Last updated: 28 September 2026
This policy explains how personal data is processed when you visit sandpiper-risk.com or contact us through it. We process personal data in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection (FADP), as far as they apply.
1. Controller
Sandpiper Corporate Risk Advisory Services LLC, Delaware, USA
E-mail: info@sandpiper-risk.com
For all questions about data protection and to exercise your rights, please write to the e-mail address above.
2. Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, Germany, on servers in Germany. When you open the website, the server automatically records technical data such as your IP address, date and time of access, the page requested, the referring page, and browser and operating system information. This is necessary to deliver the website securely and to detect and defend against attacks (legitimate interest, Art. 6(1)(f) GDPR). Log data is deleted by the host after a short period, normally within a few weeks. A data processing agreement is in place with the host.
3. Contact form and e-mail
If you contact us via the contact form or by e-mail, we process the data you provide (name, e-mail address, telephone number and your message) to handle your enquiry and any follow-up (Art. 6(1)(b) GDPR for pre-contractual requests, otherwise Art. 6(1)(f) GDPR). Form submissions are sent to us by e-mail and a copy is stored in the website database. We delete enquiries when they are no longer needed, unless statutory retention obligations apply. Please do not send highly confidential information through the form; ask us for a secure channel instead.
4. Newsletter
If you subscribe to our newsletter, we process your e-mail address to send it to you, based on your consent (Art. 6(1)(a) GDPR). The newsletter is sent via Mailchimp, a service of The Rocket Science Group LLC (Intuit), USA. Mailchimp is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time using the unsubscribe link in every newsletter or by e-mail to us.
5. Cookies and consent
We use technically necessary cookies to operate the website and to store your cookie choices. Other cookies are only set if you consent in the cookie banner (Art. 6(1)(a) GDPR and applicable ePrivacy rules). You can change or withdraw your consent at any time via the cookie settings. All fonts, icons and scripts are loaded from our own server. No data is sent to Google Fonts or to other content delivery networks when you visit the website.
6. Recipients and transfers outside the EU
Your data is only shared with service providers who support us in operating the website and communicating with you (hosting, e-mail, newsletter), and with authorities where we are legally required to do so. As our company is based in the USA, enquiries may be processed there and at our offices in the United Kingdom, Switzerland and Cyprus. Where data is transferred to countries without an adequacy decision, we use the EU Standard Contractual Clauses or another permitted safeguard.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests, and to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
8. Security
This website uses TLS encryption (https). We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
9. Changes
We may update this policy when our services or the law change. The current version is always available on this page.