Privacy Policy

1. What personal data we collect

• Contact form data: name, email address, and any information you choose to include in your message. This is the only data you actively submit.

• Analytics data: if you consent, we collect anonymised usage data such as pages visited, session duration and device type. No individual is identifiable from this data.

• Cookie preferences: your consent choices are stored locally on your device via localStorage. This data does not leave your device.

• Legal basis: contact form data is processed on the basis of legitimate interest (to respond to your enquiry). Analytics data is processed on the basis of your explicit consent.

• Retention: enquiry correspondence is kept for up to 24 months. Analytics data is retained in aggregated, anonymised form.

2. How we use your data

• To respond to your enquiry and carry out any resulting engagement, if both parties agree to proceed.

• To understand how visitors use this site, so we can improve the content and usability of our pages.

• Third-party sharing: we do not sell personal data. Analytics data may be processed by third-party analytics services under data processing agreements, subject to your consent.

• Marketing: we do not send marketing communications. If you contact us, we will only reply in direct response to your message.

3. How we protect your data

• This site is served over HTTPS. Data in transit is encrypted.

• Access to any stored enquiry data is restricted to the people in our organisation who need it to respond to you.

• In the event of a data breach that affects your personal data, we will notify you and the relevant authority as required under applicable law.

4. Your rights

• Access: you may request a copy of any personal data we hold about you.

• Rectification: if data we hold is inaccurate or incomplete, you may ask us to correct it.

• Erasure: you may request deletion of your personal data, subject to any legal obligation to retain it.

• Portability: you may request a copy of data you provided in a structured, machine-readable format.

• Objection: you may object to processing based on legitimate interest. We will assess whether the processing can continue.

• To exercise any of these rights, use the contact form on our Contact page. We will respond within 30 days.

5. Your rights and opt-out instructions

6. Data retention and deletion schedule

• Enquiry data: messages and correspondence submitted via our contact form are retained for up to 24 months from the date of receipt. After this period, data is securely deleted unless a legal basis to retain it exists.

• Analytics data: aggregated, anonymised usage statistics are retained indefinitely as they contain no personal identifiers.

• Cookie preferences: your consent record is stored in your browser's localStorage and persists until you clear your browser data.

• If you request deletion of your personal data, we will process that request within 30 days and confirm when deletion has been completed, subject to any overriding legal requirements.

7. International transfers

• Marsh Crest Field is based in Japan. Personal data you submit is processed and stored on servers that may be located in Japan or other jurisdictions. Any transfer is governed by appropriate data protection safeguards.

• Japan has been recognised by the European Commission as providing an adequate level of protection for personal data under its data protection framework.

8. Security measures

• All data in transit between your browser and our server is encrypted using TLS (HTTPS). We enforce HTTPS on all pages of this site.

• Access to stored enquiry data is restricted to authorised personnel only. We do not store payment card data of any kind.

• We review our data handling practices regularly and update our security measures as the threat landscape evolves.

9. Contact details