Privacy Notice
Version PN-2026.3 · effective 25 August 2026
Montvelle is operated by Global Solutions Management LLC, a Delaware limited liability company ("GSM"). We design Montvelle on a privacy-by-default basis: collect what is reasonably needed, restrict access by role and matter, use information for defined purposes, disclose the minimum necessary when acting on a member's behalf, and never treat member identities or household information as a commercial asset.
Who is responsible and how to contact us
For applications, membership administration, Montvelle World, request handling, sourcing and coordination, Decision Rooms, gatherings and our own communications, GSM generally acts as the controller or equivalent responsible business under applicable privacy law. Privacy requests, objections, complaints and formal privacy notices can be submitted through Contact Montvelle using the 'Privacy / data request' category. We verify identity before disclosing private information. Vendors such as hosting, security, communications and operational technology providers may act as processors where they process personal information on GSM's documented instructions. Banks, payment institutions, professional advisers, independent specialists and other providers with their own legal, regulatory or professional duties normally act as independent controllers for the information they hold and are responsible for their own privacy practices. Where applicable law requires GSM to appoint a statutory privacy representative or provide another prescribed contact route in a jurisdiction, the applicable details will be made available as required by that law.
Information we may collect
Depending on how you interact with Montvelle, we may collect identity and contact information; application, admission and reference information; professional, business, ownership, family and household context you choose to share; membership and access records; preferences and service history; invitations and event responses; requests, briefs, Decision Room material and Circle context; communications with us; contracts, acceptance records, invoices, bank-transfer references, accounting and tax records; device, IP, browser, login, security, audit and usage information; and records reasonably required to protect members, investigate misuse or comply with law. We do not need or ask for payment-card details for Montvelle membership because membership is settled by bank transfer.
Information you must provide and information that is optional
Some information is necessary to assess an application, establish and administer membership, verify identity or authority, comply with law, secure an account, carry out an instruction or complete a request. If required information is not provided, we may be unable to admit the applicant, activate or secure membership, carry out the relevant request or continue the affected service. Other information — such as lifestyle preferences, optional profile details and additional household context — is voluntary and is used only where it helps us provide the service or where another stated lawful purpose applies.
Sensitive, special-category and criminal-offence information
We do not routinely seek sensitive information and ask members not to provide more than a matter genuinely requires. A request may nevertheless involve health information, disability or accessibility needs, dietary information revealing health or belief, information about a child, or another category treated as sensitive or special-category data by applicable law. We use the minimum reasonably necessary, apply tighter access controls and rely on both an appropriate ordinary lawful basis and any additional special-category condition required by law, commonly explicit consent where that is appropriate. We do not use sensitive information for behavioural advertising or unrelated marketing. Identity, sanctions, fraud, safety, adverse-media or suitability screening may reveal allegations, regulatory findings or criminal-offence information. We process such information only where permitted by applicable law, limit it to what is reasonably necessary for admission, safety, fraud prevention or compliance, and do not treat an unverified allegation as an established fact.
Information we obtain from other people and public sources
Some information reaches us indirectly: from the person who refers, nominates or invites you; from referees asked to give assurance; from an approved household principal or delegate describing authorised household arrangements; from a member asking us to contact you in connection with a Circle, introduction or matter; from professional advisers and providers handling a request; and from public, corporate, professional, regulatory, sanctions, licensing or other lawful sources used for verification, sourcing or due diligence. Where privacy law requires indirect-collection transparency, we provide the required information within the applicable period unless a lawful exemption applies. We record material source context where needed so that information can be assessed fairly and corrected if inaccurate.
If you give us information about another person
If you provide personal information about a family member, guest, referee, employee, adviser, household delegate or another person, you should only provide information you are entitled to share and should avoid unnecessary private or sensitive detail. Where appropriate, you should tell that person that their information has been provided to Montvelle and direct them to this notice. This does not prevent a lawful disclosure made for safeguarding, fraud prevention, legal claims, compliance or another purpose where notice is not required or would be inappropriate under applicable law.
