Privacy Policy
How we collect, use, and protect your personal data.
Last updated: March 2026
Who we are
Statistically Significant is an independent data and AI strategy consultancy operating in the United Kingdom. We are the data controller responsible for the personal data collected through this website.
If you have any questions about this policy or how we handle your data, contact us at hello@statisticallysignificant.co.uk.
What data we collect
When you use the contact form:
- Your name and email address
- Your organisation name (optional)
- The topic you’re enquiring about
- The message you send us
- Your marketing preference (whether you opt in to receiving updates)
When you use the Data Strategy Diagnostic:
- Your responses to nine assessment questions (sector, organisation size, strategy maturity, infrastructure, GenAI readiness, challenges, role, and goals)
- Your name and email address, if you choose to share your results
- Your marketing preference
Automatically, via our hosting provider:
- Standard server logs including IP address, browser type, and pages visited — collected by Netlify for security and operational purposes. We do not access these in the ordinary course of business.
Why we collect it and our legal basis
We rely on legitimate interests to process enquiries you send through the contact form and to generate your diagnostic report. In both cases, you initiate the interaction and have a reasonable expectation that we will use your information to respond or provide the service requested.
We rely on consent for any marketing communications. You can withdraw consent at any time by emailing hello@statisticallysignificant.co.uk or by clicking unsubscribe in any email we send. Withdrawing consent does not affect the lawfulness of any processing that took place beforehand.
How long we keep your data
We keep contact enquiry data and diagnostic results in our CRM for up to two years from the date of last contact, or until we receive a deletion request, whichever is sooner. Marketing consent preferences are retained until you withdraw them.
Who we share your data with
We use a small number of trusted third-party services to run this website. We do not sell your data or share it with anyone else.
- Attio Ltd. — we use Attio as our CRM to store contact records and enquiry details. Attio may process data using sub-processors in the UK, EEA, and other jurisdictions with appropriate safeguards in place. Attio’s privacy policy.
- Netlify, Inc. — this website is hosted by Netlify, a US-based infrastructure provider. Netlify processes traffic and request data as part of its hosting service. Netlify’s privacy policy.
- Anthropic, PBC — when you complete the Data Strategy Diagnostic, your responses are processed by Anthropic’s Claude API to generate your personalised report. Anthropic does not use API inputs for model training by default and does not retain them beyond the immediate request. Anthropic’s privacy policy.
Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Restrict how we process your data in certain circumstances
- Object to processing based on legitimate interests
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent for marketing at any time
To exercise any of these rights, email hello@statisticallysignificant.co.uk. We will respond within 30 days.
Cookies and similar technologies
This website uses a small number of cookies:
- Session preference — we use sessionStorage (not a cookie — it clears automatically when you close your browser tab) to remember whether you have dismissed our diagnostic prompt during your current visit.
You can control or delete cookies at any time through your browser settings. Disabling analytics cookies will not affect your ability to use this website. Our cookie notice allows you to acknowledge these cookies; continued use of the site constitutes acceptance.
Our hosting provider, Netlify, may also set functional cookies as part of its infrastructure. These are outside our control and covered by Netlify’s privacy policy.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect the most recent version. Material changes will be noted here.
Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).