Privacy Policy.

01 / ScopeScope & Acceptance

This Privacy Policy describes how Vestry International ("Vestry," "we," "our," or "us") collects, uses, discloses, and safeguards information obtained through our website, email correspondence, application forms, and the professional services we provide to client firms.

By accessing our website or engaging with our services, you acknowledge the practices described here. If you do not agree, you should discontinue use of the site and refrain from submitting information to us.

02 / CollectionInformation We Collect

We collect information directly from you, automatically through your use of the site, and from third-party sources where appropriate to our work.

Information you provide

• Identification & contact data: name, business email, phone, professional title, firm name, and country.
• Application information: details submitted through strategy session forms, including practice size, AUM range, distribution model, and current acquisition activity.
• Correspondence: the content of emails, calls, and any documents you share with us in the course of an engagement.

Information collected automatically

• Device & usage data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
• Performance data: aggregated analytics about how the site is used so we can improve it.

Information from third parties

• Public regulatory and registry data used to verify firm credentials before opening a dialogue.
• Referral information from existing clients or partners who introduce you to us.

03 / UseHow We Use Information

We use the information described above to:

• Evaluate fit for a strategy session and determine whether to proceed with an engagement.
• Deliver the contracted services, including positioning, GTM systems, measurement, and reporting.
• Maintain records required for accounting, tax, and regulatory obligations.
• Improve the website, our materials, and our internal operating practice.
• Communicate with you about the engagement or related professional matters.
• Detect, investigate, and prevent misuse of the site or our services.

We do not sell personal information. We do not use submitted application data for advertising targeting on third-party platforms.

04 / BasisLegal Basis for Processing

Where the GDPR or comparable regimes apply, we process information on one or more of the following bases:

• Contract: processing necessary to take steps before, and perform, a client engagement.
• Legitimate interest: evaluating prospective fit, securing our systems, and operating our practice — balanced against your rights.
• Legal obligation: meeting accounting, tax, and other statutory requirements.
• Consent: for non-essential cookies and any optional communications, where required.

05 / DisclosureSharing & Disclosure

We share information only where it is necessary and only with parties who are bound to confidentiality:

• Service providers that support our operations (hosting, email, analytics, scheduling, accounting). These vendors process data on our instructions.
• Professional advisors such as legal counsel and auditors, where appropriate.
• Authorities where disclosure is required by law, regulation, court order, or to protect rights.
• Successors in the event of a merger, acquisition, or restructuring of the firm.

We do not share client engagement information with other clients or with the public without explicit written permission.

06 / CookiesCookies & Tracking

The site uses a small number of cookies and similar technologies. We distinguish between strictly necessary cookies (required for the site to function), preference cookies (to remember settings), and analytics cookies (to understand aggregate usage).

You can manage cookies through your browser controls. Disabling some categories may degrade certain features of the site.

07 / RetentionData Retention

We retain information only for as long as necessary for the purposes set out above and to satisfy legal, accounting, or reporting requirements.

• Application data for prospects we did not engage: typically 24 months, then deleted or anonymized.
• Client engagement records: for the duration of the engagement plus the period required by law (commonly 7 years).
• Website analytics: aggregated and retained on rolling 14- to 26-month windows.

08 / SecuritySecurity

We use administrative, technical, and physical safeguards designed to protect information — including encrypted transport, access controls, role-based permissions, and vendor due diligence. No system is impenetrable; we cannot guarantee absolute security, but we treat client and applicant information with the discipline our work requires.

09 / RightsYour Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to the processing of your information; to portability; and to withdraw consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details below. We will respond within the timeframe required by applicable law.

10 / TransfersInternational Transfers

Vestry operates across the United States, Europe, and the Middle East. Your information may be processed in jurisdictions other than your own. Where required, we rely on standard contractual clauses or equivalent mechanisms to protect transferred data.

11 / ChangesChanges to This Policy

We may update this policy from time to time. The effective date at the top of this document indicates the latest revision. Material changes will be communicated through the website and, where appropriate, by direct notice.

12 / ContactContact

For questions about this policy, to exercise your rights, or to raise a concern, please write to us: