SwissNord

Privacy Policy

Last updated: 20 October 2026

1. Who we are

This website (swissnord.io) is operated by Swissnord.

We are the controller of your personal data, which means we decide how and why it is processed.

If you have any questions about this policy or how we handle your data, email us at Advisory@swissnord.io.

2. Scope

This policy explains how we collect, use and protect personal data when you visit our website, contact us, or work with us. It applies under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

3. What data we collect

Data collected automatically: when you visit our website, our hosting provider records technical data such as your IP address, browser type, device type, referring website, pages viewed, and the date and time of your visit.

Data you give us: when you use our contact form or email us, we collect your name, business email address, company name, the situation you select, and the content of your message. If we go on to work together, we also hold the business contact and correspondence details needed to deliver our services.

We do not knowingly collect data from children.

4. How and why we use your data

Under UK GDPR we must have a lawful basis for each use of your data. We rely on the following:

  • Operating and securing our website: legitimate interests (running a safe, functional website).
  • Responding to enquiries and arranging calls: legitimate interests, or taking steps before entering into a contract with you.
  • Delivering advisory services to clients: performance of a contract.
  • Keeping financial and tax records: legal obligation.

We do not send marketing emails unless you have asked us to or the law otherwise allows it, and you can opt out at any time.

5. Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as far as necessary:

  • Website hosting: Railway Corporation, United States (our website runs on servers in Europe)
  • Email: IONOS, which hosts our mailbox and delivers enquiries sent through our contact form
  • Web fonts: Google Fonts (Google LLC), which receives your IP address when fonts load
  • Professional advisers: accountants and legal advisers, where needed

We may also disclose data where required by law, for example to HMRC, the police, or a court.

6. International transfers

Some of our service providers are based outside the UK, including in the United States. Where data is transferred outside the UK, we make sure it is protected by one of the following: the destination is covered by UK adequacy regulations (as the EU/EEA is); the recipient is certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge"); or we use the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. Cookies

Our website does not use analytics, advertising or other non-essential cookies. If we introduce them in future, we will only set them with your consent and will update this policy.

8. How long we keep your data

  • Contact enquiries: 12 months after our last correspondence, unless we go on to work together
  • Client and financial records: 6 years from the end of the financial year, as required for tax purposes
  • Server logs: as set by our hosting provider, typically 30 days

After these periods, data is securely deleted or anonymised.

9. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and reputable service providers. No method of transmission over the internet is completely secure.

10. Your rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure of your data in certain circumstances
  • Restrict how we use your data
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Data portability, meaning receipt of your data in a commonly used electronic format
  • Withdraw consent where we rely on it

To exercise any of these rights, email Advisory@swissnord.io. There is normally no charge, and we will respond within one month. We may need to verify your identity first.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first and we will do our best to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.