Privacy & Cookies

Last updated: 30 October 2026

This notice explains how Keren-Jo Thomas Financial Consulting handles personal data when you visit this website, contact us, arrange a meeting or use our financial consulting services. Swiss data protection law applies, in particular the Federal Act on Data Protection (FADP). Other data protection laws apply where their conditions are met.

Who is responsible?

Keren-Jo Thomas
Financial Consulting
Riedpark 7
6300 Zug
Switzerland
Email: kerenjo@kerenjothomas.com

Keren-Jo Thomas is responsible for the processing described here. Please use the email or postal address above for questions or requests concerning your personal data.

What we collect and why

Website visits. Our hosting provider processes technical connection information, which may include your IP address, access time, requested pages, browser and operating system, referring page and error information. This enables delivery of the website, troubleshooting and protection against misuse.

Enquiries and appointments. We use your name, email address, telephone number, messages, availability and appointment details to respond, arrange meetings and discuss suitable support. You can contact us by email or telephone without using Calendly or WhatsApp. Providing information is voluntary, but we need sufficient contact details to respond.

Consulting work. If you engage us, we process information relevant to the agreed work. Depending on your situation this can include household and family circumstances, income, expenses, assets, liabilities, pension and insurance information, goals, documents, meeting notes and correspondence. We use it to understand your circumstances, prepare and deliver your plan, manage the engagement, invoice you and meet applicable legal duties. Information about health or other sensitive matters is only requested where relevant and handled with additional care; we seek explicit consent where required.

Please provide only information needed for your enquiry or agreed service. Avoid sending identification documents, account credentials or detailed financial records in an initial email, booking field or WhatsApp message. We will agree an appropriate way to share documents.

Hosting, communication and service providers

We use providers to operate the website, communicate and deliver our services. Depending on the service you use, relevant information is made available to the following providers:

Infomaniak Network SA, Switzerland: website hosting and related technical services; also email services where used. Website hosting is in Switzerland. Infomaniak privacy information.

Google: email and associated communication services where used. Names, addresses, message contents, attachments and technical information may be processed. Google privacy information.

Calendly: appointment scheduling when you use a booking invitation. It processes booking details, contact information, availability and technical information. Calendly is a US provider. No Calendly booking widget is embedded in the current website. Calendly privacy information.

Zoom: online meetings, including participant details, connection information and the audio, video or chat you choose to share. Recording, transcription or AI summaries, if proposed, require separate information before use and consent where required. Zoom privacy information.

Dropbox: storage and exchange of documents relevant to the engagement. This may include consulting documents and correspondence. Dropbox privacy information.

WhatsApp: messaging if you choose that channel. WhatsApp processes account and communications metadata; its handling of message content and backups depends on the service and settings. Please use it for brief arrangements rather than confidential financial documents. WhatsApp privacy information.

These providers may also process certain data for their own purposes under their own privacy notices. Authorised website administrators and technical support providers may access data as needed to maintain the site. Information may also be disclosed to professional advisers, authorities or courts where necessary to meet legal obligations or establish, exercise or defend legal claims.

Processing outside Switzerland

Swiss hosting does not mean that all communication and client data stays in Switzerland. Google, Zoom, Dropbox, Calendly and WhatsApp operate internationally. Depending on the service, account settings and subprocessors, processing may take place in Ireland, other EU/EEA countries and the United States, as well as other countries identified in the providers’ current processing-location and subprocessor information. Calendly stores customer data in the United States. Meeting participants’ locations can also affect international processing.

For disclosures abroad, Swiss law requires an adequate level of protection or another permitted basis. The providers describe mechanisms including recognised adequacy arrangements and standard contractual clauses, with Swiss adaptations where applicable. The mechanism applicable to a particular service depends on the receiving entity, certification and contract. You may contact us for information about the destinations and safeguards relevant to your data, or to request a copy of applicable safeguards, subject to necessary redactions.

Cookies and external content

The website uses WordPress and the Kadence theme. Technical cookies may be used for login, security and administrative functions; these are relevant in particular to authorised administrators. You can block or delete cookies through your browser settings, although some functions may then be unavailable.

The current website does not embed a Calendly widget, Zoom meeting, WhatsApp chat, map or video player. Clicking an external link opens the provider’s service, which processes information under its own notice. We do not use advertising pixels or a visitor analytics service on the current website. If optional tracking or embedded services are introduced, we will update this information and provide any required choice or consent before activation.

How long information is kept

We keep personal data for as long as needed for the purpose for which it was collected, the agreed engagement and applicable legal requirements. Enquiries are kept while needed to handle the enquiry and any follow-up. Client files and correspondence may need to be retained after an engagement for legal duties or the establishment, exercise or defence of claims. Accounting records subject to Swiss statutory retention requirements are generally kept for ten years. Technical logs and backups follow the hosting service’s retention and rotation settings. Information no longer needed is deleted or anonymised; backup copies expire through the backup cycle.

Security

This website uses HTTPS to protect information in transit. No internet transmission or storage system can be guaranteed completely secure. Please do not send passwords or bank login details. Contact us if you believe information has reached the wrong recipient or has been accessed without authorisation.

Your rights

Under the conditions of applicable law, you can request information about whether and how we process your personal data, ask for inaccurate information to be corrected, and request deletion or object to processing. Rights to receive data in a portable format or have it transferred apply in the circumstances provided by law. Where processing is based on consent, you may withdraw it for the future. Legal retention duties and other statutory exceptions can limit these rights.

Please send requests to kerenjo@kerenjothomas.com. We may need proportionate information to verify your identity. We normally respond to an access request within 30 days; if an extension or restriction is necessary, we will explain it as required by law. You may also contact the Federal Data Protection and Information Commissioner (FDPIC), the Swiss supervisory authority.

Changes to this notice

We update this notice when our services or processing change. The date above identifies the current version. Material new processing will be explained at the relevant point of collection where required.