Helping lawyers remain accessible in a changing world.
Boujean & Partners supports legal professionals through thoughtful innovation, intended to strengthen the relationship between a lawyer and client.
Designed exclusively for the profession we serve.
We do not adapt general models to legal work. Everything begins within the realities of practice; its standards, its obligations, and the trust placed in counsel.
Professional standards first
Every decision is measured against the obligations of legal practice. Nothing is introduced that sits outside them.
Confidential and continuous
Confidentiality is a baseline condition, not a feature. Continuity and discretion define how practice is supported over time.
Responsive, rooted in tradition
Responsiveness must coexist with tradition. Modern capability is integrated without weakening the structure that gives the profession its authority.
The experience your clients receive.
When a practice is accessible and consistent, clients arrive reassured and leave confident. Our work supports that experience quietly, with attention only to the outcome your clients receive.
- AccessibilityClients can reach the counsel they trust without friction or delay.
- ConsistencyA steady standard of attention that never depends on the day.
- ResponsivenessTimely answers that keep matters moving and minds at ease.
- EfficiencyTime returned to the work that genuinely requires your judgement.
- Peace of mindThe quiet confidence that nothing of importance is left waiting.
What guides our work.
A small set of commitments shapes how we work with every firm.
Exclusively for lawyers
We work only with the legal profession. Our entire attention, judgement, and experience are devoted to the people who practise law.
Respect for ethics
Professional ethics are not a constraint we work around. They are the frame within which everything we propose must sit.
A long term view
We build for continuity. The right decisions today are the ones that still serve your practice and your clients years from now.
A personal approach
Technology should recede. What remains is a stronger, warmer relationship between a lawyer and the client who depends on them.
Discretion and trust
We are comfortable working quietly in the background. Confidence and confidentiality define every engagement we accept.
Commitment to excellence
We hold ourselves to the standard our clients set for their own work, with care and precision.
Our role is to help lawyers work well. The relationship with the client remains theirs, and everything we do is meant to support it.
Clarity, before anything else.
Thoughtful innovation for modern legal practice.
A quiet conversation is the right place to begin. We would be glad to understand your practice and where we might be of service.
Innovation in service of the relationship, never the other way around.
We believe modern capability should make a lawyer more present, not more distant. Our philosophy begins and ends with the trust at the heart of legal practice.
A considered philosophy, applied with restraint.
Much of what passes for progress asks professionals to change who they are. We take the opposite view. The relationship between a lawyer and client has endured for good reason, and our work is to protect what makes it valuable while quietly removing what makes it harder to sustain.
We speak in outcomes, not mechanisms. What matters is that your clients feel well served and that your practice feels more your own. The means by which that happens should remain unobtrusive, and always in keeping with your professional values.
Continuity
A practice is built over years. We make decisions that hold their value across them, supporting the steady, dependable presence that clients come to rely upon and that defines a firm's reputation.
Accessibility
Clients should be able to reach the counsel they trust without obstacle. We help you remain within reach, responsive and available, without ever diluting the personal attention that makes that access meaningful.
Excellence
Quality is not negotiable. Everything we propose is held to the same exacting standard you apply to your own work, so that the experience of your practice reflects the calibre of the counsel behind it.
Trust
Trust is the currency of the profession. We treat it as such, earning it slowly, honouring it completely, and structuring our work to deepen the confidence between a lawyer and those they serve.
A long term perspective
We are not interested in momentary advantage. We think in decades, helping your practice remain resilient, relevant, and true to its values as the world around it continues to change.
Let's begin with a conversation.
We would be glad to understand your practice and share how our approach might serve it.
A single profession, understood deeply.
Boujean & Partners works exclusively within the legal profession. That focus is deliberate. It is what allows us to serve each kind of practice with genuine understanding.
Boutique firms
Smaller practices with a distinct character and a close relationship to their clients. We help you preserve that intimacy while remaining effortlessly accessible and responsive.
