Congruent ← Back to home
Privacy

Privacy Policy

Last updated: 7 June 2026

This policy explains how Congruent ("we", "us") collects, uses and protects personal data when you use our website congruentindex.com — in particular when you contact us, book a call, or browse the site. It is written for UK / EU data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

Congruent is the data controller for personal data collected through this website. You can reach us at hello@congruentindex.com for any privacy question or to exercise your rights.

What we collect

Information you give us directly

Information collected automatically

How we use it, and our lawful basis

PurposeLawful basis
Respond to your enquiry and arrange/hold a callLegitimate interests (handling a request you initiated) / taking steps to enter into a contract
Understand and improve how the site is used; keep it secureLegitimate interests
Send you marketing communications (only if you opt in)Consent — which you can withdraw at any time

Cookies

Our CRM (HubSpot) sets cookies to recognise returning visitors and link enquiries to site activity. Vercel's analytics is cookieless. You can control or block cookies in your browser settings; doing so won't stop you using the site.

Who we share it with

We don't sell your data. We use a small number of trusted service providers who process it on our behalf, under their own data-protection terms:

ProviderWhat for
HubSpotCRM, contact forms and meeting scheduling (EU data hosting)
VercelWebsite hosting and privacy-friendly analytics
CloudflareDNS and email routing
GoogleCalendar & Google Meet for calls you book

Some providers may process data outside the UK/EU; where they do, this is covered by appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep enquiry and contact data for as long as needed to deal with your request and maintain our relationship with you, and then delete or anonymise it. You can ask us to delete your data sooner (see your rights below).

How we produce our work — use of AI

Congruent uses AI tools — including Anthropic's Claude — to help research, draft and quality-check the analyses and reports we produce for clients. This is always under human direction and review: a named Congruent lead signs off every client report before it is issued, and AI never delivers work to a client on its own. We use Anthropic's commercial API, under which the inputs and outputs we send are not used to train AI models, and we operate a strict data boundary that keeps raw client records and personal data out of AI prompts.

Personal data you submit through this website (enquiries and bookings) is handled by the providers listed above and is not used to train AI models. Where AI processes data as part of a paid client engagement, that processing is governed by the client agreement and Data Processing Agreement, which names Anthropic as a sub-processor — see the full sub-processor register.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@congruentindex.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time; the "last updated" date above shows when. Material changes will be reflected here.

Contact

Questions about this policy or your data: hello@congruentindex.com.

Note: this policy covers the marketing website only. Personal data processed inside the Congruent platform on behalf of clients is governed separately by the client agreement and Data Processing Agreement.