Legal
Privacy Policy
Last updated: 12 August 2026
In short
AnFiTest Ltd is the data controller for the personal data described in this notice. We collect very little: an email address if you join our waitlist, whatever you choose to send us if you email or apply for a job, and anonymous, cookie free usage statistics about this website. We never sell personal data and we never use it for advertising. You can ask us to delete your data at any time by emailing contact@anfitest.co.uk.
1. Who we are
This notice is issued by AnFiTest Ltd (“AnFiTest”, “we”, “us”, “our”), a company registered in England and Wales. We develop diagnostic technology for equine and livestock health.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, AnFiTest Ltd is the data controller of the personal data covered by this notice. That means we decide why and how your personal data is used, and we are responsible to you for it.
| Detail | Information |
|---|---|
| Legal entity | AnFiTest Ltd |
| Company number | 16301896 |
| Registered in | England and Wales |
| Registered office | Suite 3, Ground Floor, The Curve, Kingfisher Boulevard, Newburn Riverside, Newcastle Upon Tyne, Tyne & Wear, England, NE15 8NZ |
| Contact for data protection and all other enquiries | contact@anfitest.co.uk |
We are not required to appoint a statutory Data Protection Officer under Article 37 of the UK GDPR. Responsibility for data protection sits with our directors, who can be reached at the address above.
2. What this notice covers
This notice applies to personal data we collect through this website (anfitest.com and anfitest.co.uk), when you email or write to us, when you apply for a role with us, and when you take part in our research trials or early access programmes.
It does not cover our internal Employee Hub at hub.anfitest.com, which is a private system for AnFiTest staff and contractors and is governed by a separate internal privacy notice, nor does it cover third party websites we link to.
3. The personal data we collect
We collect only what we need. Depending on how you interact with us, that may include:
| Category | What it includes | How we get it |
|---|---|---|
| Waitlist and mailing list data | Your email address, which page you signed up from, and the date and time you signed up | You give it to us directly through the sign up form |
| Enquiry and correspondence data | Your name, email address, phone number if you give it, and the contents of your message and our replies | You give it to us directly when you email, write or call us |
| Recruitment data | Your name, contact details, CV, covering letter, work history, qualifications, right to work information and interview notes | You give it to us directly when you apply |
| Research and trial data | Your name, role, business contact details, your yard, practice or farm, and records relating to the animals in your care | You give it to us directly, or your organisation provides it, when you take part in a trial or pilot |
| Business relationship data | Name, job title, business contact details and correspondence for investors, suppliers, partners and professional contacts | Directly from you, from your organisation, or from public sources such as LinkedIn, Companies House and company websites |
| Website usage data | Aggregated and anonymised statistics: pages viewed, referring site, approximate country, device type and browser type. No cookies are used and we cannot identify you from this | Collected automatically by our analytics provider when you visit the site |
| Technical and security data | IP address and request details recorded in server logs by our hosting provider | Collected automatically by our hosting provider when you visit the site |
Data about animals is not personal data. The UK GDPR protects information about living individuals, not animals. Health, performance and diagnostic data about a horse or a herd is not personal data in its own right. It only falls within this notice where it is linked to an identifiable person, for example where a yard is run by a named sole trader.
We do not ask for or want special category data (such as information about your health, race, religion, sex life, political opinions or trade union membership) or criminal offence data through this website. Please do not send it to us unsolicited. If you do, we will delete it unless we have a lawful reason to keep it.
