Privacy policy

Last updated 1 August 2026 · Document PRIV-03 · Rev 03

This policy explains what personal data Anchorpoint Media ("Anchorpoint Media", "we") collects through b2bsaaslinkbuildingagency.com, why, how long it is kept and what rights you hold over it. It is written to meet the UK GDPR, the EU GDPR (Regulation 2016/679) and, where applicable, the California Consumer Privacy Act.

1. Controller

Anchorpoint Media is the data controller for information collected through this site. We are a B2B SaaS link building agency.

999 W Main St
Boise, ID 83702, United States
+1 (986) 800 9412

To reach the person responsible for data protection, use the requisition form and begin your message with "Privacy request". It will be routed away from the commercial team.

2. What is collected

Category	Contents	Source
Enquiry data	Name, work email, company and domain, target category term, funding stage, budget band, free-text message	You, via the form
Anti-abuse data	IP address and user-agent recorded by the form processor at the moment of submission	Automatic, on submission only
Correspondence	Emails, documents, survey outputs and notes exchanged afterwards	You and us

Nothing else is collected. This site runs no analytics, sets no advertising or session cookies, embeds no pixels and performs no device fingerprinting. That is why there is no cookie banner — there is nothing to consent to. The only outbound requests the page makes are for its own stylesheet and script, a web-font stylesheet, and the form endpoint at the moment you press submit.

We also record limited technical information about every visit — pages, clicks, country, a truncated network address and whether the request came from a person or a crawler. Section 10 sets out exactly what, why, and for how long.

3. Purposes and legal bases

Replying to your enquiry and producing the link-gap survey you asked for. Basis: your consent, plus steps taken at your request before entering a contract.
Preventing automated abuse of the form. Basis: legitimate interest in keeping the service usable.
Meeting accounting and legal obligations where a commercial relationship begins. Basis: legal obligation.

We do not profile you, do not make automated decisions about you, and do not add form submissions to a marketing list. If we do not end up working together, you will not hear from us again unless you write again.

4. Processors

Form processor — receives the form contents and relays them to our internal inbox; stores the submission transiently for delivery and spam filtering.
Email provider — hosts the inbox receiving your enquiry and subsequent correspondence.
Document and cloud storage — used to prepare surveys, proposals and client reporting.
Accounting software — only where an engagement begins, and only for legally required data.

Each is bound by a data-processing agreement and may not use your data for its own purposes. We never sell, rent, licence or trade personal data, and we never pass your details to other agencies, publishers, link vendors or lead brokers.

5. International transfers

Some processors operate infrastructure outside the European Economic Area, principally in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

6. Retention

Enquiries that do not become engagements	24 months from last contact, then deleted
Enquiries we decline	12 months, so the context survives if you write again
Client records	Term of engagement plus 7 years where tax law requires
Anti-abuse logs	30 days

7. Your rights

Regardless of where you are based, we honour all of the following: access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time.

Exercise any of them through the contact form. We respond within 30 days, usually far sooner, and never charge a fee. If you are dissatisfied with the outcome, you may complain to your national supervisory authority.

8. Security

The site is served over HTTPS and submissions are encrypted in transit. Inside the agency, access to enquiry data is limited to the two founders and the researcher assigned to your account. Devices are encrypted at rest and shared tools require two-factor authentication. Should a breach ever create a risk to your rights, we will notify you and the relevant authority within 72 hours of becoming aware of it.

9. Children

This is a business-to-business service and we do not knowingly collect data from anyone under 16. If you believe a minor has submitted data here, tell us and we will delete it.

10. Cookies and measurement

No cookies. This site sets no cookies at all — none for advertising, none for sessions, and none belonging to anyone but us. That is why you have not been asked to dismiss a banner.

One first-party identifier. Your browser stores a random string in this site's own local storage so we can tell a returning reader from a new one. It is not a cookie, it is not readable by any other website, it is never sold, shared or matched against anything, and clearing your browser data removes it. It carries no name, email or account.

What our own measurement records. We run no Google Analytics and no third-party trackers. Our own servers log, for each request:

the page requested, the page you arrived from, and the time
which links and buttons were clicked, including the telephone button, and how far down a page was read
your country and the name of your internet provider or network
your network address — stored truncated (for example 81.161.243.x) together with a one-way daily hash, so repeat visits can be recognised without us holding the full address
your browser's user-agent string, and whether the request came from a person or an automated crawler

Why. To see which pages and campaigns work, to keep the site available, and to separate genuine readers from the crawlers and scrapers that make up a large share of traffic. Legal basis: our legitimate interest in operating and improving the site (Article 6(1)(f) GDPR). We have limited what we collect specifically so that this basis holds — no cross-site tracking, no profiles, no advertising use, no data brokers.

How long. Raw request and interaction logs are deleted automatically after 180 days. Enquiries you send us are kept for as long as section 6 describes.

Opting out. If your browser sends a Global Privacy Control signal we record no interaction data at all. You can also block this site's scripts, or write to us using the contact details in section 1 and we will delete what relates to you.

11. Changes

Material changes are reflected in the revision number and date at the top of this document. Where a change affects data you have already given us, we will contact you before it takes effect.

← Back to sheet 01