Independent practitioners
Lawyers who carry their practice personally. We help you extend your reach and your responsiveness, so that being a single practitioner never limits the service your clients receive.
Firms with several partners
Established practices balancing many relationships and high expectations. We help you deliver a consistent standard of attention across the firm, without adding weight to your days.
Specialised practices
Firms with deep expertise in a particular field. We respect the precision your work demands and shape our support to the specific way your clients expect to be served.
We serve lawyers, and only lawyers.
Working within a single profession is a choice we make on purpose. It means we speak your language, understand your obligations, and recognise the particular trust your clients place in you. We are not divided across industries, and we are never adapting lessons learned elsewhere.
However you practise, we can help.
Tell us about your firm. We will listen first, and shape our support around the way you already work.
Notes on the practice of law.
A small set of subjects shapes our work. We set them out here, and may publish written notes on them in due course.
The questions that shape our work.
These are the subjects we return to with the firms we support. They guide how we think about service, accessibility, and the standards a practice is held to.
Client expectations
How clients wish to be met, and how a practice can remain both available and personal as those expectations change.
Accessibility
Remaining within reach of those who depend on you, without diluting the personal attention that gives access its meaning.
Continuity and trust
Why a steady, dependable presence, maintained over years, becomes the foundation of a firm's reputation.
Excellence and tradition
How considered change can serve the standards that have always defined good counsel, rather than work against them.
When you are ready, we are here.
If these questions reflect how you think about your practice, we would welcome a conversation.
Get in touch.
Tell us a little about your practice and what you are hoping to consider. We will reply personally to arrange a time that suits you.
By email
info@boujeanpartners.com
We reply to every enquiry personally.
By appointment
Conversations are held privately, by arrangement,
at a time convenient to your practice.
In confidence
Everything you share with us is treated as
privileged and held in the strictest confidence.
We work exclusively with lawyers and law firms, and we treat the dignity, independence, and professional ethics of every practice as the foundation of our work.
Thank you. Your message has reached us.
We will reply personally to arrange a conversation at a time that suits your practice.
Privacy Policy
How Boujean & Partners collects, uses, and protects personal information, in line with Irish and European data protection law.
Last updated: June 2026
This Privacy Policy explains how Boujean & Partners collects, uses, and protects personal information, and the rights available to you under the General Data Protection Regulation (Regulation (EU) 2016/679) and the Irish Data Protection Act 2018. Please read it together with our Cookies Policy.
1.About this policy
This policy applies to the processing of personal information for which Boujean & Partners acts as a controller. It describes the information we collect, the purposes for which we use it, the legal bases on which we rely, and the rights you may exercise. We may revise this policy from time to time, and the current version is always available on our website. The date at the top of this page shows when it was last revised.
2.Who we are
Boujean & Partners ("we", "us", "our") is based in Ireland and works exclusively with lawyers and law firms. For the purposes of data protection law, we are the controller of the personal information described in this policy. You can reach us at info@boujeanpartners.com, and our full registered details are available on request.
3.When we act as a controller, and when as a processor
We act as a controller for the personal information described in this policy, such as information about visitors to our website, those who contact us, the representatives of the firms we work with, and our suppliers and partners.
Separately, when we deliver our services to a client firm, we may handle personal information contained in the materials that firm provides to us. In that situation the firm is the controller and we act as its processor, processing the information only on the firm's documented instructions and under a written agreement. Those arrangements are set out in our Data Processing Agreement.
4.The information we process, and why
What we process, and the basis on which we do so, depends on your relationship with us. The main situations are set out below.
4.1 Visitors to our website
Purpose. To operate, secure, and maintain our website, and to confirm that it is functioning correctly.
Personal data. Limited technical information processed by our hosting and service providers, such as your internet protocol address and basic details about your device and browser.
Legal basis. Our legitimate interest in providing a safe, reliable, and properly functioning website.
Retention. For no longer than necessary for security and operational purposes.