4. Why we use your data and our lawful basis
The UK GDPR requires us to have a lawful basis for everything we do with your personal data. Ours are set out below.
| What we do | Data used | Lawful basis |
|---|---|---|
| Send you email updates about AnFiTest, our technology and our progress | Waitlist and mailing list data | Your consent (Article 6(1)(a) UK GDPR) and regulation 22 of the Privacy and Electronic Communications Regulations 2003. You can withdraw it at any time |
| Reply to your enquiries and keep a record of our correspondence | Enquiry and correspondence data | Legitimate interests (Article 6(1)(f)): responding to people who contact us and keeping an accurate record of what was agreed |
| Assess your job application, arrange interviews and make hiring decisions | Recruitment data | Steps taken at your request before entering a contract (Article 6(1)(b)) and our legitimate interests in recruiting suitable staff (Article 6(1)(f)) |
| Check your right to work in the UK if we offer you a role | Recruitment data | Compliance with a legal obligation (Article 6(1)(c)) |
| Run research trials, pilots and early access programmes, and analyse the results | Research and trial data | Performance of a contract with you or your organisation (Article 6(1)(b)) where one exists, otherwise our legitimate interests in developing and validating our diagnostic technology (Article 6(1)(f)). Where we ask for your consent, that consent is the basis |
| Manage relationships with investors, suppliers, partners and professional contacts | Business relationship data | Legitimate interests (Article 6(1)(f)): running and funding our business |
| Understand how the website is used so we can improve it | Website usage data | Legitimate interests (Article 6(1)(f)): understanding which content is useful. This data is anonymous and cookie free |
| Keep the website secure, prevent abuse and diagnose faults | Technical and security data | Legitimate interests (Article 6(1)(f)): protecting our systems and our visitors |
| Meet our legal, accounting, tax and regulatory obligations, and establish or defend legal claims | Any of the above, as relevant | Compliance with a legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)) in protecting our legal position |
Where we rely on legitimate interests, we have considered whether our interests are overridden by your rights and freedoms, and we have concluded that they are not. You can ask us for a summary of that assessment, and you have the right to object (see section 10).
5. Marketing and your choices
We only send marketing emails to people who have asked for them. When you join our waitlist you are giving consent to receive occasional updates about AnFiTest.
- Every email we send includes a one click unsubscribe link.
- You can also unsubscribe at any time by emailing contact@anfitest.co.uk.
- We do not sell, rent or share your email address with third parties for their own marketing.
- We do not use your data for behavioural advertising or ad targeting, and we run no advertising trackers on this site.
If you unsubscribe, we keep a minimal record of your email address on a suppression list. This is so we can honour your request and avoid contacting you again by mistake. It is not used for any other purpose.
8. Sending data outside the UK
Some of our providers are based in, or store data in, the United States. When personal data is transferred outside the UK, we make sure it is protected by one of the safeguards recognised in Chapter V of the UK GDPR:
- UK adequacy regulations, where the government has decided the destination country offers an adequate level of protection.
- The UK Extension to the EU-US Data Privacy Framework, where the receiving organisation is certified under it.
- The UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses, together with a transfer risk assessment.
You can ask us for a copy of the safeguards we rely on for any particular transfer by emailing contact@anfitest.co.uk.
9. How long we keep your data
We keep personal data only for as long as we need it for the purpose we collected it, plus any period we are required to keep it by law. In practice:
| Data | Retention period |
|---|---|
| Waitlist and mailing list data | Until you unsubscribe or ask us to delete it. If you have not opened or clicked any of our emails for 24 months we will remove you. A minimal suppression record is kept after unsubscribing so we do not contact you again |
| Enquiry and correspondence data | Up to 24 months after our last contact with you, unless the correspondence forms part of a contract or a legal record |
| Recruitment data (unsuccessful applicants) | 6 months from the hiring decision, so we can respond to any query about it. We will keep it for up to 12 months if you ask us to consider you for future roles |
| Recruitment data (successful applicants) | Transferred to your employment record and kept under our internal staff privacy notice |
| Research and trial data | For the duration of the trial and then for as long as we need to support the integrity of our research and any regulatory, safety or product records. This is typically 6 years after the trial ends, and longer where a regulatory or scientific requirement applies |
| Business relationship data | For the duration of the relationship and 6 years afterwards, to match the limitation period for contract claims |
| Accounting and tax records | 6 years from the end of the financial year they relate to, as required by the Companies Act 2006 and HMRC rules |
| Website analytics | Aggregated and anonymous. Retained by our hosting provider in line with our plan and not linked to you |
| Server and security logs | Short term only, held by our hosting provider for operational and security purposes |
When a retention period ends we delete the data, or anonymise it so that it can no longer be linked to you.
