— Legal
Privacy policy
How AN Computing Ltd collects, uses and protects personal information — and the rights you have over it under UK data protection law.
The short version
- Controller
- AN Computing Ltd, company no. 03713343
- What we hold
- Only what you send us — name, organisation, email, phone and your message
- Why
- To answer your enquiry and deliver services under contract
- Cookies
- No analytics cookies are set unless you choose "Accept"
- Selling data
- Never. We do not sell, trade or rent personal information
- Client systems
- For data inside 1S4H and similar, your service is the controller and we are the processor
- Your rights
- Access, correction, erasure and more — see section 12
This summary is for orientation only. The full policy below is what applies.
Introduction
AN Computing Ltd ("we", "our" or "us") is committed to protecting your privacy. This policy explains how we collect, use, disclose and safeguard your information when you visit our website or engage our services, and sets out your rights under the UK GDPR and the Data Protection Act 2018.
Who we are
AN Computing Ltd is a company registered in England and Wales, company number 03713343, with its registered office at Suites C, D, E & F, 14th Floor, The Plaza, 100 Old Hall Street, Liverpool L3 9QJ, United Kingdom.
For information you give us directly — for example through the enquiry form on this website — AN Computing Ltd is the data controller. For personal data held inside systems we host or maintain for a client, that client is the controller and we act as a data processor on their behalf. See Data in our products.
Information we collect
Information you give us
We collect personal information you provide voluntarily when you:
- complete the enquiry form on this website
- request information about our products or services
- correspond with us by email, telephone or post
- use our products or services, or are given an account on a system we support
- attend a meeting, demonstration or event with us
This will typically include your name, organisation, job role, email address, telephone number and whatever you choose to tell us in your message.
Information collected automatically
When you visit this website, limited technical information may be collected by our hosting provider and — only if you consent to analytics cookies — by Google Analytics:
- IP address (truncated before storage by Google Analytics)
- browser type and version
- operating system and device type
- date and time of access
- pages viewed and time spent on them
- the referring website address
How we use your information
We use the information we collect to:
- respond to your enquiry and provide the information you asked for
- provide, operate and maintain our products and services
- support, train and communicate with users of systems we maintain
- administer contracts, invoicing and our business records
- understand how this website is used so we can improve it
- send you service updates, and marketing communications where you have consented
- keep our systems secure and prevent fraud or misuse
- comply with our legal and regulatory obligations
We do not use your information for automated decision-making or profiling, and we do not sell it.
Our lawful bases for processing
| What we do | Lawful basis |
|---|---|
| Reply to an enquiry you send us | Legitimate interests — responding to a request you initiated |
| Deliver services and support under a contract | Performance of a contract |
| Analytics cookies on this website | Consent — you may withdraw it at any time |
| Marketing emails | Consent, or legitimate interests for existing business contacts |
| Keeping accounting and contractual records | Legal obligation |
| Securing our systems and investigating incidents | Legitimate interests |
Cookies
Cookies are small files stored on your device. This website sets no analytics or advertising cookies until you have chosen "Accept" in our cookie banner. Google Consent Mode keeps analytics storage denied by default, so declining genuinely prevents the tracking rather than merely hiding the banner.
| Cookie | Purpose | Type | Retention |
|---|---|---|---|
ancCookieConsent |
Remembers your cookie choice. Stored in your browser's local storage, not sent to us. | Strictly necessary | Until you clear your browser storage |
_ga, _ga_* |
Google Analytics — distinguishes visitors and sessions so we can see which pages are useful. | Analytics (consent required) | Up to 2 years |
You can change your mind at any time by clearing this site's data in your browser settings, which will make the banner appear again. You can also instruct your browser to refuse all cookies, though parts of some websites may then not work as intended.
Data held in our products
Our products — including One System 4 Health, My1S4H and Health Checks — hold personal and special category health data belonging to the commissioning organisation. In those systems:
- the commissioning organisation is the data controller and decides what is collected and why
- AN Computing Ltd acts as a data processor under a written agreement
- we only access that data where necessary to provide support, maintenance or agreed development
- access is role-based, logged and covered by a full audit trail
If you are a member of the public whose information is held in one of these systems and you wish to exercise your rights, please contact the service that provided your care — they hold the relationship and can act on your request. If you contact us instead, we will refer you to the correct controller.
Data security
We implement appropriate technical and organisational measures to protect personal information, including:
- ISO/IEC 27001 certified information security management
- Cyber Essentials Plus certification, independently audited
- ISO 9001 certified quality management systems
- Data Security and Protection Toolkit (DSPT) compliance for healthcare data
- encryption of data in transit and at rest
- role-based access controls, authentication and audit logging
- regular security assessments, patching and staff training
No transmission over the internet can be guaranteed completely secure, but we take these obligations seriously and review our controls regularly.
Data sharing and disclosure
We do not sell, trade or rent your personal information. We may share it in these circumstances only:
- with your consent
- with service providers who process data on our behalf under contract — currently our website host, our email delivery provider (SMTP2GO) and Google Analytics where you have consented
- with a client organisation where you have asked us to pass your enquiry to them
- to comply with a legal obligation, court order or regulatory request
- to establish or defend legal claims, or to prevent fraud and protect our rights
- in connection with a business transfer or merger, subject to the same protections
How long we keep your information
We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires:
| Information | Retention period |
|---|---|
| Website enquiries that do not become business | 24 months from last contact |
| Client and prospect correspondence | Duration of the relationship, then 6 years |
| Contracts and accounting records | 6 years after the end of the financial year, as required by UK law |
| Marketing consent records | Until you withdraw consent, then a suppression record is kept |
| Personal data inside hosted client systems | As instructed by the client, who is the controller |
International transfers
Our hosting and support operations are based in the United Kingdom, and personal data in the systems we run is held in the UK. Where a service provider processes data outside the UK — for example Google Analytics — that transfer is covered by the UK International Data Transfer Addendum or an adequacy decision, along with appropriate supplementary safeguards.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- be informed about how your data is used — this policy
- access the personal data we hold about you
- have inaccurate data corrected
- request erasure of your data where there is no overriding reason to keep it
- object to processing based on our legitimate interests
- request restriction of processing in certain circumstances
- data portability — receive your data in a machine-readable format
- withdraw consent at any time, where consent is our basis for processing
To exercise any of these rights, email info@ancomputing.co.uk. We will respond within one month. There is no charge, and we may ask you to verify your identity first.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling their helpline on 0303 123 1113. We would appreciate the chance to address your concern first.
Children's privacy
This website and our commercial services are not directed at individuals under the age of 16, and we do not knowingly collect personal information from children through them. Some systems we build for clients do record data about children as part of a commissioned health service; in those cases the commissioning organisation is the controller and is responsible for the lawful basis and any consent required.
Third-party links
Our website may link to third-party websites. We are not responsible for their privacy practices or content, and we encourage you to read the privacy policy of any site you visit from here.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Where a change materially affects how we use your information, we will take reasonable steps to tell you.
Contact us
If you have questions about this policy or about how we handle personal information:
- Email: info@ancomputing.co.uk
- Telephone: +44 (0) 151 294 3027
- Post: AN Computing Ltd, Suites C, D, E & F, 14th Floor, The Plaza, 100 Old Hall Street, Liverpool L3 9QJ, United Kingdom
— Your data
Want to see what we hold about you?
Email us and we will respond within one month, free of charge. If your information sits inside a system we run for an NHS service or council, we will point you to the right controller.