Legal
Privacy Policy
Last updated: February 28, 2026
Our commitment to your privacy
Thornveil takes data privacy seriously. This policy describes the personal data we collect through this website, how that data is used, who it may be shared with, and the rights available to you under applicable privacy law.
This policy applies to visitors of our website and people who contact us through our contact form. It does not cover data processed under separate agreements with clients of our accounting services.
1. Data we collect
Information you provide directly
When you use our contact form, we collect the information you enter: your name, email address, the subject of your inquiry, and the message content. This information is used solely to respond to your inquiry and is not shared with third parties for marketing purposes.
Automatically collected data
When you visit the website, certain technical data is collected automatically: your browser type, operating system, referring URL, pages visited, session duration, and general geographic location (country or region level, not precise location).
This data is collected via cookies and similar technologies. See our Cookie Policy for full details on cookie types and how to manage them.
Analytics and advertising data
With your consent, we use Google Analytics to collect aggregated behavioral data about how the website is used. We may also use advertising cookies to measure campaign performance. No profiling of individual visitors is conducted for purposes beyond what is described here.
2. How we use your data
Responding to contact inquiries
Contact form submissions are used exclusively to reply to your message. Legal basis: legitimate interest in responding to inquiries about our services.
Improving the website
Aggregated analytics data is used to understand how the site is used and to make improvements. Legal basis: legitimate interest and, for optional cookies, consent.
Advertising and remarketing
With consent, advertising-related data may be used to measure campaign effectiveness and show relevant content to previous visitors on other platforms. Legal basis: consent.
Legal and security obligations
Certain data may be retained where required by law or to protect the security and integrity of the website. Legal basis: legal obligation and legitimate interest.
3. Data sharing with third parties
We do not sell personal data. We may share limited data with the following types of third-party service providers:
Analytics providers
Aggregated usage data is processed by Google Analytics under their data processing terms. Data is anonymized where possible.
Advertising platforms
With consent, advertising data may be shared with Google Ads and affiliated platforms solely for measurement and audience targeting purposes.
Legal and regulatory requirements
Data may be disclosed if required by law, court order, or regulatory authority. We will notify you where legally permitted to do so.
4. Data protection & retention
Security measures
Data transmitted through our website uses HTTPS encryption. Access to any submitted contact data is restricted to authorized personnel only.
Retention periods
Contact form submissions are retained for up to 24 months or until a response cycle is complete, after which they are deleted. Analytics data is retained in aggregated form per Google Analytics' standard retention settings. Cookie consent records are stored in your browser's localStorage until cleared.
5. Your rights
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of personal data where we have no legal basis to retain it.
Right to portability
Request a machine-readable copy of data you've provided to us.
Right to object
Object to processing based on legitimate interest, including for analytics purposes.
Right to withdraw consent
Withdraw cookie consent at any time through our Cookie Policy page.
To exercise any of these rights, contact us through the contact page. We will respond within 30 days.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: Avoid filling out contact forms, account registrations, or any data-submitting features. Disable cookies through your browser settings (see our Cookie Policy for more details). Contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.