10. Your rights
Under the UK GDPR you have the following rights. They are free to exercise and apply to your own personal data.
| Right | What it means |
|---|---|
| Be informed | To know how your data is used, which is what this notice is for |
| Access | To get a copy of the personal data we hold about you, and information about how we use it |
| Rectification | To have inaccurate data corrected and incomplete data completed |
| Erasure | To have your data deleted where we no longer have a good reason to keep it. This is sometimes called the right to be forgotten |
| Restriction | To ask us to pause using your data while a concern about it is resolved |
| Portability | To receive data you gave us in a structured, commonly used, machine readable format, and to have it sent to another organisation where technically feasible |
| Object | To object to processing based on our legitimate interests. Your right to object to direct marketing is absolute and we will always stop |
| Withdraw consent | To withdraw consent at any time where consent is the basis we rely on. This does not affect anything we did before you withdrew it |
| Automated decisions | Not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions (see section 11) |
To exercise any of these rights, email contact@anfitest.co.uk. We will respond within one month. If your request is complex or you have made several, we may extend that by up to two further months, and we will tell you within the first month if we do. We may need to verify your identity before we act. We will not charge a fee unless your request is manifestly unfounded or excessive.
11. Automated decision making and profiling
We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We do not profile you for marketing purposes.
Our diagnostic technology uses automated analysis, but it analyses samples and data from animals in order to produce health insights. It does not make automated decisions about people.
12. How we protect your data
We take appropriate technical and organisational measures to keep personal data secure, as Article 32 of the UK GDPR requires. These include:
- Encryption of data in transit using HTTPS across the whole website, and encryption at rest by our providers.
- Access limited to the people who need it, with multi factor authentication on our email and business systems.
- Reputable providers who are contractually bound to appropriate security standards.
- Keeping the amount of personal data we collect to a minimum in the first place.
- Procedures for identifying and handling personal data breaches, including reporting qualifying breaches to the Information Commissioner's Office within 72 hours and telling affected individuals where the breach is likely to result in a high risk to them.
No method of transmitting or storing data is completely secure. Please do not send us sensitive information by email.
13. Children
This website is aimed at horse owners, veterinary professionals, farmers, investors and jobseekers. It is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email contact@anfitest.co.uk and we will delete it.
14. Links to other websites
Our site links to third party sites, including LinkedIn and our Employee Hub. We are not responsible for their content or their privacy practices. Following a link means that site’s own privacy notice applies, so please read it.
15. Changes to this notice
We review this notice regularly and will update it when our practices change or when the law changes. The date at the top shows when it was last revised. If we make a significant change we will say so on this page, and where the change affects how we use data you have already given us, we will tell you directly.
16. How to complain
If you are unhappy with how we have handled your personal data, please tell us first at contact@anfitest.co.uk so we can try to put it right.
You also have the right to complain to the UK supervisory authority for data protection at any time:
| Information Commissioner's Office | |
|---|---|
| Address | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
| Helpline | 0303 123 1113 |
| Website | ico.org.uk/make-a-complaint |
Complaining to the ICO does not affect any other legal remedy available to you.
17. Contact us
For anything relating to privacy or your personal data, or for any other enquiry, email contact@anfitest.co.uk. Please put “Data protection” in the subject line of a privacy request so we can route it quickly and meet the one month deadline.
AnFiTest Ltd, Suite 3, Ground Floor, The Curve, Kingfisher Boulevard, Newburn Riverside, Newcastle Upon Tyne, Tyne & Wear, England, NE15 8NZ. Registered in England and Wales, company number 16301896.