Privacy Policy

Our commitment to your privacy

Vestara takes the handling of personal data seriously. This policy explains what information we collect, why we collect it, how it is used and protected, and what choices you have. We aim to be straightforward about these practices — there are no surprises here. If anything is unclear, please reach out and we'll be glad to help.

What data we collect

• —Contact information: When you use our contact form, we collect your name, email address, and the content of your message. A subject line and scheme name are optional.
• —Usage data: If you have consented to analytics cookies, we may collect information about how you navigate the site — pages visited, time spent, and how you arrived. This data is aggregated and does not identify you individually.
• —Cookie preferences: We store your cookie consent choices in your browser's local storage so that we can respect them on future visits.
• —Client data: In the course of providing accounting services, we may receive personal and financial data relevant to pension scheme administration. This is handled under separate client agreements and is not covered in detail here.

Legal basis for processing

• —Consent: For optional cookies and any marketing-related communications, we process data only with your explicit consent, which you may withdraw at any time.
• —Legitimate interests: For operating and improving this website, and for responding to enquiries we receive through the contact form.
• —Contractual necessity: For data processed in connection with providing accounting services to clients.

How we use your data

• —To respond to your enquiries and communicate about potential or ongoing engagements.
• —To understand how visitors use the site and to make improvements, where analytics consent has been given.
• —To maintain the security and correct operation of the website.
• —We do not sell personal data to third parties, and we do not use it for unsolicited marketing.

Sharing with third parties

We may share data with analytics and advertising platforms (such as Google Analytics) where you have consented to those cookies. We do not share your contact form data with third parties for their own purposes. Any third-party processors we work with are required to handle data in accordance with applicable privacy regulations.

How long we keep your data

Contact form enquiries are kept for as long as is reasonably necessary to respond to and follow up on your enquiry, after which they are deleted. Cookie consent data is stored locally in your browser and is not retained on our servers. Client data is handled under specific retention policies agreed with each client.

How we protect your data

• —Data transmitted to and from this site is encrypted using HTTPS.
• —Access to any personal data we hold is limited to those who need it to respond to your enquiry or provide services.
• —In the event of a data breach that is likely to affect your rights, we will notify you and any relevant authority as required by applicable law.

Your rights

• —Access: You may request a copy of the personal data we hold about you.
• —Rectification: You may ask us to correct any inaccurate data we hold.
• —Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected.
• —Portability: You may request your data in a structured, commonly used format where technically feasible.
• —Objection: You may object to processing carried out on the basis of legitimate interests.
• —Withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing already carried out.

Changes to this policy

We may update this privacy policy from time to time. Where changes are significant, we will make that clear on this page. The date at the top of the page reflects when it was last revised. Continued use of the website after an update constitutes acceptance of the revised terms.