Data minimisation by design.
This notice explains the website intake process. It will be reviewed with the final legal entity and processing infrastructure before commercial launch.
What we collect
The confidential mandate form asks for professional contact details, an investment objective, possible route, timing and optional investment range. Newsletter registration stores the email address, consent record, source, registration date and a cryptographic hash used to validate cancellation. Do not submit identity documents, bank information, health data, criminal records, trade secrets or other sensitive material.
Purpose and lawful basis
Mandate information is processed to respond to a requested pre-contractual assessment. Newsletter information is processed on consent, which can be withdrawn at any time through the subscription-management link. Optional analytics are processed only after the visitor chooses “Allow analytics”.
Optional visitor analytics
If a visitor selects “Allow analytics”, NAUPT records anonymous page views, approximate country, region and city, referral source, campaign, device category, scroll-depth bands and normalised click positions. Raw IP addresses are not stored, analytics are not used for cross-site profiling, and anonymous browsing history is not linked to newsletter email addresses. Selecting “Essential only” prevents these analytics events.
Retention
Consented analytics events are removed after 180 days. Mandate submissions are retained for no longer than 24 months after the last relevant interaction unless a shorter period is appropriate or a legal obligation requires otherwise. Active newsletter records are retained while the subscription remains active; a minimal suppression and consent record may be retained after withdrawal to evidence and respect the request.
Your choices and rights
You may withdraw newsletter consent through the link supplied at registration and in future editions. Rights of access, correction, erasure, restriction, objection and portability apply where provided by law. The definitive controller identity, contact channel, processor list and international-transfer information remain a production release gate.
Browser storage
The mandate form stores an unfinished draft locally on the user’s own device. The site also stores the visitor’s analytics preference and, after consent, a session-only random identifier. These items can be cleared by deleting site data in the browser.