What we collect, why, who else touches it, and how long we keep it. No cookies, no analytics, no tracking.
GOLDHORNCONSULTING LTD (company number 16902481), registered office 124–128 City Road, London, England, EC1V 2NX, is the data controller for personal data collected through this website.
For any question about this notice, or to exercise any of the rights set out below, write to privacy@goldhornconsulting.com.
We collect your name, the firm or family office you gave, your email address, anyone you said referred you, and the content of your message. We use it to reply to you and to keep a record of the correspondence. Our lawful basis is legitimate interests — responding to someone who has asked us to.
To see figures relating to completed mandates you must certify which category of investor you fall into. We record the category and criterion you selected, the name you signed, the date of signing, the expiry date, the exact wording of the statement you agreed to, your IP address, your browser's user-agent string, and the server timestamp.
Our lawful basis is legal obligation and legitimate interests. Under the Financial Services and Markets Act 2000 (Financial Promotion) Order 2005 we may only communicate certain information to certain categories of investor, and we must be able to demonstrate on what basis we did so. We cannot release those figures without keeping this record — which is why the certification cannot be skipped.
Our hosting provider records standard technical information about requests to the site, including IP addresses. We do not use this for analytics or profiling.
This website sets no cookies, uses no analytics, and runs no advertising or tracking scripts. Nothing is stored in your browser between visits. Your certification does not persist — if you return, you certify again.
We use the following third parties. Each is named so you know exactly where your information goes.
Hosts this website and runs the certification endpoint. Processes technical request data including your IP address. United States, with edge infrastructure worldwide. Privacy policy.
Receives and stores submissions from our enquiry form, and forwards them to us by email. Processes everything you type into that form. United States. Privacy policy.
Stores investor certification records in a database hosted in the United Kingdom or European Union. Processes the certification data listed above. Privacy policy.
Delivers the typefaces used on this site. When a page loads, your browser requests font files from Google's servers, which discloses your IP address to Google. We do not control that request beyond choosing to use the service. Privacy policy.
We do not sell personal data, and we do not share it with anyone other than the processors named above except where required by law.
Vercel and Formspree are United States companies and may process your data outside the United Kingdom. Where that happens, transfers are made under the UK International Data Transfer Addendum or equivalent safeguards provided in those companies' terms.
Enquiries. Retained while there is an active or prospective relationship, and for up to two years after the last contact.
Certification records. Retained for six years from the date of signing. That period reflects the time within which a claim could be brought, and the record is the evidence of the basis on which information was communicated to you.
Server logs. Retained according to our hosting provider's standard periods.
Under UK GDPR you may request a copy of the personal data we hold about you, ask us to correct anything inaccurate, ask us to delete it, ask us to restrict how we use it, object to processing carried out on the basis of legitimate interests, and request your data in a portable format.
One limitation worth stating plainly: we may decline to delete a certification record where we still need it to establish or defend a legal claim, or to demonstrate compliance with our obligations. If that applies to your request we will tell you, and explain why.
To exercise any right, write to privacy@goldhornconsulting.com. We will respond within one month.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first.
This notice was last updated on 7 August 2026. Where we make a material change we will update the date and, where appropriate, tell those affected.