Why we use information and our lawful bases
We use information to assess applications and take requested pre-contract steps; establish, administer and secure membership; authenticate users and delegates; handle requests and bookings; source and coordinate third-party providers and independent expertise; operate Decision Rooms, Circles, invitations, gatherings and household access; provide support; keep financial, contractual and legal records; protect members and systems; prevent fraud, misuse and security incidents; enforce contractual rights; establish, exercise or defend legal claims; improve service quality and operations; and meet accounting, tax, sanctions, anti-bribery, regulatory and other legal obligations. Depending on the activity and jurisdiction, the lawful basis may be performance of a contract or pre-contractual steps, compliance with law, consent, protection of vital interests where genuinely relevant, or GSM's legitimate interests in operating a secure, discreet and effective private membership service where those interests are not overridden by the individual's rights. Where we rely on legitimate interests, those interests include member safety and confidentiality, fraud prevention, service administration and improvement, appropriate provider research, business continuity and the protection of legal rights. Consent can be withdrawn at any time without affecting processing already lawfully carried out.
Personalisation and profiling
Montvelle is deliberately personalised. We may use preferences, prior requests, service history, household permissions and interaction history to remember context, reduce repetition, prioritise relevant options and improve the usefulness of the service. This may involve profiling in the ordinary privacy-law sense of analysing preferences or behaviour, but we do not use member profiles for cross-context behavioural advertising or sell them. Sensitive information is not used to infer unrelated characteristics. Where a law gives you a right to object to or limit particular profiling, you may exercise that right through Contact Montvelle.
Request-led service and external enquiries
There is no member-facing provider directory and we do not publish or supply member profiles to providers. When we make enquiries or coordinate a request, we disclose only information reasonably necessary to obtain or deliver what the member has authorised and, wherever practical, we first make enquiries without naming the member. A member's identity, household composition, family circumstances, financial position, health, security arrangements and other private or sensitive context are not disclosed externally without appropriate authority, consent or another lawful basis. Once a member separately instructs an independent adviser or supplier, that third party is responsible for its own processing under its engagement and privacy terms.
Community, introductions, Circles and Decision Rooms
Member information is restricted to authorised areas and contact details are hidden by default. Member information must not be sold, scraped, bulk-exported, supplied to sponsors or used for unsolicited prospecting. Before a consent-led introduction, we confirm the intended participants are willing. A person included in a Circle does not acquire membership or access to other members. A Decision Room is matter-specific: an outside adviser or participant receives only the minimum access authorised for that matter, not the member's wider household record, and access can be withdrawn when it is no longer required.
Household access and privacy between adults
Each approved adult has their own login and permissions. An adult household member's own requests, messages and private matters are not automatically visible to the Household Principal or another household user. Sharing happens only where the individual chooses it, where the Membership Schedule expressly provides for it, or where another lawful basis requires disclosure. Household and family-office delegates receive access only to identified matters or functions within their authority. We may rely on an authorised delegate until we are told their authority has changed, but we may pause an instruction and verify authority where privacy, security or financial risk warrants it.
Children and next-generation participation
A person under 18 cannot contract directly with GSM. At launch, Montvelle does not provide unrestricted independent child accounts. Any under-18 participation is authorised by a parent, guardian or other legally responsible adult and is age-appropriate, limited and supervised. It does not provide access to adult financial, commercial, security or other private household matters. We collect only information reasonably required for participation, safety and safeguarding, apply stricter access controls, and do not sell children's information, use it for behavioural advertising or intentionally create commercial profiles of children. Where an online activity is specifically made available to children, we will provide any additional age-appropriate privacy information and controls required by applicable law.
Who we share information with
We may disclose information to authorised household users and delegates within their permissions; suppliers and independent professionals needed for a member-authorised request; hosting, infrastructure, security, communications, support and other service providers processing data for GSM; banks and payment institutions; accountants, auditors, insurers, lawyers and other professional advisers to GSM; regulators, courts, law-enforcement bodies and competent authorities where disclosure is required or lawfully necessary; and other parties where the individual has directed or authorised the disclosure. Processors are subject to contractual confidentiality, security and use restrictions appropriate to their role. We do not give suppliers general access to the membership or member directory.
