— Privacy
Privacy Policy
Last updated: 2 October 2026
This policy explains what personal information I collect when you visit this website, contact me or book a call, what I do with it, and the choices you have. I've kept it as plain as I can. If anything is unclear, email me.
Who I am
Admin Anchor is run by Lunet Stassen, a sole trader based in Cape Town, South Africa. I am the data controller for the personal information described in this policy.
Contact: lunet@getadminanchor.com
What this policy covers
This policy covers people who visit getadminanchor.com, send me an enquiry, call, text or message me, or book a call with me.
It does not cover patient or customer information I handle for client practices. For that work the practice is the data controller and I act as its processor, under a Data Processing Agreement and International Data Transfer Agreement agreed with the practice before any work begins. If you are a patient of one of my clients, please refer to that practice's own privacy notice.
What I collect and why
| Information | Why I use it | Lawful basis (UK GDPR) |
|---|---|---|
| Booking details through Calendly: your name, email address, the time you choose and your answers to the booking questions | To hold the intro call, prepare for it and follow up afterwards | Steps taken at your request before a possible contract, and my legitimate interest in responding to enquiries |
| Enquiries by email, phone, text or WhatsApp: your name, contact details and what you tell me | To reply to you and discuss whether my services suit your practice | Steps taken at your request before a possible contract, and my legitimate interest in responding to enquiries |
| Business contact and billing details if you become a client | To deliver the service, invoice and keep proper business records | Performance of our contract, and legal obligations such as tax record-keeping |
| Website usage through cookies: pages viewed, how you arrived (for example from a Google ad), approximate location, device and browser type | To understand how people find and use the site and whether my Google adverts work | Your consent, given through the cookie banner |
I don't sell your information, and I don't use it for automated decision-making. Please don't send me patient or health information through this website, email or WhatsApp before we have an agreement in place.
Cookies
When you first visit, a banner asks whether you accept cookies. Until you accept, Google Analytics and Google Ads cookies are not set. If you reject them, Google may still receive basic, cookieless signals (such as that the page was visited) so it can measure adverts in aggregate; these do not identify you.
Cookies used if you accept
- Google Analytics (
_ga,_ga_*): count visits and show which pages are used. Kept for up to 2 years. - Google Ads (
_gcl_*): show whether a visit or booking came from one of my adverts. Kept for up to 90 days.
Always used
- Your cookie choice (
aa_consent, stored in your browser): remembers whether you accepted or rejected so the banner doesn't keep appearing. This is strictly necessary. - Calendly: when you open the booking window, Calendly may set cookies needed for the booking to work. See Calendly's privacy notice.
You can change your mind at any time: open cookie settings. You can also delete cookies in your browser settings.
Who I share it with
I use a small number of trusted service providers who handle information on my behalf:
- Google: website analytics and advertising measurement (only with your consent), and my calendar
- Calendly: online booking
- IONOS: website hosting and my business email
- KrispCall: my UK business phone number, calls and texts
- WhatsApp (Meta): if you choose to message me on WhatsApp
I may also share information if the law requires it, or with professional advisers (such as my accountant or lawyer) where needed.
International transfers
I am based in South Africa, so information you send me is accessed and held there. South Africa's Protection of Personal Information Act (POPIA) applies to it, and I also handle it in line with UK GDPR standards. Some of my service providers are based in, or store data in, other countries including the United States and the European Union. Where information leaves the UK, those providers rely on recognised safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge.
How long I keep it
- Enquiries and bookings that don't lead to working together: deleted within 12 months of our last contact
- Client business and billing records: for the length of our contract and then for 5 years, to meet tax and accounting requirements
- Website analytics: no longer than 14 months in Google Analytics
Keeping it safe
I am the only person with access to my business accounts. They are protected with strong, unique passwords and multi-factor authentication, on an encrypted device kept up to date with security updates.
Your rights
Under UK GDPR (and POPIA) you can ask me to:
- give you a copy of the information I hold about you
- correct anything that's wrong or incomplete
- delete your information
- restrict or stop how I use it, including objecting to use based on legitimate interests
- send your information to you or another organisation in a reusable format
- withdraw your consent to cookies at any time
Email lunet@getadminanchor.com and I'll respond within one month. There is no charge.
Complaints
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You also have the right to complain to a regulator:
- UK: the Information Commissioner's Office, ico.org.uk/make-a-complaint
- South Africa: the Information Regulator, inforegulator.org.za
Children
This website is for businesses and isn't aimed at children. I don't knowingly collect information from anyone under 18.
Changes to this policy
If I change this policy, I'll update it here and change the date at the top.