GreenMaru
What we do with
your information.
Written to be read, not to be survived. If anything here is unclear, ask us — that is a fair test of whether we wrote it well enough.
Version 2026-08-20 · Last updated 20 August 2026
The short version
- We collect what you type into our forms, and very little else. No advertising trackers, no analytics, no cookie banner — because there is nothing to consent to.
- The Full Circle assessment runs entirely in your browser. Nothing reaches us until you tick the box and press send.
- Your assessment answers are processed by Anthropic’s AI to help write your summary. Anthropic does not train its models on them.
- We keep completed assessments for 24 months, then review.
- We never sell your information, and we never pass it to anyone for their own marketing.
- You can ask for a copy, a correction, or deletion at any time: privacy@greenmaru.com.
Who we are
GreenMaru LTD, trading as GreenMaru, of 71-75 Shelton Street, Covent Garden, London, United Kingdom, is the data controller for the information described here. That means we decide what is collected and why, and we are accountable for it.
For anything about your information, write to privacy@greenmaru.com.
Highlighted fields must be completed before this page goes live. A privacy notice that will not say who is responsible is not a privacy notice.
What we collect, and why
If you visit the website
Our web host records standard server logs — IP address, browser, pages requested, timestamps — which exist to keep the site running and secure. We do not use analytics, advertising pixels or tracking cookies of any kind. We load fonts from Google Fonts, which means Google receives your IP address in order to serve them.
If you complete The Full Circle assessment
The assessment runs in your browser. As you answer, nothing is transmitted anywhere. When you reach the end, tick the consent box and press send, we receive:
- Your name, email address, brand or business name, industry and offer type
- Your answers to the nine questions — which may include commercially sensitive information about your business, its challenges and its plans
- What you told us you would like help with
- The wording of the consent you agreed to, and the time you agreed to it
Why: to build and send your Circle Card, to reply to you, and to follow up about your results. Lawful basis: your consent, which you gave by ticking the box. You can withdraw it at any time by emailing us; that does not affect anything done before you withdrew it.
If you contact us
The contact form on our website collects your name, email, an optional brand or project name, and your message. It is delivered to us by Formspree, a form-handling service. Lawful basis: our legitimate interest in responding to people who ask us to.
If you are a client
We hold what is needed to run the work: contact details for the people we work with, the content of the engagement, and access records for anyone we give a login to our client portal. Lawful basis: performance of our contract with you, and our legitimate interest in running our business properly.
Artificial intelligence
Two parts of the assessment use AI, and both are optional improvements to something that already works without them:
- A single sentence that reflects your own answers back to you partway through
- The summary on your results page — what connects across your answers, what does not yet, and the first question we would ask you
These are generated by Anthropic (Claude), acting as our processor. What that means in practice:
- Anthropic states that it does not use commercial API inputs or outputs to train its models by default.
- Anthropic states that it deletes API inputs and outputs from its systems within 30 days. Content its automated safety systems flag as violating its usage policy may be kept for up to 2 years, and classification scores for up to 7 years.
- Anthropic is based in the United States, so this involves a transfer outside the UK and EEA. See Sending information abroad below.
The AI is instructed to work only from what you wrote and to invent nothing. It is a writing aid, not a decision-maker: nothing about you is decided automatically, and no automated process produces any legal or similarly significant effect. A person at GreenMaru reads every assessment before responding.
If you would rather your answers were not processed this way, say so at privacy@greenmaru.com and we will handle your assessment manually.
Who else sees your information
| Who | What for | Where |
|---|---|---|
| Bluehost | Hosting our website and our internal system | United States |
| Anthropic | AI assistance on assessment summaries | United States |
| Formspree | Delivering form submissions to us | United States |
| Google Fonts | Serving the typefaces on our pages | United States |
| Bluehost | Our email | United States |
Each acts on our instructions. We do not sell your information, and we do not share it with anyone for their own marketing.
Sending information abroad
The providers above are in the United States, so your information is transferred outside the UK and the EEA. We rely on the safeguards those providers offer for such transfers — standard contractual clauses, the UK Addendum, and where applicable the EU–US and UK–US Data Privacy Frameworks. You can ask us for details on any specific provider.
How long we keep it
| What | How long |
|---|---|
| Completed Full Circle assessments | 24 months from completion, then reviewed and deleted if there is no live relationship |
| Contact form enquiries | 24 months from the last exchange |
| Client records | For the engagement, then 7 years for tax and legal purposes |
| Server logs | As set by our host, typically a few weeks |
| Consent records | As long as we rely on the consent, and for a period afterwards so we can show what was agreed |
Your rights
If you are in the UK or the EEA you have the right to: get a copy of what we hold; have it corrected; have it deleted; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time.
Email privacy@greenmaru.com. We will respond within one month. There is no charge.
If you are unhappy with how we have handled it, you can complain to a supervisory authority. In the UK that is the Information Commissioner’s Office (ico.org.uk). In the EEA it is the authority in your country. We would rather you came to us first, but you do not have to.
Cookies
Our public website and The Full Circle assessment set no cookies at all — no analytics, no advertising, no preferences. That is why you have not been asked to accept any.
Our internal system and client portal at app.greenmaru.com set one strictly necessary cookie to keep you signed in. It carries no tracking and is not used for anything else. Strictly necessary cookies do not require consent.
Security
Our sites are served over HTTPS. Access to our internal system requires a named account and a password, and the client portal is deliberately built so that commercial information — fees, effort, internal notes — cannot reach it. API credentials are held on the server and are never sent to your browser.
No system is perfectly secure. If we ever suffer a breach that is likely to put your rights at risk, we will tell you and the relevant authority as required.
Children
Our services are for businesses. They are not directed at children and we do not knowingly collect information about anyone under 16.
Changes
If we change this notice we will update the version and date at the top. If a change materially affects how we use information you have already given us, we will contact you.
Contact
privacy@greenmaru.com · 71-75 Shelton Street, Covent Garden, London, United Kingdom