Privacy Policy
Last updated: 13 October 2026. I advise organisations on how to handle people's data responsibly, so this site tries to hold itself to the same standard: collect as little as possible, keep it in the EU, and explain it plainly.
The short version
No cookies, no analytics, no advertising trackers, no Google. The site doesn't record who visits or what they read. If you email me or book a call, I use what you send only to reply to you.
Who is responsible for your data
This site is run by Anne James, an independent consultant based in Lisbon, Portugal. I am the data controller for the personal data described on this page. You can reach me at Enable JavaScript to see the address.
Visiting the site
The site is static: plain pages, with no logins, comments or forms. It is hosted by statichost.eu, a Swedish company whose servers and network all run in Europe. statichost.eu does not log visitors' IP addresses.
Fonts are served from this site itself, not from Google Fonts or any other outside service. So loading a page doesn't send your details to anyone else.
No analytics
I don't use any analytics or visitor-tracking tools. There are no counters, pixels or third-party scripts on these pages, so I have no record of who visits or what they read.
Emailing me
My email is hosted by Infomaniak, a Swiss company that stores mail in its own data centres in Switzerland. If you write to me, I receive your name, email address and whatever you choose to include. I use it only to reply to you and, if we work together, to manage that work. My legal basis is taking steps at your request before a possible contract, or performing a contract (Article 6(1)(b)), or my legitimate interest in answering correspondence (Article 6(1)(f)). I don't add you to any mailing list. I keep correspondence for as long as needed to deal with your enquiry. If we work together, I keep it for as long as Portuguese accounting and tax law require.
Booking a call
The "Book a call" links take you to meetergo (opens in a new tab), a German scheduling service. If you book, meetergo processes your name, email address, chosen time and any notes on my behalf, so we can arrange the call. The legal basis is the same as for email. Booking details are deleted once they're no longer needed to arrange or follow up on the call.
The newsletter
The newsletter is published on Substack. This site only links to it: no Substack code runs here. If you subscribe, you do so on Substack's own site. Substack is a US company, and its privacy policy (opens in a new tab) applies there. I can see subscribers' email addresses through Substack, and I don't copy them elsewhere.
Links to other sites
Links to LinkedIn, Substack and other sites take you to services with their own privacy practices. Nothing from those services is embedded in this site, so nothing is shared with them unless you click through.
Sharing and transfers
I don't sell, rent or share your personal data. The only third parties involved are the services named above, acting on my behalf. They're based in the EU, apart from Infomaniak in Switzerland, which the European Commission recognises as giving data protection equivalent to the GDPR (an "adequacy decision"). Nothing on this site sends your data to the United States or anywhere else without that protection.
Your rights
Under the GDPR you can ask to see the personal data I hold about you, correct it, delete it, restrict or object to how I use it, or receive a copy in a portable format. To do any of these, email me and I'll respond within one month.
If you're unhappy with how I've handled your data, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) (opens in a new tab), or to the authority where you live. I'd appreciate the chance to put it right first.
Cookies
This site doesn't use any. The Cookies Policy has the details.
Changes
If anything on this page changes, for example a new tool or service, I'll update it and the date at the top.