Information collected

When using this site, certain information is collected directly from visitors and certain data is generated automatically by technical systems. Only information that is relevant to operating the service, responding to messages, and improving material on perceived financial risk is sought. The main categories of data are outlined below.

• Contact details such as name, email address, and phone number when voluntarily provided through forms or direct messages. These details are used to respond to enquiries, schedule conversations, and, where requested, share follow up information about behavioural finance and perceived financial risk topics.
• Context information supplied in messages, including organisation type, role, and high level descriptions of financial decision challenges. This information helps tailor responses to the nature of the question while avoiding collection of detailed financial records or account specific data.
• Technical data generated when visiting the site, such as IP address, device type, browser version, approximate location, and pages visited. This data is used in aggregated form to maintain security, detect misuse, and understand how readers navigate content on perceived financial risk so that it can be improved.
• Preference and consent data, including cookie choices, communication preferences, and records of when key notices were presented or agreed. This information is kept to demonstrate compliance with data protection rules and to respect visitor selections over time.

How collected data is used

Information collected through this site is used mainly to respond to enquiries, improve content on perceived financial risk, and keep the service secure. Each use is linked to a clear purpose and, where required, a specific legal basis under applicable data protection laws. The aim is to handle data in a way that is proportionate, transparent, and respectful of visitor expectations.

• To respond to messages, enquiries, and requests sent through contact forms or email, including arranging conversations about perceived financial risk, subjective risk assessment, and related topics. Contact details and context information are used only as needed to provide relevant replies.
• To operate, maintain, and improve the site, including monitoring performance, fixing technical issues, and understanding how visitors engage with content on perceived financial risk. Aggregated analytics help identify which explanations or tools are most useful and where navigation or clarity can be improved.
• To manage consent and preferences, such as cookie choices, communication settings, and acknowledgement of key notices. Records of these actions are kept to demonstrate compliance with data protection requirements and to respect visitor selections over time.
• To protect the security, integrity, and lawful use of the service, including detecting and addressing potential misuse, spam, or unauthorised access attempts. Technical logs and related data may be reviewed for this purpose, with access restricted to authorised personnel or service providers.

Legal basis for processing

Data protection laws require a clear explanation of the legal grounds used when processing personal data. Depending on the context, different bases may apply. The following summary sets out the main legal bases relied upon when operating this site and handling information related to perceived financial risk content.

Where visitors submit forms or send messages, processing of contact details and enquiry content is generally based on consent or on steps taken at the request of the individual before entering into any potential engagement. Analytics that go beyond what is strictly necessary for running the site typically rely on consent, captured through cookie tools where required. Certain security and log data may be processed on the basis of legitimate interests in maintaining the stability, integrity, and lawful operation of the service, balanced against visitor rights. In all cases, efforts are made to limit data to what is necessary and to honour withdrawal of consent or objections where applicable.

Data sharing

Personal data is not sold. However, it may be shared with carefully chosen third parties who help operate, secure, or analyse the site. Sharing is limited to what is necessary for the relevant service and is governed by appropriate contractual safeguards where required by law.

• Service providers that supply hosting, security, analytics, email delivery, or form handling may process personal data on behalf of Boaseoruisnaesteigan. These providers are selected for their reliability and are expected to handle information according to contractual instructions, including confidentiality and data protection obligations aligned with applicable laws.
• Professional advisers, such as legal or compliance specialists, may access limited personal data when assisting with audits, dispute resolution, or regulatory questions. Access is restricted to what is needed for the specific task and is subject to confidentiality duties.
• Public authorities or other parties may receive personal data where disclosure is required by law, court order, or regulatory request, or where it is necessary to investigate suspected misuse, protect rights, or respond to security incidents. Any such disclosure is assessed carefully to ensure it is lawful and proportionate.

Data security

Data security is treated as a shared responsibility. This site uses reasonable technical and organisational measures to reduce the risk of unauthorised access, loss, or alteration of personal data. Examples include encrypted connections where appropriate, restricted access to administrative tools, and regular reviews of service provider practices. No system is perfectly secure, and transmissions over the internet carry inherent risks. For this reason, visitors should avoid sharing sensitive financial details, passwords, or identity documents through general contact forms. If a security concern is suspected, it should be reported promptly using the contact channels provided so that it can be investigated.

Your data rights

Depending on location and applicable law, individuals may have specific rights over their personal data. While this site is operated from India, it aims to respect key rights recognised under frameworks such as Indian data protection rules, the GDPR in the European Economic Area, the CCPA in California, and the LGPD in Brazil, where relevant. These rights are subject to conditions and legal limits, but they provide important tools for maintaining control over personal information.

• Right of access, which may allow individuals to request confirmation of whether personal data about them is being processed and, if so, to receive a copy along with certain related information, subject to legal restrictions and the rights of others.
• Right to rectification, which may allow individuals to request correction of inaccurate or incomplete personal data held about them, particularly contact details or preference records used to respond to enquiries or manage communications.
• Right to erasure or restriction, which in some circumstances may allow individuals to request deletion of certain personal data or limitation of its use, for example where it is no longer needed for the stated purpose or where consent has been withdrawn and no other legal basis applies.
• Right to object or withdraw consent, which may allow individuals to challenge processing based on legitimate interests or to withdraw consent given for analytics or communications. In addition, some visitors may have a right to data portability or to lodge complaints with supervisory authorities under GDPR, CCPA, LGPD, or similar laws.

Cookies and similar tools

Cookies and similar technologies are used to keep the site secure, remember basic preferences, and understand how visitors interact with content on perceived financial risk. Some cookies are necessary for technical functions, while others support analytics or limited outreach. Details about cookie types, purposes, durations, and management options are set out in the separate cookie policy, which should be read together with this notice.

View cookie policy View cookie policy

Contact details

Questions about how personal data is collected, used, or protected on this site can be raised using the contact details below. When writing, include enough context to identify any forms used, pages visited, and approximate dates so that logs can be checked. Responses will focus on explaining practices and rights, not on providing personalised financial advice or recommendations.

Changes to this policy

This privacy policy may be updated from time to time to reflect changes in law, guidance, or the way the site operates. When significant changes are made, the updated version will be posted here with a revised last updated date. In some cases, additional notices may be shown on key pages or via consent tools. Continued use of the site after changes are published will be taken as acknowledgement of the updated policy, so visitors are encouraged to review it periodically.