Privacy Policy
This page sets out what our forms send to us, who handles that data, what the site runs after you accept cookies, and how you can reach us about your data.
Who we are
LFF Heritage Trusts (LFT) is responsible for the personal data described on this page. Our registered address is Schlossplatz 5, 9490 Vaduz, Liechtenstein. Write to info@foundation-liechtenstein.com or call +423 210 0004 (Wealth Management department, Monday to Friday, 09:00 to 17:30 CET/CEST).
This policy is written for people who visit the site, send an enquiry, complete the onboarding form or pay an invoice. Where this page says "we", it means LFT. Our team is listed on its own page.
[Legal form, registration number and VAT number: owner to supply before publication.]
What this policy covers
This policy covers the LFT website at foundation-liechtenstein.com, the enquiry form, the onboarding form, the pay pages where an invoice is settled, and the analytics that run on the site after you accept. It does not cover the content of a client file. Client files are handled under the engagement letter, and our Terms of Service govern your use of the site.
The forms described below send the context listed in the next section. The analytics described further down run only after you accept them in the consent banner.
Context sent with every form
Each enquiry, onboarding and pay form sends the following context with the message. We need it to answer the enquiry and to tell genuine enquiries from spam.
- IP address
- city-level location
- network (the internet provider the visit comes from)
- browser and language
- referrer
- the pages visited on the site before the form
- visit number
- time on the page
- device and viewport (screen size)
- cookie-consent state
- analytics identifier
The legal basis is our legitimate interest in answering the enquiry and in telling spam from enquiries. We use this context for those two purposes. We keep it with the enquiry email, for as long as that email is kept: [retention period: owner to confirm]. Cookie contents are never sent with a form. Only the cookie-consent state is sent, as one of the items in the list above.
Enquiries, onboarding and pay forms
Each form asks only for the fields shown on it. We use those fields to answer your enquiry, to prepare the engagement or to take the payment you have chosen to make. A phone number, if you give one, is used to reply to your enquiry.
Every form is checked by Cloudflare Turnstile before it is sent, so that automated programs cannot submit it. If the check fails, the form is not sent, and you can try again.
Payments
Card payments are taken by Stripe through Stripe Checkout. Card details are entered with Stripe and are not stored on this site. Crypto payments are taken by NOWPayments. Each processor receives the payment details it needs to take the payment.
The site keeps the invoice reference and the payment status that it receives back, so that the invoice can be matched to the payment. It does not keep card numbers.
Hosting and form protection
Cloudflare hosts the site and its form and payment handlers. Cloudflare Turnstile runs the check on every form. Cloudflare Email Routing passes mail sent to our enquiry address to the team that handles it.
Form delivery
Resend delivers each form message to our enquiry mailbox. The message carries the fields you filled in and the context described above, so that the enquiry can be answered in one place.
Analytics and cookies
The Google tag (Google Tag Manager, which runs Google Analytics 4) loads on every page with Consent Mode v2 in advanced mode: until you accept in the consent banner, every Google consent type is denied, no Google cookie is set and Google receives only cookieless pings without an identifier stored on your device. Google Analytics 4 sets cookies and measures visits in full only after you accept. Microsoft Clarity runs only after you accept. If you decline, Google keeps receiving cookieless pings only, Clarity does not load, and neither service sets a cookie.
Google Analytics 4 measures visits and how the site is used. Microsoft Clarity records how pages are used, through session recordings and heat maps. The table lists each service and when it runs. Cookie names and durations are on the Cookie Policy page.
| Service | Purpose | When it runs |
|---|---|---|
| Google tag (Google Tag Manager) | loads with every consent type denied; cookieless pings only | on every page load |
| Google Analytics 4 | measures visits and how the site is used, with cookies | after you accept |
| Microsoft Clarity | session recordings and heat maps of how pages are used | after you accept |
| Consent Mode v2 | records the consent choice you make in the banner | when you make a choice |
How long we keep data
Enquiry, onboarding and payment records are kept for [retention period: owner to confirm]. The form context listed above is kept with the enquiry email, for as long as that email is kept. Once the period ends, the records are no longer kept for the purposes described on this page.
Your choices and contact
You can ask us what personal data we hold about you. You can ask us to correct it or to delete it. You can withdraw your consent for analytics at any time, through the cookie settings in the footer. Before we act on a request, we may need to confirm who is asking.
To use any of these rights, contact us by email or through the enquiry form or write to info@foundation-liechtenstein.com.
[Supervisory authority and complaints route: owner or lawyer to confirm before publication.]
Changes to this policy
We may update this policy. When we do, the date at the end of this page changes with it, and the updated version applies from the date of publication.
Last updated: [publication date: set by the build]