4.2 People who contact us or arrange a conversation
Purpose. To respond to your enquiry, to arrange and hold a conversation, and to keep a record of our correspondence.
Personal data. Your name, your firm or practice, your email address, any scheduling details if you book a conversation, and the content of your message and our correspondence.
Legal basis. Your consent, our legitimate interest in responding to those who contact us, and, where relevant, taking steps at your request before any engagement.
Retention. Up to 24 months after our last contact, unless an engagement begins, in which case the relevant records are kept for the duration of the relationship and for any period afterwards required by law or our professional obligations.
4.3 Representatives of client firms and prospective client firms
Purpose. To communicate with you, to provide and manage our services, and to administer our relationship, including any agreement and invoicing.
Personal data. Name, professional role, business contact details, and information relevant to our engagement.
Legal basis. The performance of our agreement with your firm, our legitimate interest in managing and developing our professional relationships, and compliance with our legal obligations.
Retention. For the duration of the relationship and for any period afterwards required by law or our professional obligations.
4.4 Suppliers and partners
Purpose. To manage our relationship with you, to receive services, and to meet our administrative and legal obligations.
Personal data. Name, professional role, business contact details, and information relevant to the relationship.
Legal basis. The performance of our agreement with you and our legitimate interests in managing our suppliers and partners.
Retention. For the duration of the relationship and for any period afterwards required by law.
5.Our legal bases
Where we rely on legitimate interests, we first consider whether our interest is proportionate to the purpose, take account of your reasonable expectations, and balance our interest against your rights and freedoms. Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6.Sharing your information
We do not sell your personal information, and we do not share it except as needed for the purposes described in this policy. Where we share information, we put appropriate agreements in place. Your information may be shared with:
- Service providers who process information on our behalf, including our website host, our enquiry form provider (Formbold), our scheduling provider (Cal.com), Google (for typography and related website services), providers of artificial intelligence services that support our work (such as Anthropic and OpenAI), and a secure workflow automation platform that helps us move information between our tools.
- Our professional advisers, such as lawyers, accountants, and insurers, where necessary.
- Regulators, courts, and other authorities, where we are required to do so by law or in response to a lawful request.
- A successor or acquirer, in connection with any reorganisation, merger, or sale of our business, subject to appropriate protections.
When we act as a processor for a client firm, the engagement of these providers is governed by our Data Processing Agreement, and a current list of the providers we use in that capacity is available on request.
7.International transfers
Some of our providers may process personal information outside the European Economic Area. Where they do, we take steps to ensure an appropriate level of protection, for example by relying on an adequacy decision of the European Commission, or by putting in place Standard Contractual Clauses adopted by the European Commission, together with any additional measures required.
8.How long we keep your information
We keep personal information only for as long as necessary for the purpose for which it was collected, and to meet any legal, regulatory, or professional requirement. When information is no longer needed, it is securely deleted or anonymised.
9.Security
We take appropriate technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, including access controls, encryption, and confidentiality obligations for our personnel. The measures we apply when processing personal information on behalf of a client firm are described in the security appendix to our Data Processing Agreement. No method of transmission over the internet is entirely secure, but we work to safeguard your information at all times.
10.Your rights
Under data protection law you have the right to:
- request access to the personal information we hold about you;
- request correction of information that is inaccurate or incomplete;
- request erasure of your information in certain circumstances;
- request that we restrict our processing in certain circumstances;
- object to processing carried out on the basis of legitimate interests;
- request the transfer of your information to you or another party, in a structured, commonly used, and machine readable format, where applicable; and
- withdraw your consent where processing is based on consent.
