect your name, email address, subscription preferences, and records of whether you opened or engaged with those communications where such tracking is used lawfully.

C. Business and professional information
Where relevant to an enquiry, we may collect information about your organization, industry, regulatory profile, licensing needs, compliance concerns, risk issues, or project requirements. We ask that you do not send highly sensitive personal information unless it is necessary and requested through an appropriate channel.

D. Technical and usage information
We may automatically collect certain device and website usage data such as IP address, browser type, operating system, device identifiers, general location inferred from IP, pages visited, timestamps, referral URLs, and interactions with website content.

E. Cookie and preference information
We may collect information through cookies and similar technologies, including your cookie choices, session preferences, and information that helps us understand website traffic, site performance, and visitor behaviour.

F. Social media and external interaction data
If you contact us through social media or other third-party platforms linked from our site, we may receive the information you choose to share with us through those platforms.

4. How we collect your information

We collect personal information in a few different ways:
• directly from you when you fill out a contact form, request a consultation, email us, call us, or subscribe to updates;
• automatically through cookies, pixels, server logs, and similar website technologies;
• from your organization or a representative where they ask us to contact you in a professional capacity;
• from publicly available professional sources where appropriate for business communications, due diligence, or conflict checks; and
• from service providers who support website hosting, analytics, communications, and related operational needs.

5. Why we use personal information

We may use personal information to:
• respond to enquiries, questions, and requests;
• schedule, manage, or follow up on consultations;
• understand your service needs and determine how we may assist you;
• send newsletters, updates, event notices, insights, or other communications you request or that are otherwise permitted by law;
• improve website functionality, content quality, and user experience;
• manage website security, detect abuse, and prevent fraud or misuse;
• maintain records of communications and business interactions;
• comply with legal, regulatory, ethical, tax, accounting, and professional obligations;
• establish, exercise, or defend legal claims; and
• support business continuity, internal administration, and responsible governance.

We do not sell your personal information. We also do not use website enquiries for unrelated purposes in a manner that is inconsistent with this Privacy Policy or with the purpose for which the information was collected.

6. Legal grounds for processing where required by law

Where applicable law requires us to identify a legal basis for processing personal information, we may rely on one or more of the following:
• your consent;
• taking steps at your request before entering into a contract;
• performance of a contract or professional engagement;
• compliance with a legal or regulatory obligation;
• our legitimate interests in operating, improving, securing, and administering our website and business, provided those interests are not overridden by your rights and interests.

Where we rely on consent, you may withdraw that consent at any time, subject to legal or operational limits. Withdrawal will not affect the lawfulness of processing already carried out before consent was withdrawn.

7. Cookies and similar technologies

Our website may use cookies and related technologies to keep the site functioning properly, remember preferences, analyze traffic, improve content, and where enabled, support integrations, outreach, or marketing activity.

Cookies may include:
• strictly necessary cookies, which help core functions such as site operation and consent preference management;
• functional cookies, which remember settings and improve user experience;
• analytics cookies, which help us understand traffic, usage, bounce rates, and visitor behaviour; and
• other cookies or tracking tools that may be used where appropriate and lawful.

Where required by applicable law, we ask for your consent before placing non-essential cookies on your device. You can manage cookie choices through our banner, consent tool, or browser settings. Please note that disabling some cookies may affect site functionality or performance.

8. Marketing, alerts, and insight communications

If you subscribe to our newsletter, alerts, updates, or thought leadership communications, we may use your contact details to send relevant content about compliance, regulation, risk, governance, privacy, cybersecurity, and related industry developments.

You can opt out of marketing communications at any time by:
• clicking the unsubscribe option included in the communication, where available; or
• contacting us directly using the details set out in this policy.

Even if you opt out of marketing communications, we may still send non-promotional messages where necessary to respond to your enquiry, manage a requested consultation, address an operational issue, or comply with legal obligations.

9. When we may share personal information

We may share personal information only where reasonably necessary and appropriate, including with:
• website hosting providers, IT support providers, and cloud service providers;
• email, CRM, newsletter, analytics, consent-management, and communication platform providers;
• professional advisers such as lawyers, accountants, auditors, insurers, or consultants;
• regulators, supervisory authorities, law enforcement agencies, courts, or government bodies where required by law or lawful process;
• counterparties, subcontractors, or specialist service providers involved in a requested engagement, subject to appropriate confidentiality and data handling protections; and
• a purchaser, successor, investor, or transaction adviser in connection with a merger, restructuring, financing, acquisition, or transfer of all or part of our business, subject to appropriate safeguards.

We require service providers acting on our behalf to handle personal information responsibly and only for permitted purposes.

10. International data transfers

AnchorPoint may work with clients, visitors, partners, and service providers across more than one jurisdiction. As a result, personal information may be processed or stored in countries other than the country in which you are located.

Where personal information is transferred across borders, we will take reasonable steps to ensure that appropriate safeguards are in place and that the information continues to receive a level of protection appropriate to the risks involved and to applicable legal requirements.

11. How long we keep personal information

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, including to:
• respond to your enquiry or request;
• maintain reasonable business and communication records;
• assess and manage potential or active professional engagements;
• comply with legal, tax, accounting, regulatory, and professional obligations; and
• resolve disputes or enforce agreements.

Retention periods may vary depending on the nature of the information, the purpose for which it was collected, the sensitivity of the data, applicable legal requirements, and whether an ongoing relationship exists. When information is no longer required, we will delete it, anonymize it, or securely archive it in line with our retention practices.

12. How we protect personal information

We use reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, role-based permissions, secure hosting arrangements, vendor oversight, staff confidentiality obligations, secure communication practices, monitoring, and other security practices appropriate to the nature of the information and the risks involved.

 We encourage you not to submit highly sensitive information through general website forms unless specifically requested through a suitable secure channel.

13. Your privacy rights

Depending on the law that applies to you, you may have rights such as:
• the right to request access to personal information we hold about you;
• the right to request correction of inaccurate or incomplete information;
• the right to withdraw consent where processing is based on consent;
• the right to object to certain types of processing;
• the right to request deletion or restriction of processing in circumstances allowed by law;
• the right to opt out of direct marketing; and
• the right to lodge a complaint with a competent privacy or data protection regulator.

We may need to verify your identity before fulfilling a request. We may also decline or limit a request where the law permits us to do so, for example where disclosure would reveal another person’s information, undermine legal privilege, prejudice an investigation, or conflict with a legal obligation.

14. Children’s privacy

Our website and services are intended for businesses, professionals, founders, executives, and organizations seeking advisory support. We do not knowingly collect personal information from children through the website for business development or marketing purposes.

If you believe that a child may have provided personal information through the website without appropriate authorization, please contact us so that we can review the issue and take appropriate steps.

15. Third-party websites and external services

Our website may contain links to third-party websites, resources, social media pages, articles, or platforms. We are not responsible for the privacy, security, or data handling practices of those third parties.

Where you choose to engage with a third-party website or service, your information will be governed by that third party’s own terms and privacy practices. We encourage you to read those documents carefully.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations, technology, or business practices. When we update the policy, we will revise the “Last Updated” date shown at the top of the page.

Where required by law, we will provide additional notice or obtain updated consent before material changes take effect.

17. Contact us

If you have questions, concerns, or requests relating to this Privacy Policy or the way we handle personal information, please contact us