AI for leaders

Privacy

How I handle your information.

This notice covers kanati.ai and the enquiry form on it. It is written for UK data protection law. Last updated 24 October 2026.

Who is responsible

Kanati is run by me, JT Anderson, through LC Anderson Consultancy Ltd, registered in Scotland, company number SC586906, registered office 5 South Charlotte Street, Edinburgh EH2 4AN. The company is the controller of the personal information described here. For anything about your information, write to [email protected].

What I collect

  • When you send the enquiry form: your name, email address and company, your role if you give it, where you want to start, your timing and your message.
  • When you email me: whatever you put in the email.
  • When you visit any page: Cloudflare, which hosts the site, handles your IP address and browser details to deliver pages and block attacks. Cloudflare Web Analytics counts visits without cookies and without building a profile of you. I see totals, such as visits per page and per country, never individuals.
  • On the enquiry form, Cloudflare Turnstile checks that a person is sending it. It reads signals from your browser for that check alone.

The Kanati Benchmark runs in your browser. Your answers are never sent to me or stored.

Why I use it, and the lawful basis

I use your enquiry to reply and to talk about work you may want to do. The lawful bases are steps you ask me to take before any contract (UK GDPR Article 6(1)(b)) and my legitimate interest in answering people who contact me (Article 6(1)(f)).

Hosting, security, spam checks and visit counts rely on my legitimate interest in a website that works and is safe to use (Article 6(1)(f)).

I do not sell your information, use it for advertising or make automated decisions about you. Sending an enquiry does not put you on a mailing list. The briefings on Substack are a separate sign-up.

Who else handles it

Cloudflare, Inc. hosts the site, runs the enquiry service, Turnstile and Web Analytics, and delivers each enquiry to my mailbox. Proton AG, based in Switzerland, provides the [email protected] mailbox. Both act only on my instructions.

If you subscribe through the Substack form on the home or Briefings page, Substack Inc. collects your email address and its own privacy policy applies.

I pass information to anyone else only where the law requires it.

Transfers outside the UK

Cloudflare is a US company with a worldwide network, so your information may be handled outside the UK. Cloudflare relies on the UK Extension to the EU-US Data Privacy Framework and on standard contractual clauses with the UK Addendum. UK law recognises Switzerland, where Proton is based, as giving adequate protection.

How long I keep it

Enquiries and emails are deleted two years after our last contact. If you become a client, records of the work are kept for six years after it ends, for tax and legal reasons. Cloudflare keeps technical logs for the short periods its own policies set.

Your rights

You can ask for a copy of your information, ask me to correct or delete it, restrict or object to how I use it, or have it moved to another provider. Write to [email protected]. I reply within one month and there is no charge.

Complaints

If you are unhappy with how I have handled your information, tell me first at [email protected]. I will acknowledge your complaint within 30 days and tell you what I am doing about it. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

kanati.ai sets no cookies of its own. Turnstile on the Work with me page and the Substack form may store small items in your browser that they need to work.

Changes

If anything here changes, I will update this page and the date at the top.