To exercise any of these rights, please contact us at info@boujeanpartners.com. We may need to confirm your identity before responding, and we will respond within the timeframes set by law. If you have a concern, we ask that you contact us first so that we can try to resolve it. You also have the right to lodge a complaint with the supervisory authority in Ireland:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
www.dataprotection.ie
11.Automated decisions and artificial intelligence
We do not make decisions about you through this website that are based solely on automated processing and that produce legal or similarly significant effects. Where we use tools, including artificial intelligence services, in the course of delivering our services to a client firm, those tools support our work and remain subject to human oversight. The relevant lawyer retains responsibility for any advice given to a client. We use such tools in a manner consistent with the General Data Protection Regulation and the EU Artificial Intelligence Act (Regulation (EU) 2024/1689).
12.Children
Our website and services are intended for legal professionals and are not directed at children. We do not knowingly collect personal information from children.
13.Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. The date at the top of this page indicates when it was last revised.
14.Contact
For any question about this policy or your personal information, please contact us at info@boujeanpartners.com.
Cookies Policy
How this website uses cookies and similar technologies, and the choices available to you.
Last updated: June 2026
This Cookies Policy explains how the Boujean & Partners website uses cookies and similar technologies, in line with the Irish ePrivacy Regulations (S.I. No. 336 of 2011) and the General Data Protection Regulation. It should be read together with our Privacy Policy.
1.Why this policy
We are responsible for the use of cookies and similar technologies on our website and for the processing of any personal information connected with them. This policy tells you what we use, why we use it, and the choices available to you. We may amend it from time to time, for example to reflect new features, so we recommend that you review it on occasion.
2.What cookies are
A cookie is a small text file placed on your device when you visit a website. Cookies are widely used to make websites work, to keep them secure, and to remember preferences. Similar technologies, such as local storage, pixels, and server logs, can serve comparable purposes. In this policy we refer to all of them as cookies.
3.Our approach
We keep our use of cookies to a minimum. At present, the website uses only what is strictly necessary for it to operate and remain secure. We do not currently use analytical, advertising, or social media cookies, and we do not track your activity across other websites. If this changes, we will set any cookie that is not strictly necessary only after you have given your consent, through a banner presented when you visit the site.
4.Categories of cookies
4.1 Strictly necessary cookies
These are essential for the website to function properly or to keep it secure. Under the ePrivacy Regulations, cookies of this kind do not require your prior consent, as the site cannot operate correctly without them.
4.2 Functional or preference cookies
These remember choices you make, such as a language preference, to improve your experience. We do not currently use cookies of this kind. If we introduce them, we will do so on the basis described in section 3.
4.3 Analytical or statistical cookies
These help a website owner understand how a site is used, so that it can be improved. We do not currently use analytical cookies. If we introduce them, they will be set only with your consent, and you will be able to withdraw that consent at any time.
4.4 Advertising or tracking cookies
These collect information about browsing in order to make advertising more relevant. We do not use advertising or tracking cookies, and we have no intention of doing so.
4.5 Social media cookies
These are set when content is shared through social networks. We do not use social media cookies.
5.Third party services
Some features rely on trusted third party services, which may set their own cookies or process limited technical information when you use them:
- Google Fonts delivers the typography used on the site. Your browser requests these fonts from Google, which may receive your internet protocol address as part of that request.
- Formbold processes your message if you submit the enquiry form.
- Cal.com manages scheduling if you choose to arrange a conversation through the external booking page.
These services are provided by separate organisations under their own privacy and cookie policies, and we encourage you to review those policies where relevant.
6.Your consent and how to control cookies
Your consent is not required for strictly necessary cookies. Where we use any cookie that is not strictly necessary, we will ask for your consent before it is set, and you will be able to give or withdraw it for each category. You can also control and delete cookies through your browser settings, and set your browser to alert you when cookies are placed. The exact steps vary by browser, including Chrome, Safari, Firefox, and Edge. Please note that restricting essential cookies may affect how parts of the website function.
7.Personal information and your rights
Some information collected through cookies may relate to you and therefore qualify as personal information, in which case our Privacy Policy applies. Your rights as a data subject are set out in that policy.
