Privacy Policy
Last Updated: June 19, 2026
Introduction
This Privacy Policy explains how mist-elk collects, uses, stores, and protects your personal information when you use our website or engage our financial management services. We are committed to protecting your privacy and handling your data responsibly.
Information We Collect
Information You Provide Directly
When you request a consultation or use our services, we collect:
- Name and contact information (email address)
- Financial information relevant to the service requested (income, expenses, debt details, investment holdings)
- Goals and preferences related to financial management
- Communication preferences
Information Collected Automatically
When you visit our website, we may automatically collect:
- Browser type and version
- Operating system
- IP address
- Pages visited and time spent on each page
- Referring website addresses
How We Use Your Information
We use collected information for the following purposes:
- To provide the financial management services you requested
- To communicate with you about your consultation or ongoing services
- To improve our website and service offerings
- To send follow-up materials and recommendations related to your consultation
- To comply with legal obligations
Legal Basis for Processing
We process your personal data based on:
- Contractual necessity: Processing is necessary to provide the services you requested
- Consent: You have given explicit consent for specific processing activities
- Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: Processing is required to comply with applicable laws
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
- Service providers: We may share information with trusted third-party service providers who assist in operating our website or conducting our business, subject to confidentiality agreements
- Legal requirements: We may disclose information when required by law or to protect our rights, property, or safety
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit and at rest
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Secure document storage and disposal procedures
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:
- Consultation records and financial information: Retained for seven years after the last service date for regulatory compliance
- Communication records: Retained for three years
- Website usage data: Retained for 24 months
Your Rights
Under applicable data protection laws, you have the following rights:
- Right of access: Request a copy of the personal information we hold about you
- Right to rectification: Request correction of inaccurate or incomplete information
- Right to erasure: Request deletion of your personal information, subject to legal obligations
- Right to restrict processing: Request limitation of how we process your data
- Right to data portability: Request transfer of your data to another service provider
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw previously given consent at any time
To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Cookies
Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or by sending you an email. The "Last Updated" date at the top of this policy indicates when it was last revised.
Contact Information
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
mist-elk
127 Bath Street
Glasgow G2 2SZ
United Kingdom
Email: [email protected]