Legal
Privacy Policy
How Glendalough Advisory LLC collects, uses, shares, and protects personal information, and the rights you have over it.
1. Who we are
Glendalough Advisory LLC ("Glendalough Advisory," "we," "us," or "our") is a New Jersey limited liability company providing fractional CFO, bookkeeping, and financial advisory services to businesses. Our mailing address is 971 US Highway 202N #7085, Branchburg, NJ 08876, United States. For personal information described in this policy, we are the data controller (or "business" under US state privacy laws), except where we process client data on a client's instructions, in which case we act as a processor or service provider under a written agreement with that client.
2. Scope
This policy applies to personal information we collect through our website at www.glendaloughadvisory.com (the "Site"), through email, telephone, and scheduling tools, and in the course of marketing and delivering our services. It does not apply to the personal information of our clients' customers, employees, or patients that we process solely on a client's behalf; that processing is governed by our agreement with the client, including any Data Processing Agreement or Business Associate Agreement.
3. Information we collect
Information you give us
- Contact and inquiry details. When you complete our contact form, email us, or book a call, we collect your name, work email address, company name, telephone number (if provided), the revenue range and service interests you select, and the content of your message.
- Engagement information. If you become a client, we collect the business and financial information needed to perform our services, along with contact details for your team and your other advisors. The handling of that information is also governed by our engagement agreement.
- Communications. Records of our correspondence with you, including emails and meeting notes.
Information collected automatically
- Technical data. Our hosting provider, Wix, records standard server logs when you visit the Site, including IP address, browser type, device type, referring page, pages requested, and timestamps. These logs are used for security, capacity, and troubleshooting purposes.
- Local storage. The Site stores your cookie-consent choice in your browser and, if you submit the contact form, a short-lived anonymous session token used to deliver your submission securely. See section 12 and our Cookie Policy.
We do not use analytics, advertising, or social-media tracking technologies on the Site, and we do not buy personal information from data brokers.
Please do not send sensitive information through the Site. Do not submit bank account or card numbers, Social Security numbers, government ID numbers, health or medical information, or other confidential records through the contact form or by unencrypted email. We provide a secure channel for such information once an engagement begins.
4. How we use information
- To respond to your inquiry and schedule and conduct discovery calls.
- To evaluate whether and how we can serve your business, and to prepare proposals and engagement agreements.
- To deliver, administer, and improve our services and to communicate with you about an engagement.
- To send you information you have asked for. We do not send marketing emails to people who have not requested them, and you can opt out of any marketing at any time.
- To operate, secure, and troubleshoot the Site, including detecting and preventing fraud, abuse, and security incidents.
- To comply with legal, tax, accounting, and professional record-keeping obligations, and to establish, exercise, or defend legal claims.
We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for automated decision-making that produces legal or similarly significant effects.
5. Legal bases for processing (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and scheduling calls | Consent (which you may withdraw at any time) and our legitimate interest in responding to people who contact us |
| Preparing proposals and delivering services | Performance of a contract, or steps taken at your request before entering into a contract |
| Operating and securing the Site | Legitimate interest in keeping the Site secure and functional |
| Record-keeping, tax, and accounting | Compliance with legal obligations |
| Sending information you have requested | Consent |
6. How we share information
We share personal information only as described here:
- Service providers (processors). Companies that host our Site and forms, provide email, calendar, document storage, scheduling, and accounting tools, and that process information only on our instructions under written agreements. Our principal providers are Wix.com Ltd. (website hosting and form handling), Google LLC (Google Workspace email, calendar, and storage), and Intuit Inc. (QuickBooks Online). A current list is available on request.
- Professional advisors. Our own lawyers, accountants, and insurers, where necessary and under duties of confidentiality.
- Legal requirements. Where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Glendalough Advisory, our clients, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
- With your direction. For example, when you ask us to share information with your bank, tax preparer, or another advisor.
7. International transfers
We are located in the United States and process information there. If you are outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country. For transfers from the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with appropriate supplementary measures, or on our providers' participation in the EU-US Data Privacy Framework where applicable. You may request a copy of the relevant safeguards by contacting us.
8. How long we keep information
| Category | Retention period |
|---|---|
| Website inquiries that do not lead to an engagement | 24 months from the last contact, then deleted |
| Client engagement records, including correspondence and work product | 7 years after the engagement ends, to satisfy tax and professional record-keeping obligations |
| Server logs held by our hosting provider | Per Wix's retention schedule, typically no more than 12 months |
| Cookie-consent record in your browser | 12 months, or until you clear your browser storage |
We may keep information longer where required to comply with a legal obligation or to resolve a dispute. When information is no longer needed, we delete it or render it anonymous.
9. How we protect information
We maintain administrative, technical, and physical safeguards designed to protect personal information, including multi-factor authentication on all systems, least-privilege access, encryption in transit and at rest, managed and encrypted devices, vendor due diligence, and a written incident response procedure. Our practices are described in more detail on our Security & Trust page. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and any relevant authority as required by law if a breach affects your information.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access the personal information we hold about you and receive a copy of it.
- Correct inaccurate or incomplete information.
- Delete your information, subject to legal retention requirements.
- Restrict or object to certain processing, including processing based on legitimate interests or for direct marketing.
- Portability: receive your information in a structured, commonly used, machine-readable format.
- Withdraw consent at any time where processing is based on consent, without affecting processing that occurred before withdrawal.
- Lodge a complaint with a supervisory authority. In the EEA, you can find your authority at edpb.europa.eu; in the UK, the Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email privacy@glendaloughadvisory.com or write to us at the address above. We will verify your identity using the information we already hold, respond within one month (or within 45 days under applicable US state law), and tell you if we need more time. We will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf; we may ask the agent for proof of authorization.
11. Additional notices for US residents
Residents of California, New Jersey, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have the rights described in section 10, including the right to know the categories of personal information we collect and the purposes for which we use them, as described in sections 3 and 4. In the preceding 12 months we have collected the categories of personal information listed in section 3 from the sources described there and have disclosed them only to the service providers listed in section 6 for business purposes. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not process sensitive personal information for the purpose of inferring characteristics. Because we do not sell or share personal information, we do not currently respond to Global Privacy Control or Do Not Track signals differently from other visitors; all visitors receive the same non-tracking treatment.
12. Cookies and similar technologies
The Site uses only strictly necessary cookies and browser storage: a record of your cookie-consent choice, a short-lived anonymous token that lets the contact form deliver your submission securely, and any essential cookies our hosting provider requires to serve the Site. We do not use analytics, advertising, or tracking cookies. Full details, including how to clear or block storage, are in our Cookie Policy. You can revisit your choice at any time using the "Cookie preferences" link in the footer.
13. Children
Our services and Site are directed to businesses and are not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
14. Third-party links
The Site may link to third-party websites, including the scheduling tool we use for discovery calls. Those sites have their own privacy policies, and we are not responsible for their practices. We encourage you to read their policies before providing information.
15. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page and, for material changes, provide a more prominent notice on the Site or by email where we have your address. The current version always applies.
16. How to contact us
Privacy questions and requests: privacy@glendaloughadvisory.com
General inquiries: sales@glendaloughadvisory.com · 609-469-3327
Mail: Glendalough Advisory LLC, 971 US Highway 202N #7085, Branchburg, NJ 08876, United States