Privacy Policy
This Privacy Policy explains how Gilwern ("we", "us", "our") collects, uses, stores, and protects information when you visit our website or engage with our consultation services. This is a general draft provided for informational purposes and should be reviewed against your specific circumstances and applicable law before publication.
Last updated: [insert date]
1. Who We Are
Gilwern provides data-led analysis and risk insight services to private clients. For the purposes of data protection law, Gilwern is the controller of personal data collected through this website and our consultation process. Our registered address is provided in the footer of this site.
2. Information We Collect
We may collect the following categories of information:
- Contact details you provide, such as name, email address, phone number, and postal address.
- Information submitted through contact or consultation request forms, including details about your enquiry.
- Technical data such as IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
- Correspondence you send us, including emails and messages, and notes made during consultations.
- Any financial or personal circumstances you choose to share with us in the course of a consultation, where relevant to the advice or analysis requested.
3. How We Use Your Information
We use personal data for the following purposes:
- To respond to enquiries and schedule or deliver consultations.
- To provide, personalise, and improve our services.
- To maintain records required for our business and regulatory obligations.
- To send administrative communications relevant to services you have requested.
- To analyse website usage and improve functionality, content, and user experience.
- To comply with legal obligations and protect our legitimate business interests.
4. Legal Basis for Processing
Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following: your consent, the necessity of processing to take steps prior to or in performance of a contract with you, compliance with a legal obligation, and our legitimate interests in operating and improving our business, provided these interests are not overridden by your rights.
5. Cookies and Similar Technologies
Our website may use cookies and similar tracking technologies to recognise your browser, remember preferences, and gather analytics about how the site is used. You can control or disable cookies through your browser settings; doing so may affect certain features of the site. We do not currently operate a separate cookie consent mechanism beyond browser-level controls, and this section should be updated to reflect the specific cookies and analytics tools actually in use.
6. Sharing of Information
We do not sell personal data. We may share information with:
- Service providers who support our operations, such as hosting, email, and scheduling tools, under appropriate confidentiality arrangements.
- Professional advisers, where necessary for the proper conduct of our business.
- Regulatory or legal authorities, where required by law or to protect our rights.
- A successor entity in connection with a business transfer, merger, or reorganisation.
7. International Transfers
If personal data is transferred outside of your country of residence, we take steps intended to ensure an adequate level of protection consistent with applicable data protection requirements, such as relying on service providers that offer appropriate contractual or legal safeguards.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the nature of our relationship with you.
9. Data Security
We apply reasonable organisational and technical measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on applicable law, you may have rights to access, correct, delete, or restrict the use of your personal data, to object to certain processing, to request data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us using the details provided on our Contact page.
11. Children's Privacy
Our services are intended for adults seeking financial and risk insight consultations. We do not knowingly collect personal data from children, and any such data identified will be deleted upon discovery.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their respective privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be posted on this page with a revised "last updated" date.
14. Contact Us
If you have questions about this Privacy Policy or how we handle personal data, please reach out via the contact details provided on our Contact page.