Privacy notice.

Almost nothing, and nothing without you typing it.

Reading this website sets no cookies and stores nothing in your browser. There is no analytics, no tag manager, no advertising pixel, no session recording and no fingerprinting. We do not know you have visited.

This is why the site has no cookie banner: there is nothing to consent to. The absence is deliberate rather than an oversight.

The typefaces are served from our own domain. They are downloaded when the site is built rather than requested from a third party while you read, so opening a page does not disclose your IP address to a font provider.

The only place we ask for anything.

If you send an enquiry we receive your first and last name, email address, and — if you choose to give them — your company, your role and what you write in the two free text fields. Nothing else is collected, and no field is inferred or enriched.

We use it to answer you and, if the work goes ahead, to scope it. The legal basis is the steps taken at your request before entering into a contract, and our legitimate interest in responding to people who approach us. We do not use it for marketing, we do not add you to a mailing list, and we do not pass it to anyone for their own purposes.

Submissions are relayed by Formspree, Inc., a form service in the United States, which processes them on our behalf and retains a copy in its dashboard until we delete it. This is a transfer outside Switzerland and the EEA. The enquiry then sits in our business mailbox, hosted on Microsoft 365, for as long as the correspondence has a purpose.

If you would rather not use the form, write to us directly and only your mail provider and ours are involved.

Our hosting provider records the technical information any web server records in order to serve a page and defend itself: IP address, time of request, the page requested, referrer and browser user agent. These logs are kept for a short period for security and troubleshooting, and are not combined with anything else or used to build a profile.

Some pages link out — to the founders’ LinkedIn profiles and to VITAL Expert. Following one of those links hands you to that service and its own privacy terms apply from that point. Nothing is sent to them while you are simply reading a page here.

Where engagement work runs on VITAL Expert, client evidence sits in a tenant the client controls. That is a separate processor relationship governed by the engagement letter, not by this notice, which covers this website only.

You may ask what we hold about you and receive a copy, have it corrected if it is wrong, have it deleted, ask us to restrict how we use it, object to our use of it, and ask for it in a portable form. Asking costs nothing and we will answer within thirty days. Write to hicham.naim@xroadscatalyst.com.

If we have not dealt with you properly you can complain to the Swiss Federal Data Protection and Information Commissioner in Bern, or, if you are in the EEA, to your national supervisory authority.

If this notice changes we will change the date at the top of the page. We will not quietly broaden what we collect and leave the date as it was.