8.International transfers
Where a third party service processes information outside the European Economic Area, appropriate safeguards apply, as described in our Privacy Policy.
9.Changes to this policy
We may update this policy from time to time. The date at the top of this page indicates when it was last revised.
10.Contact
If you have any question about our use of cookies, please contact us at info@boujeanpartners.com.
Terms & Conditions
The terms that govern your use of the Boujean & Partners website.
Last updated: June 2026
These terms govern your use of the Boujean & Partners website. By using the site, you accept them. If you do not accept them, please do not use the website. Boujean & Partners is based in Ireland.
1.These terms and your acceptance
These terms apply to your access to and use of our website. They do not govern the provision of our services, which is the subject of a separate written agreement. We may update these terms from time to time in accordance with section 15.
2.About us
Boujean & Partners works exclusively with lawyers and law firms. The website describes our work in general terms. It is not an offer, and the availability of our services depends on the circumstances of each engagement.
3.No legal advice and no professional relationship
The content of this website is provided for general information only. Nothing on the site constitutes legal advice, and nothing on it creates a relationship between a lawyer and a client, or any other professional relationship, between you and Boujean & Partners. You should seek appropriate professional advice before acting on any information contained here.
4.Engagements are governed separately
Where we agree to provide services, those services are governed by a separate written agreement between us and the relevant firm, together with our Data Processing Agreement where we process personal information on the firm's behalf. In the event of any conflict between these website terms and such an agreement, the separate agreement prevails in respect of the services.
5.Our work and the use of technology
We use a range of tools, which may include artificial intelligence services, to support and improve our work. These tools assist our team. They do not replace the judgement of the lawyers we work with, and they do not stand between a lawyer and their client. Where artificial intelligence is used in the course of our services, its outputs are subject to human review, and the relevant lawyer remains responsible for any advice given to a client. We use these tools in a manner consistent with the General Data Protection Regulation and the EU Artificial Intelligence Act (Regulation (EU) 2024/1689).
6.Intellectual property
The website, including its text, design, graphics, and marks, is owned by Boujean & Partners or its licensors and is protected by law. You may view and read the content for your own reference. You may not copy, reproduce, distribute, or use it for any commercial purpose without our prior written permission.
7.Acceptable use
You agree to use the website lawfully and not to misuse it. In particular, you agree not to interfere with its operation, attempt to gain unauthorised access to it, introduce anything harmful to it, or use it in any way that could damage or impair the site or the experience of others.
8.Third party links and services
The website may link to external services, such as our scheduling page and our profile on professional networks. We do not control these services and are not responsible for their content or practices. Your use of any third party service is governed by that party's own terms and policies.
9.Availability of the website
The website is provided on an "as is" and "as available" basis. We make reasonable efforts to keep it accurate and available, but we do not guarantee that it will be uninterrupted, error free, or current at all times. We may change, suspend, or withdraw all or part of the website at any time.
10.Disclaimers
While we take care in preparing the content of the website, we make no representation or warranty that it is complete, accurate, or suitable for any particular purpose. Any reliance you place on the content is at your own risk.
11.Limitation of liability
To the fullest extent permitted by law, Boujean & Partners will not be liable for any indirect, special, or consequential loss, or for any loss of profit, data, or opportunity, arising from your use of, or inability to use, the website. Nothing in these terms excludes or limits any liability that cannot be excluded or limited under the laws of Ireland, including liability for death or personal injury caused by negligence, or for fraud.
12.Indemnity
You agree to indemnify us against any loss or claim arising from your misuse of the website or your breach of these terms.
13.Privacy
Our handling of personal information is described in our Privacy Policy and Cookies Policy, which form part of these terms.
14.General
If any provision of these terms is found to be invalid, the remaining provisions continue in effect. Our failure to enforce any right does not amount to a waiver of that right. These terms, together with the policies referred to in them, form the entire agreement between us in relation to your use of the website. You may not transfer your rights or obligations under these terms without our consent.
