Privacy notice

This document is a working draft and must be reviewed by qualified counsel before launch. It describes how PWA — Personal Wealth Advisory (PWA Advisory Ltd.) collects, uses, retains, and protects personal data submitted through this website. Our advisory engagements are governed by a separate, executed engagement letter and confidentiality agreement.

1. Who we are

PWA Advisory Ltd., operating as PWA — Personal Wealth Advisory, is the data controller for personal data submitted via https://www.pwa-advisory.com. Any data you submit can be addressed to hello@pwa-advisory.com.

2. What we collect

• Inquiry data: the name, email address, message, and optional referral information you submit through the inquiry form on /contact/.
• Calendar data: when you book a call, the third-party scheduling platform (e.g., Cal.com) processes your name, email, and time-zone in accordance with its own privacy notice. PWA receives the resulting booking record.
• Server logs: Cloudflare automatically processes IP addresses and request metadata for routing, DDoS protection, and abuse prevention. We do not link this to inquiry data.
• Privacy-preserving analytics: we use Cloudflare Web Analytics, which does not set cookies and does not track individuals across sites.

3. What we do not collect

We do not place advertising cookies, retargeting pixels, or third-party tracking on this website. We do not sell, rent, or otherwise transfer personal data. We do not use submitted data to train AI models.

4. Legal basis

Where the GDPR or UK GDPR applies, we process inquiry data on the basis of your consent (you explicitly submit the form) and our legitimate interest in responding to qualified inquiries about our services. You may withdraw consent at any time by emailing hello@pwa-advisory.com.

5. Retention

Inquiry data is retained for the duration of the resulting conversation and, where the conversation does not lead to an engagement, deleted within twelve months. Where it does lead to an engagement, the data becomes part of the engagement record and is retained as required by professional and legal obligations.

6. Recipients

Inquiry submissions are sent by email through Resend (or a comparable transactional email provider) to a private mailbox controlled by PWA. No third party other than the email provider, the website host (Cloudflare), and our spam-protection provider (Cloudflare Turnstile) receives this data.

7. International transfers

Our hosting and email infrastructure may process data in the United States. Where required, transfers are made under Standard Contractual Clauses or equivalent safeguards.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to specific processing. To exercise any of these rights, email hello@pwa-advisory.com.

9. Security

The website is served exclusively over HTTPS. We use Cloudflare Turnstile to mitigate automated abuse without setting cookies. Inquiry data is not stored in the public website; it is forwarded to a private mailbox and removed from logs.

10. Changes

We will update this notice when our practices change. The "Last updated" date at the top of this page reflects the most recent change.

Notice: this template has been drafted by PWA for the purposes of the website launch and requires legal review against the firm's actual operating jurisdiction(s) before being relied upon.