Legal
Privacy policy
[Registered company name], [company number], [registered address], [contact email], [website domain]. Have a solicitor review this document; it is a starting template, not legal advice.
Who we are
Atticus Buying Movement ("Atticus", "we", "us") operates this website. For the purposes of UK data protection law, the data controller is [Registered company name], company number [company number], registered at [registered address].
If you have any question about this policy or about how your information is handled, contact us at [contact email] or on WhatsApp at +44 7359 923148.
What we collect
We only collect information you choose to give us. That is:
- Enquiry details — company name, your name, email address, telephone number, approximate annual volume, level of membership interest, and anything you write in the free-text field of the founding member form.
- WhatsApp messages — if you contact us through the WhatsApp link, your phone number, WhatsApp profile name and the content of your messages.
- Basic technical information — our hosting provider records standard server logs including IP address, browser type and pages requested, for security and to keep the site running.
We do not run advertising trackers or analytics cookies on this site.
Why we use it, and our lawful basis
- To respond to your enquiry and discuss membership. Lawful basis: legitimate interests — you have approached us about a commercial arrangement and expect a reply.
- To assess suitability for membership and to keep a record of who has expressed interest. Lawful basis: legitimate interests in forming and administering the group.
- To send you occasional updates about the formation of Atticus, where you are a business contact who has asked to be kept informed. Lawful basis: legitimate interests, with an unsubscribe option in every message.
- To keep the site secure and available. Lawful basis: legitimate interests.
Who we share it with
We do not sell your data. We share it only with service providers that help us operate, each acting under contract:
- Vercel Inc. — website hosting and server logs.
- WhatsApp (Meta Platforms) — if you choose to message us through WhatsApp, that conversation is subject to WhatsApp's own privacy terms as well as ours.
- Google Fonts — fonts are requested from Google's servers when the page loads, which means your IP address is visible to Google. See Google's privacy notice for detail.
- [CRM provider, e.g. HubSpot] — storing and managing enquiries. [Confirm before launch.]
Some of these providers process data outside the UK. Where that happens, transfers are covered by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
Enquiry records are kept for 24 months from your last contact with us, unless you become a member — in which case we keep them for the duration of membership and for six years afterwards, to meet legal and accounting obligations. Server logs are kept for a short period by our host, typically 30 days.
Your rights
Under UK data protection law you have the right to ask us for a copy of your data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on legitimate interests, you can object at any time and we will stop unless we have compelling grounds not to.
To exercise any of these rights, email [contact email]. We will respond within one month. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change how we handle your information, we will update this page and change the date at the top.