top of page

Privacy Notice

Effective date: 01 November 2024
Version: 1.0

This Privacy Notice explains how Aragon Brettschneider (dba Astoria Succession Partners) (“I”, “me”, “my”) processes personal data when you visit carpenter-succession.com, contact me, or use my services.

​

1) Controller & Contact

Controller: Aragon Brettschneider
Postal address: Medius House, 2 Sheraton St, London W1F 8BH, United Kingdom
Email: Brettschneider@astoria-succession.uk

(If required) UK Representative (Article 27 UK GDPR):
[Representative company/name], [address], [email].
Acts as a contact point for individuals and the ICO.

Supervisory authority (UK): Information Commissioner’s Office (ICO), ico.org.uk.
You can lodge a complaint with the ICO at any time. I would appreciate the chance to resolve your concerns first—please contact me using the details above.

 

2) Who this notice applies to

  • Visitors to carpenter-succession.com

  • Prospects, clients, suppliers and their contacts

  • Recipients of my marketing communications (where permitted)

This notice doesn’t cover third-party websites/services I link to.

 

3) Personal data I process

Data you provide:

  • Identity and contact details (name, email, phone, postal address)

  • Message content (e.g., from forms or emails)

  • Contract, billing and payment details (if you engage my services)

Data collected automatically (when you use the site):

  • Device and log data (IP address, browser/OS, timestamps, pages viewed, referrer)

  • Cookies/SDKs—only non-essential ones with your consent

Data from other sources:

  • Publicly available business information (e.g., corporate websites, LinkedIn)

  • Referrals and service providers (where lawful)

 

4) Purposes & lawful bases

PurposeExamplesLawful basis (UK GDPR)

Operate and secure the websiteLoad pages, prevent abuse, diagnosticsLegitimate interests (Art. 6(1)(f))

Communicate and handle enquiriesRespond to emails/forms, schedule callsContract (Art. 6(1)(b)) or Legitimate interests (Art. 6(1)(f))

Provide and administer servicesProposals, performance, invoicing, supportContract (Art. 6(1)(b))

Billing, tax, complianceAccounting records, legal claimsLegal obligation (Art. 6(1)(c)) and/or Legitimate interests (Art. 6(1)(f))

Analytics & improvementsUnderstand usage, improve contentConsent (Art. 6(1)(a)) for any non-essential cookies/tools

Direct marketingUpdates about my servicesConsent for individuals; Legitimate interests for B2B corporate contacts, with easy opt-out

You can withdraw consent at any time—this won’t affect prior processing.

 

5) Cookies & similar technologies

  • I use essential cookies needed to run the site. These do not require consent.

  • Any non-essential cookies (e.g., analytics, measurement, A/B testing) are used only if you consent via the banner. You can Accept, Reject, or open Settings; your choice is respected and can be changed at any time.

  • Details (names, providers, purposes, lifetimes) are listed in the Cookie Settings/Policy page.

 

6) Who I share data with (processors & recipients)

I use trusted service providers (acting as processors) to host the website, store data, send emails, run analytics (if enabled), and provide business IT. They process data strictly under my instructions and appropriate safeguards.

Where necessary, I may also share data with: professional advisers (legal/accounting), payment and banking providers, and authorities or courts where required by law.

I do not sell personal data.

 

7) International transfers

Some processors or sub-processors may be located outside the UK. When I transfer personal data internationally, I use lawful safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to EU SCCs, or another valid mechanism, and I assess the transfer risks where appropriate.

 

8) Retention periods

I keep data only as long as needed for the stated purposes, then delete or anonymise it.

  • Enquiries (not becoming clients): up to 12 months after last contact

  • Client and billing records: generally 6 years (tax/accounting)

  • Marketing preferences and opt-outs: kept as long as needed to honour your choice

  • Security/log data: typically 30–180 days unless needed longer for security or legal reasons

 

9) Your rights

Subject to conditions and exemptions under UK GDPR, you have the right to:

  • Access your data and obtain a copy

  • Rectify inaccuracies

  • Erase data (where applicable)

  • Restrict processing

  • Object to processing, including direct marketing (I will stop marketing if you object)

  • Data portability (for data you provided, processed by automated means, based on consent or contract)

To exercise your rights, contact me using the details in Section 1. I will respond within one month (extendable by two months for complex requests; I will let you know if that happens). I may need to verify your identity.

You also have the right to complain to the ICO (see Section 1).

 

10) Marketing choices

  • Emails to individuals (consumers / sole traders / partnerships): sent only with your consent.

  • B2B emails to corporate subscribers (e.g., name@company.co.uk): sent under legitimate interests and always include an easy unsubscribe.

  • You can opt out at any time by using the unsubscribe link or contacting me.

 

11) Security

I take appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege principles, and regular patching/updates. No system is 100% secure; I monitor and address issues promptly.

 

12) Children

My site and services are not intended for children. I do not knowingly collect data from anyone under 16. If you believe a child has provided data, please contact me to delete it.

 

13) Changes to this notice

I may update this notice from time to time. The latest version will always be available on this page, with the effective date at the top.

 

14) Contact

Questions or requests about this notice or your personal data?
Email brettschneider@astoria-succession.uk or write to Aragon Brettschneider (dba Astoria Succession Partners), Medius House, 2 Sheraton St, London W1F 8BH, United Kingdom.

bottom of page