Privacy Policy
This policy explains how Anderson & Co collects, uses, stores and protects personal information in connection with our website,
enquiries and private investigation services
WHO WE ARE
Anderson & Co Surveillance and Private Investigators Ltd is the data controller for personal information we process for our own business purposes. Registered company number 12210642. ICO registration number ZA496292. Our correspondence address is Office 1, Izabella House, 24-26 Regent Place, Birmingham, B1 3NJ. You can contact us at info@andersonco.co.uk or 0121 630 3321.
INFORMATION WE MAY COLLECT
Depending on the service or enquiry, we may process names, addresses, telephone numbers, email addresses, identification and contact details, payment and transaction information, instructions supplied by a client, correspondence, photographs, video or audio material, location or observation records, online and open-source information, and other information relevant to a lawful investigation. Where necessary and lawful, this may include special category data or information relating to alleged or actual criminal conduct.
WHERE INFORMATION COMES FROM
We may obtain information directly from you, from a person or organisation instructing us, from witnesses or other relevant contacts, from publicly available sources, social media and open-source material, from lawful databases and information providers, from professional advisers or service providers, and from observations made during a lawful investigation. We only seek information that is relevant to the purpose of the instruction.
WHY WE USE PERSONAL INFORMATION
We use personal information to respond to enquiries, assess and accept instructions, carry out agreed investigative and surveillance work, prepare reports and evidence, communicate with clients, administer payments and records, protect our staff and business, prevent fraud or misuse, comply with legal and regulatory obligations, and establish, exercise or defend legal claims where appropriate.
OUR LAWFUL BASES
Our lawful basis depends on the circumstances. We may process information because it is necessary to perform a contract or take steps before entering one, because we have a legal obligation, because processing is necessary for our legitimate interests or those of a client or third party where those interests are not overridden by individual rights, or because consent has been given where consent is the appropriate basis. Additional legal conditions are applied where special category or criminal offence data is processed.
HOW WE HANDLE YOUR INFORMATION
We use proportionate safeguards and limit access to personal information to people who need it for legitimate business or investigative purposes.
SHARING INFORMATION
We do not sell personal information. Where necessary for a legitimate purpose, information may be shared with the instructing client, authorised investigators or subcontractors, professional advisers, IT and secure communications providers, lawful data or verification providers, insurers, regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law. We expect service providers handling personal data for us to protect it appropriately.
RETENTION AND SECURITY
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including operational, contractual, legal, regulatory, insurance and dispute-resolution requirements. Retention periods may therefore vary by case and record type. We use organisational and technical measures designed to protect information against unauthorised access, accidental loss, alteration or disclosure, and we securely delete or destroy information when it is no longer required.
INTERNATIONAL PROCESSING
Some investigations may involve work outside the United Kingdom or the use of service providers whose systems process information internationally. Where personal data is transferred outside the UK, we take steps required by data protection law to ensure an appropriate level of protection, such as using an adequacy regulation or approved contractual safeguards where applicable.
YOUR DATA PROTECTION RIGHTS
Subject to the law and any applicable exemptions, you may have rights to request access to your personal information, ask for inaccurate information to be corrected, request erasure or restriction, object to certain processing, request data portability where applicable, and withdraw consent where processing relies on consent. Some rights may be limited in an investigative context where the law permits an exemption, for example where disclosure would prejudice another person's rights or a lawful investigation.
WEBSITE, COOKIES AND COMMUNICATIONS
Our website and online contact methods may collect technical information such as device, browser and usage data and may use cookies or similar technologies. Where non-essential cookies are used, choices should be presented through the website cookie controls. If you contact us by email, telephone, web form, text message or WhatsApp, we will use the information you provide to respond and to manage any resulting instruction.
QUESTIONS, COMPLAINTS AND UPDATES
For privacy questions or to exercise a data protection right, contact us at info@andersonco.co.uk or write to our Birmingham address above. You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how your information has been handled. We may update this policy when our services, practices or legal obligations change.
Last updated: October 2026.