1. Who we are

This website is operated by Borealis Advisory ("we", "us", "our"), a boutique advisory practice based in Newry, Northern Ireland. For the purposes of UK data protection law, Borealis Advisory is the data controller for personal data collected through this site.

Company name: Borealis Advisory

2. What personal data we collect

We only collect personal data that you choose to give us directly. Currently that's limited to two places on this site:

  • The enquiry form (About & Contact page): name, organisation, email address, the package you're interested in, and any message you write.
  • The free checklist download (DOWNTIME Waste Checklist page): your email address.

We don't currently use analytics, tracking pixels, or advertising cookies on this site. If that changes, this policy — and the cookie notice shown on the site — will be updated first.

3. How we use your data

We use the information you submit to:

  • Respond to your enquiry and discuss the services you've asked about;
  • Send you the resource you've requested (e.g. the DOWNTIME checklist) and, if you don't opt out, occasional relevant updates from us;
  • Keep a record of enquiries for our own business administration.

We do not sell, rent, or otherwise share your personal data with third parties for their own marketing purposes.

4. Our legal basis for processing

We rely on the following legal bases under UK GDPR:

  • Legitimate interests — to respond to enquiries you've initiated and to run our business.
  • Consent — where you've actively opted in to receive email updates from us; you can withdraw this at any time.
  • Contract — where processing your data is necessary to deliver a service you've engaged us for.

5. How long we keep your data

Enquiry data that doesn't turn into a client relationship is kept for no longer than 24 months, and email addresses collected for the checklist download are kept until you unsubscribe. Data relating to an active or completed client engagement is kept in line with our standard business and accounting record-keeping obligations.

6. Who we share your data with

We use a small number of third-party services to run this site and our business, which may process your data on our behalf as data processors:

  • FormSubmit, to deliver enquiry form and checklist signup submissions to our inbox;
  • Netlify, to host this website;
  • Stripe, once online payment for the Business Health Scan is live, to process card payments securely — we do not see or store your card details ourselves.

This section will be updated once Stripe payments go live for real transactions.

7. Cookies

This site currently uses only strictly necessary technical storage (for example, remembering that you've dismissed the cookie notice) — nothing that tracks you across other sites. If we add analytics or marketing tools in future, we'll update this section and ask for your consent first where required.

8. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Ask us to correct inaccurate data;
  • Ask us to delete your data ("right to be forgotten");
  • Restrict or object to how we process your data;
  • Request a copy of your data in a portable format;
  • Withdraw consent at any time, where consent is the basis for processing;
  • Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we've mishandled your data.

To exercise any of these rights, contact us using the details below.

9. Children's data

This site and our services are aimed at businesses and organisations, not children. We don't knowingly collect personal data from under-16s.

10. Changes to this policy

We may update this policy from time to time — for example, when we add a new form, a payment provider, or an analytics tool. The "last updated" date at the top of this page will always reflect the most recent version.

11. Contact us

Questions about this policy or how we handle your data can be sent to hello@borealisadvisory.co.uk.