Legal
Privacy policy
For a firm built on discretion, this document is not a formality. Plain language, no dark patterns. Last updated August 12, 2026.
Who is responsible for your data
Passion Asset Advisory ("we") operates passionassetadvisory.com. The office is at Main Point Karlín, Pobřežní 620/3, 186 00 Prague 8, Czech Republic. Before an engagement is formed, the written mandate identifies the contracting party and applicable terms. Privacy and data-controller inquiries reach the same desk as other confidential inquiries through the contact form.
What we collect, and why
- Consultation form submissions: name, email, optional phone, location, intent, asset category, budget range, timeline, and your message. We collect this for exactly one purpose: responding to your inquiry and, if you engage us, running your mandate. Legal basis: pre-contractual steps taken at your request.
- Correspondence: if you write to us, we keep the thread for as long as the relationship requires.
- Technical data: this site sets no cookies and runs no advertising or behavioral trackers. Fonts and all assets are served from our own domain. Our hosting provider may log IP addresses for security; those logs are not used to profile visitors.
What we never do
- Sell, rent, or trade your personal data, to anyone, ever
- Publish, share, or market asset details without your explicit approval
- Disclose your identity to transaction counterparties before you authorize it
- Add you to marketing lists you did not ask to join
Who processes data on our behalf
Website forms post to our own lead relay. The relay first records the submission in a restricted database on our hosting infrastructure so a notification failure does not lose your inquiry. It then sends an intake notification to the office through the Telegram Bot API and a private Telegram chat. Telegram is a separate service provider and may process data outside the EEA under its own privacy terms. If you do not want to use this route, email contact@passionassetadvisory.com before sharing asset or identity details. We share details with inspectors, authenticators, surveyors, or transaction providers only when the work requires them and after the applicable engagement terms are agreed.
Retention
The local relay copy is automatically deleted 30 days after successful notification delivery. If delivery fails, the restricted copy remains pending until it is delivered or an operator resolves it, subject to a maximum period of 24 months. This prevents silent loss without creating indefinite storage. The office removes the corresponding intake-chat notification within 30 days unless the inquiry becomes part of an active engagement record. Inquiries that do not lead to an engagement are deleted from working correspondence within 24 months. Mandate records are kept only for the period required by the engagement and applicable legal obligations, then deleted.
Your rights
Wherever you are, we honor the substance of GDPR-style rights: access to what we hold about you, correction, deletion, restriction, and portability. Ask through the contact form or email contact@passionassetadvisory.com; we respond within 30 days. EU/EEA residents may also lodge a complaint with their supervisory authority.
Changes
If this policy changes materially, the date above changes with it. Our commitments do not change: we do not sell data or publish information without approval.