15.Changes to these terms
We may update these terms from time to time. The date at the top of this page indicates when they were last revised. Your continued use of the website means you accept the current terms.
16.Governing law and jurisdiction
These terms, and any matter arising from your use of the website, are governed by the laws of Ireland. The courts of Ireland have exclusive jurisdiction over any dispute.
17.Contact
For any question about these terms, please contact us at info@boujeanpartners.com.
Data Processing Agreement
How we handle personal information when we process it on behalf of a client firm.
Last updated: June 2026
This Data Processing Agreement (the "DPA") applies where Boujean & Partners processes personal information on behalf of a client firm in the course of providing its services. It forms part of our engagement with that firm and reflects the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679) and the Irish Data Protection Act 2018.
Introduction
This DPA governs the processing of personal information carried out by Boujean & Partners ("we", "us", "our") on behalf of a client firm (the "Firm") in connection with the services we provide. Where we process personal information on the Firm's behalf, the Firm is the controller and we act as its processor. In the event of any conflict between this DPA and the rest of our engagement on matters of data protection, this DPA prevails. The appendices below form part of this DPA.
Definitions
- Applicable Data Protection Law
- The General Data Protection Regulation (Regulation (EU) 2016/679), the Irish Data Protection Act 2018, the ePrivacy Regulations (S.I. No. 336 of 2011), and any other data protection law that applies to the processing.
- Personal Data
- Any information relating to an identified or identifiable natural person that we process on behalf of the Firm under our engagement.
- Subprocessor
- Any third party we engage to process Personal Data on the Firm's behalf in the course of providing the services.
- Services
- The services we provide to the Firm, as described in our engagement.
1.Roles and scope
The Firm is the controller of the Personal Data and we are its processor. We process Personal Data only for the purpose of providing the services, and only on the Firm's documented instructions, including in relation to international transfers, unless we are required to act otherwise by law. If we believe an instruction breaches Applicable Data Protection Law, we will inform the Firm.
2.Our obligations as processor
- We process Personal Data only on the Firm's documented instructions and for the purposes set out in Appendix A.
- We ensure that the persons authorised to process Personal Data are bound by confidentiality and are appropriately instructed and trained.
- We implement appropriate technical and organisational measures to protect Personal Data, as described in Appendix C.
- We assist the Firm, taking into account the nature of the processing, in responding to requests from individuals exercising their rights.
- We assist the Firm with its obligations relating to the security of processing, the notification of personal data breaches, data protection impact assessments, and prior consultations.
- We make available to the Firm the information reasonably necessary to demonstrate our compliance with this DPA.
- We do not sell or share Personal Data, and we do not use it for any purpose other than providing the services.
3.The Firm's obligations
The Firm confirms that it has a valid legal basis and all necessary rights, consents, and authorisations to provide the Personal Data to us and to instruct us to process it. The Firm is responsible for the accuracy and lawfulness of the Personal Data it provides, and it should limit what it provides to what is necessary for the services. The Firm should not provide special categories of personal information unless this has been agreed with us in advance.
4.Subprocessors
The Firm gives a general authorisation for us to engage subprocessors for the purpose of providing the services. The subprocessors we currently engage are listed in Appendix B. Each subprocessor is bound by a written agreement that imposes obligations no less protective than those in this DPA, and we apply the principle of least privilege, giving each subprocessor access only to what is necessary for its purpose. We remain responsible for our subprocessors. We will inform the Firm of any intended change to our subprocessors and give it the opportunity to object on reasonable grounds relating to data protection.
5.International transfers
Where a subprocessor processes Personal Data outside the European Economic Area, we ensure that an appropriate transfer mechanism is in place, such as an adequacy decision of the European Commission or Standard Contractual Clauses adopted by the European Commission under Implementing Decision (EU) 2021/914, together with any additional measures required.
