Privacy Policy

1. Information you give us

We collect personal information that you provide directly, principally when you submit our contact form or correspond with us. This includes your name, email address, optional telephone number, the area of interest you select, and the content of your message.

If you hold a client portal account, we also hold the email address used to sign in and a record of the documents made available to you.

Where you engage us as a client, we hold the information needed to manage that relationship and to meet our legal obligations. This is business information about you and your organisation, not consumer profiling, and we collect only what the engagement requires.

• —Organisation details: legal name, entity type, registration number, industry, website, and registered address
• —Contact details for the people we deal with: name, title, email address, telephone number, and their role in relation to the engagement
• —Relationship records: the person at our firm responsible for the account, how the relationship began, notes of our dealings, and a log of calls, meetings and correspondence
• —Commercial terms: billing entity, fee arrangement, payment terms, and billing contact
• —Compliance records: a tax identification number where one is required of us, the status of client due diligence and anti-money-laundering checks, when those checks were completed and when they next fall due, and notes recording their outcome

2. Information collected automatically

Our hosting provider records standard server logs, which may include your IP address, browser type, referring page, and the time of your request. We use your IP address to apply rate limits to the contact form, which protects it from automated abuse.

• —IP address
• —Browser type and version
• —Pages requested and the time of the request
• —Referring website, where your browser sends one

3. How we use your information

We do not use the details you submit through the contact form to send marketing that you have not asked for.

• —To respond to your enquiry and to correspond with you about it
• —To provide access to documents through the client portal, where you hold an account
• —To protect the website against automated abuse and fraudulent submissions
• —To administer a client engagement, including billing and ordinary account management
• —To carry out client due diligence and anti-money-laundering checks where the law requires them of us
• —To meet obligations under applicable law

4. How we share your information

We do not sell, rent, or trade your personal information.

• —Service providers: our website and database are hosted by Railway, and email is sent and received through Google Workspace. These providers process the relevant data on our behalf and under contract.
• —Legal requirements: where disclosure is required by law, court order, or a competent authority.
• —Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will take reasonable steps to ensure your information remains protected.
• —With your consent: where you have asked us to share it.

5. Cookies and your choices

The public pages of this website set no cookies at all. We use no advertising cookies and no third-party trackers, and our typefaces are served from our own domain rather than a font provider, so browsing these pages contacts no one but us.

The client portal sets one strictly necessary cookie to keep you signed in. It is required for the portal to work and cannot be declined while you are signed in — under data protection law, strictly necessary cookies of this kind do not require consent.

When you first visit, we ask whether you will allow optional cookies. Choosing "Essential only" means nothing beyond the strictly necessary cookie above is ever set. Choosing to allow optional cookies permits analytics that help us understand how the site is used. We do not currently operate any analytics; the choice is recorded so that your preference is already respected if we introduce one.

Your choice is stored in your browser's local storage, not in a cookie, and you can change it at any time using the "Cookie settings" link in the footer.

6. Third-party services

This website relies on a small number of external services, listed here so you know who processes your data:

• —Railway — website and database hosting, and server logs
• —Google Workspace — hosting of our email, and delivery of messages sent through the contact form and portal sign-in
• —Our typefaces originate from the Google Fonts library but are self-hosted and served from our own domain. Your browser does not contact Google to render this site, and Google receives nothing about your visit.

7. Data security

We apply technical and organisational measures appropriate to the sensitivity of the information we hold. All traffic to this website is encrypted in transit. Credentials for third-party services are held in encrypted environment variables and are not stored in our source code.

Documents in the client portal are held in private storage and are not publicly addressable. Access is authorised on each request, and files are served through short-lived links that expire.

No system is perfectly secure, and we cannot guarantee absolute security of information transmitted over the internet.

8. Data retention

We keep enquiry correspondence for as long as needed to deal with your enquiry and to maintain ordinary business records. Client portal documents and their access logs are retained for the duration of the client relationship and for such period afterwards as our records and legal obligations require.

Records created for client due diligence and anti-money-laundering purposes are subject to a minimum retention period set by law — generally five years from the end of the relationship — and we cannot delete them before it expires, even on request.

You may ask us to delete correspondence that we are not required to keep.

9. Your rights

You may ask us to provide a copy of the personal information we hold about you, correct it if it is inaccurate, or delete it where we are not required to retain it. Write to us at the address below and we will respond within a reasonable period.

10. Children's privacy

This website is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. International transfers

We are based in Belize, and the service providers listed above process data in facilities outside Belize, including in the United States and the European Union. By using this website you understand that your information may be transferred to and processed in those locations.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the date shown at the top of this page. Material changes will be brought to your attention where it is reasonable to do so.

13. Contact us

Questions about this policy, or requests concerning your information, can be sent to [email protected], or by post to 99 Albert Street, Belize City, Belize.