Legal

Privacy Policy

This website tracks nothing. Here is what we hold, and how to have it removed.

Short version: this website tracks nothing. We only hold what you send us, and you can ask us to delete it at any time.

1. Who we are

Southern Celtic LLC, a Texas limited liability company trading as Southern Celtic Advisory, is the controller of this data. We operate from Katy, Texas. Our registered and mailing address is 1710 Keller Parkway #5333, Keller, TX 76248, United States.

For anything in this notice, write to jlorenzo@southernceltic.com or call +1 (281) 200 5300.

2. This website tracks nothing

No cookies. No analytics, tag manager, advertising pixel or session recording. No third party fonts or scripts, so loading a page sends nothing to anyone but our own host. No consent banner is needed because there is nothing to consent to.

Our hosting provider keeps standard server logs, which include your IP address, browser type, referring page and a timestamp, to keep the site running and secure.

3. What we collect, and why

Only what you give us: your name, email address, telephone number, company and role, plus whatever you choose to tell us in a booking form, an email or a call.

We use it to reply to you, to prepare for and hold the conversation, to deliver the work if we go on to work together, and to keep the accounting and tax records we are required to keep. Under the EU and UK GDPR our legal bases are, respectively, steps taken at your request before a contract, performance of a contract, our legitimate interest in answering you and running a secure website, and legal obligation.

We do not sell personal data, share it for advertising, or add you to a mailing list because you booked a call.

4. Who else sees it

Only providers who process it on our behalf, under contract, and only as needed: Cal.com for scheduling, Google for email, calendar and document storage, Notion for prospect and engagement records, Anthropic for research and drafting support, our website host, and our accounting and banking providers. We may also disclose data where the law requires it, or to establish or defend a legal claim.

Cal.com is contacted only when you click a booking link, and handles your booking under its own privacy notice as well as ours.

5. Where it goes, and for how long

We are in the United States, so data reaches the United States. Where a provider above carries data outside the EEA or UK, we rely on the transfer safeguards that provider has put in place, such as EU US Data Privacy Framework certification or Standard Contractual Clauses incorporated into its terms. Ask us and we will tell you which providers hold data relating to you.

We have not appointed an EU or UK representative. GDPR Article 27(2)(a) removes that obligation where processing is occasional, involves no special category data at scale, and is unlikely to put anyone at risk. A handful of business contact records from individual enquiries falls inside that exemption.

Enquiries that go nowhere are deleted after 24 months. Client records are kept for 7 years for tax and professional purposes. Server logs are kept for as long as our host retains them.

6. Your rights

Wherever you are, you can ask us to confirm what we hold about you, give you a copy, correct it, or delete it. In the EEA or UK you can also ask us to restrict or port it, object to processing based on legitimate interests, withdraw any consent, and complain to your national supervisory authority.

Email jlorenzo@southernceltic.com. We reply within 30 days and may need to verify who you are first. If we say no, tell us why you disagree and we will answer in writing.

Our services are for organisations. We do not knowingly collect data from anyone under 18. We protect what we hold with access controls, encrypted transport and vetted providers, though no system is perfectly secure. If this notice changes we will post the new version here with a new date.

Last updated: 10 August 2026