Privacy policy.

2.1 Personal data. Identifiers: name, email address, telephone number, IP address. Professional information: job title and company name where you interact with us in a business capacity. Communications: anything you provide when contacting us, including the nature of your inquiry and your message.

2.2 Usage data. Device information, browser type and version, operating system, pages visited, time on page, referral source, navigation paths, and general location derived from your IP address.

2.3 Sensitive personal information. We do not collect sensitive personal information such as health data, racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, or sexual orientation. If a specific service ever required it, we would tell you, explain why, and obtain your explicit consent.

2.4 Tracking technologies. First-party and third-party cookies, analytics scripts, and log files.

To respond to inquiries and provide support. Legal basis: legitimate interests.

To evaluate and pursue potential investment and management relationships. Legal basis: legitimate interests, and performance of a contract where one exists.

To operate, secure and improve the website, and to analyze how it is used. Legal basis: legitimate interests, and consent for non-essential cookies.

To send subscription communications where you have opted in. Legal basis: consent, obtained through a clear opt-in that is never pre-ticked.

To meet legal and regulatory obligations. Legal basis: legal obligation.

We do not sell personal data and we do not use it for advertising.

Service providers who act on our instructions: Google Analytics for website measurement, Google Maps for the embedded office map, Resend for delivering inquiries and subscriptions, and Vercel for serving the site and its logs.

Professional advisers, and counterparties to a transaction, where a business relationship requires it.

Authorities, where disclosure is required by law.

We do not sell or rent personal data to third parties.

SQUARE2 operates in the United States and our service providers may process data there and in other countries. Where personal data is transferred out of the EU, the UK or the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

We maintain reasonable technical and organizational safeguards, including encrypted transmission, access restrictions, and limits on who inside the firm can see inquiry data. No transmission over the internet is completely secure.

We keep personal data only as long as needed for the purposes described in this policy or as required by law.

Depending on where you live you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent at any time.

California residents have rights under the CCPA and CPRA, including the right to know what is collected, to delete it, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights. We do not sell or share personal data as those terms are defined.

To make a request, contact us at the address above. We will respond within the period required by applicable law.

This website is directed at business and professional audiences. It is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

This site links to third-party websites, including LinkedIn and the websites of properties and partners. We are not responsible for the privacy practices or content of those sites. We encourage you to read their policies before providing them with personal data.

We may update this policy from time to time. Changes take effect when posted and the last updated date above will be revised. Material changes will be signalled on the website.