Privacy notice

Scope and information

This notice covers the public website and authenticated private office. We process enquiry details, account and authentication identifiers, household and membership settings, requests and private messages, residence records, document metadata and files you upload, billing and subscription records, notification preferences, security and operational logs, and privacy-request records. The public enquiry form is not intended for identity documents, medical records, financial credentials or similarly sensitive material.

Purposes

We use information to assess enquiries, create and secure accounts, provide the private-office workspace, coordinate requested services, administer membership and billing, deliver notifications, prevent abuse, maintain audit records, comply with legal duties and handle data-rights requests. Depending on context, processing supports steps you request, performance of an engagement, legitimate security and operational interests, legal obligations, or consent where required.

Service providers and sharing

Access is limited on a need-to-know basis. Infrastructure, authentication, payment, communications and professional-service providers may process the minimum information needed for their role under appropriate restrictions. Payment card data is handled by the payment provider rather than stored in the Sovelaire workspace. We do not sell personal information or use it for cross-context behavioural advertising.

Security and retention

We use access controls, transport encryption, private object storage, rate limiting and operational logging. No system is risk-free. Records are retained for the active relationship and then according to contractual, security, tax, legal and dispute-resolution needs. Unsuccessful enquiries and expired operational records are periodically reviewed for deletion. Authorised vault deletion removes the stored object and its workspace record, subject to required backups or legal holds.

Your rights and choices

Depending on applicable law, you may request access, export, correction, deletion, restriction or objection, and may withdraw consent where processing relies on consent. Signed-in members should use Privacy & data rights in the private office; others may submit an enquiry clearly marked “privacy request”. We verify identity, authority over shared household data and applicable retention duties before acting. Requests and outcomes are recorded in the workspace.

International processing

Sovelaire supports globally mobile households, so information may be processed in multiple jurisdictions. Appropriate contractual and technical safeguards are used where required. Engagement-specific privacy terms identify the relevant contracting entity, roles and transfer arrangements before services begin.

Contact and updates

Use the signed-in privacy-request channel or the secure enquiry form. Material notice changes will be reflected here with a new effective date and, where appropriate, an in-product notice.