Privacy policy.

This website is operated by Mithril International, a boutique advisory firm with offices in Bridgetown, Barbados (headquarters), Halifax, Nova Scotia, and Miami, Florida. References to "Mithril", "we", "us", or "our" are to Mithril International.

For privacy-related queries, contact us at admin@mithrilinternational.com. The data controller for personal data collected through this website is Mithril International.

We only collect personal information you actively provide to us. The principal collection point is the inquiry form at /contact, where we ask for:

• Identifying information: full name, country of residence
• Contact information: email address, optional phone number
• Inquiry context: type of inquiry, industry, jurisdictions, services of interest, free-text message, referral source

We also receive limited technical information automatically when you load this site, including IP address, browser type, referring page, and timestamps. This information is processed in transient server logs by our hosting providers and is not used to build a profile of you.

Personal information collected through the inquiry form is used to:

• Respond personally to your inquiry, normally within two business days
• Determine whether we and you are a suitable fit for engagement
• Maintain a record of correspondence as part of our client-onboarding and compliance obligations

Our lawful bases under the UK GDPR and the EU GDPR are: (a) the processing is necessary for taking steps prior to entering into a contract at your request (Article 6(1)(b)), and (b) our legitimate interest in operating an advisory practice and corresponding with prospective clients (Article 6(1)(f)), balanced against your interests and rights. Where we ask for explicit consent (such as the consent checkbox on the inquiry form), the lawful basis is your consent (Article 6(1)(a)), which you may withdraw at any time.

If your inquiry does not result in an engagement, we retain the information you submit for up to 24 months from the date of your last contact, after which it is deleted unless we have a specific legal or regulatory reason to retain it longer.

If you become a client, we retain records in line with the regulatory and professional standards applicable to our advisory work and the work of our partner counsel, which is typically a minimum of seven years from the conclusion of the engagement.

We share personal information only with parties who help us deliver this website and respond to inquiries:

• Hosting and infrastructure providers (currently Vercel) that operate the servers and content-delivery network this site runs on
• Our email delivery provider (currently Resend) used to deliver inquiry-form submissions to us
• Where you become a client, our in-house tax counsel and the qualified US and Canadian attorneys we work with to deliver legal and tax advisory consultancy, on a need-to-know basis and under appropriate confidentiality terms

We do not sell or rent personal information, and we do not share it with advertising or analytics networks. If we add new processors in the future we will update this list and the corresponding effective date.

Our headquarters is in Barbados; our offices and counsel relationships span Barbados, Canada, the United Kingdom, and the United States. Personal information you submit may therefore be transferred to and processed in any of those jurisdictions. Where transfers leave the EU/UK or other jurisdictions with comparable protection, we rely on appropriate safeguards including the Standard Contractual Clauses or equivalent transfer mechanisms.

This website does not currently set analytics, advertising, or tracking cookies. The only client-side storage in use is a small browser entry that records whether you have dismissed our cookie notice, so we don't show it to you again on subsequent visits. This entry is essential to the function of the notice itself and is exempt from the consent requirement under the ePrivacy Directive.

If we add analytics or other consent-requiring technologies in the future, we will update this section and present a consent control before any non-essential storage is set.

If you are located in the EU, the UK, or a jurisdiction with comparable data-protection rules, you have rights including:

• Access to the personal information we hold about you
• Correction of inaccurate or incomplete information
• Deletion of your information, subject to applicable retention obligations
• Restriction or objection to processing in certain circumstances
• Data portability where processing is based on consent or contract and is carried out by automated means
• Withdrawal of consent at any time, where consent was the basis
• Lodging a complaint with a supervisory authority

To exercise any of these, write to us at admin@mithrilinternational.com. We respond personally and will normally acknowledge within five business days.

We use reasonable technical and organisational measures to protect personal information from unauthorised access, alteration, disclosure, or destruction. These include encryption in transit, access controls on stored data, and routine review of our processors. No system is perfectly secure; if you have reason to believe your interaction with us is no longer secure, please contact us immediately.

We may update this policy from time to time. The effective date below indicates when the current version was published. Material changes will be communicated to active clients directly; for prospective clients, the latest version always sits at this URL.