6.Assisting with the rights of individuals
If we receive a request from an individual relating to Personal Data we process for the Firm, we will refer it to the Firm to the extent permitted by law, and we will assist the Firm, by appropriate technical and organisational measures, in responding to it.
7.Personal data breaches
We will inform the Firm without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting the Personal Data we process for the Firm. We will provide the information reasonably required to allow the Firm to meet its own notification obligations.
8.Audits
We will make available to the Firm the information reasonably necessary to demonstrate compliance with this DPA, and we will allow for and contribute to audits, including inspections, conducted by the Firm or an auditor it mandates. Audits take place on reasonable prior notice, during normal business hours, in a manner that does not unreasonably disrupt our work, and no more than once a year unless required by a regulator. Audits do not extend to information belonging to our other clients, who may themselves be subject to professional confidentiality obligations.
9.Return or deletion of personal data
On the expiry or termination of our engagement, we will, at the Firm's choice, return or securely delete the Personal Data we hold for the Firm, unless we are required by law to retain it. Where we are required to retain Personal Data, we will continue to protect it in accordance with this DPA.
10.Liability
The liability of each party under this DPA is subject to the limitations and exclusions set out in our engagement with the Firm.
11.Term
This DPA applies for as long as we process Personal Data on the Firm's behalf, and the obligations that by their nature should continue will survive the end of our engagement.
12.Governing law and jurisdiction
This DPA is governed by the laws of Ireland, and the courts of Ireland have exclusive jurisdiction over any dispute arising from it.
Appendix A. Details of the processing
Subject matter. Our provision of services to the Firm.
Duration. For the term of our engagement and any period afterwards required by law or agreed with the Firm.
Nature and purpose. Processing necessary to support the Firm in remaining accessible, responsive, and efficient, as described in our engagement. This may include organising, transmitting, analysing, and securely storing information the Firm provides.
Types of personal data. As contained in the materials the Firm provides, which may include names, contact details, professional details, and the content of communications and documents. The Firm determines what it provides.
Categories of data subjects. As determined by the Firm, which may include the Firm's clients, the Firm's personnel, and other individuals referred to in the materials.
Appendix B. Subprocessors
We engage the following subprocessors to provide the services. A definitive, current list is available on request, and we update it as our tools change.
| Subprocessor | Purpose | Location and transfer basis |
|---|---|---|
| Cloud hosting provider | Hosting of the website and secure storage of information | European Economic Area where available. Transfers outside the EEA under Standard Contractual Clauses. |
| Anthropic | Artificial intelligence services that support our work | Transfers outside the EEA under Standard Contractual Clauses or an adequacy decision. |
| OpenAI | Artificial intelligence services that support our work | Transfers outside the EEA under Standard Contractual Clauses or an adequacy decision. |
| Typography and related website services | Transfers outside the EEA under Standard Contractual Clauses or an adequacy decision. | |
| Formbold | Processing of enquiry form submissions | Appropriate safeguards under Applicable Data Protection Law. |
| Cal.com | Scheduling of conversations | Appropriate safeguards under Applicable Data Protection Law. |
| Workflow automation platform | Connecting our tools and moving information securely between them | Appropriate safeguards under Applicable Data Protection Law. |
Appendix C. Security measures
We maintain appropriate technical and organisational measures to protect Personal Data. These include:
- access on the principle of least privilege, with access granted according to role;
- multifactor authentication for access to systems that hold Personal Data;
- encryption of Personal Data in transit, using at least TLS 1.2, and at rest, using AES 256 or an equivalent standard;
- network protections and the monitoring and logging of access;
- regular, securely stored backups;
- confidentiality obligations and security training for our personnel, with background checks where lawful and appropriate;
- careful selection of subprocessors, each bound by a written agreement;
- separation of environments and logical separation of each client's information;
- an incident response process, including notification of the Firm without undue delay; and
- periodic review and assessment of these measures.
We may update these measures from time to time, provided that the level of protection is not materially reduced. Further detail is available on request.