How we handleyour information

Who this notice is from

Athel Advisory LLC operates this website and decides how the information described below is handled. Wherever this notice says we or the firm, it means that company.

There is no published telephone line or general mailbox. Every request under this notice should be sent through the contact form, and it reaches a partner rather than a shared inbox.

What we collect

The site itself asks for very little. There are three ways information reaches us.

• What you type into the contact form. Your name, and optionally your company, email address, telephone number, timeline, how you found us, the practices you selected and whatever you write in the message field.
• What your browser sends automatically. Your IP address, browser and device type, and the pages you opened. This reaches the hosting provider and the third parties listed further down.
• What you tell us afterwards. Anything shared during a call, in email correspondence or in documents you send us while we assess a possible engagement.

We do not ask for, and would prefer you did not send, special category information such as health data or anything about a criminal record.

Why we use it

Enquiry details are used to answer the enquiry, to work out whether we are the right firm for the problem, and to prepare a scope or a referral. Technical information is used to keep the site working and to see roughly how it is used.

We do not sell your information, we do not share it with advertising networks, and we do not use it to build a marketing profile of you.

Our legal grounds

Where the GDPR or the UK GDPR applies to you, the grounds we rely on are these.

• Steps before a contract. Responding to an enquiry you sent us.
• Legitimate interests. Running and securing the site, and keeping a record of who approached us and what was said.
• Legal obligation. Keeping records we are required to keep.
• Consent. Only where we ask for it explicitly, and you can withdraw it at any time.

Who else is involved

The site loads a small number of resources from other companies. When your browser fetches them, that company receives your IP address and basic request information. This happens before you interact with anything on the page.

Some of these transfers reach the United States. Where the GDPR applies, they rely on the standard contractual clauses or an adequacy decision.

How long we keep it

Enquiries that do not lead anywhere are deleted within twenty four months. Where an engagement follows, the file is kept for as long as the relationship lasts and then for the period our accounting and legal obligations require. Server logs are short lived and are kept by the hosting provider rather than by us.

Your rights

Depending on where you live you may have the right to ask for a copy of what we hold, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. You can also withdraw consent where consent was the basis.

Send the request through the contact form. We answer within one month. If you are in the European Economic Area or the United Kingdom and you are unhappy with the answer, you can complain to your national supervisory authority.

Security

The site is served over HTTPS and access to enquiry records is limited to the people who need it. No arrangement is perfect, so please do not send confidential financial or transaction documents through the contact form. We will tell you a safer route once we are speaking.

Children

This site is meant for people acting on behalf of a business. It is not directed at children and we do not knowingly collect information from anyone under sixteen.

Changes to this notice

When this notice changes, the date at the top of the page changes with it. Material changes will be summarised here rather than folded in quietly.