This may include identity and contact information, professional and organisational details, enquiry and engagement information, event or subscription preferences, correspondence, billing and transaction records, website usage data, device information, cookies and information supplied by authorised third parties.

Purposes may include responding to enquiries, assessing and delivering engagements, administering programmes, managing relationships, processing payments, maintaining security, improving website performance, sending requested insights and fulfilling professional, contractual and legal responsibilities.

Depending on the context, the relevant basis may include performance of a contract, steps taken before entering a contract, compliance with a legal obligation, legitimate interests, consent, or another basis permitted by applicable data protection law.

Recipients may include professional advisers, specialist delivery partners, technology and cloud providers, website and email service providers, payment processors, regulators, public authorities and other parties where disclosure is lawful, necessary and proportionate.

Where international transfers occur, we take reasonable steps to use lawful transfer mechanisms, contractual protections, access controls and supplier due diligence appropriate to the nature and risk of the information.

Retention periods are determined by the purpose of collection, contractual and professional requirements, applicable limitation periods, legal obligations, security considerations and the need to establish or defend legal claims.

Depending on the law that applies, your rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent and the right to complain to an appropriate supervisory authority.

Where required, non-essential cookies should be activated only after consent. Detailed information about cookie categories, providers, duration and choices should be maintained in the separate Cookie Notice and consent-management tool.

Measures may include access controls, authentication, secure configuration, encryption where appropriate, supplier governance, backups, monitoring, incident management, staff awareness and periodic review of security arrangements.

Email privacy@heritagespringsadvisory.com or write to Heritage Springs Advisory, One Grand Canal Square, Dublin 2, D02 A342, Ireland. Identity verification may be required before completing certain rights requests.