Corporate transactions and protection of legal rights
Information may be disclosed under appropriate confidentiality restrictions to professional advisers, lenders, investors or prospective purchasers in connection with a genuine financing, restructuring, merger, sale, acquisition or transfer of all or part of GSM or the Montvelle business. Any successor that receives personal information remains subject to applicable privacy law and the commitments attaching to that information. We may also preserve, use or disclose information where reasonably necessary to establish, exercise or defend legal claims, investigate fraud or misuse, enforce agreements, protect the rights or safety of members or others, or comply with a lawful order or regulatory obligation.
International transfers
Montvelle is international and GSM is a United States company, so information may be processed in or transferred to countries outside the individual's place of residence, including where providers, professional advisers or suppliers supporting an authorised request are located. Where a restricted-transfer regime applies, we use a mechanism recognised by the relevant law, such as an adequacy decision or regulation, approved standard contractual clauses or an applicable UK addendum or international data transfer agreement, binding corporate arrangements where available, or a permitted statutory derogation for a specific transfer. We assess and document transfer arrangements where required and apply supplementary safeguards where appropriate. Information about the safeguard used for a relevant transfer can be requested through Contact Montvelle, subject to protecting confidential commercial and security information.
Direct marketing and service communications
Operational messages needed to administer an application, membership, request, security event, booking, legal change or other service matter are service communications rather than optional marketing. We may send optional Montvelle news, invitations or marketing where we have consent or another lawful basis permitted by the recipient's jurisdiction. Individuals can opt out of optional direct marketing at any time through the method provided with the communication or through Contact Montvelle. An opt-out does not prevent necessary service, security, contractual or legal messages. We do not provide member identities to third parties for their own unrelated direct marketing.
How long we keep information
We apply retention schedules based on purpose, sensitivity, legal obligations, limitation periods and the need to establish or defend claims. As a working standard, unsuccessful application and referee material is ordinarily retained for up to 24 months unless a shorter period is appropriate or a legal, fraud-prevention or safeguarding reason requires longer; active membership and core contractual records are kept during membership and ordinarily for up to seven years afterwards; invoices, accounting and tax records are kept for the applicable statutory period, ordinarily up to seven years; request, sourcing and Decision Room material is reviewed after the matter closes and is ordinarily deleted, anonymised or reduced to a necessary service-history record within 24 months unless the member asks for continued context or law, a dispute or an ongoing relationship requires longer; authentication, security and audit logs are retained for periods proportionate to security need and ordinarily no longer than 24 months unless an incident requires preservation; and sensitive information is deleted or reduced as soon as the purpose permits and is not retained merely because other membership records remain. Legal holds, safeguarding duties, fraud prevention and regulatory requirements may override ordinary periods. When information is no longer needed, we delete, anonymise or securely archive it as appropriate.
Security and confidentiality
We use technical and organisational measures proportionate to the sensitivity of the information, including role-based and matter-based access, authentication, least-privilege permissions, secure storage and transmission, logging, supplier controls, confidentiality requirements, security monitoring and incident-response procedures. Access to highly sensitive member context should be limited to people with a genuine operational need. No internet or storage system can be guaranteed completely secure. Suspected incidents are investigated and affected individuals and authorities are notified where applicable law requires it.
Your rights, verification and complaints
Depending on applicable law, you may have rights to know or access personal information; receive a copy; correct inaccurate information; request deletion; restrict processing; object to processing based on legitimate interests; withdraw consent; receive certain data in portable form; object to direct marketing; obtain information about international safeguards; and challenge or request human review of qualifying automated decisions. Rights are not absolute and lawful exemptions may apply, including where information must be retained for legal obligations, safeguarding, fraud prevention or legal claims. Because Montvelle handles private household information, we verify identity and authority before acting and do not disclose one adult household member's private matters to another merely because they share a membership. An authorised agent may act where applicable law permits and adequate authority is demonstrated. We respond within the period required by applicable law. If you are dissatisfied, you can request internal review through Contact Montvelle and may complain to the privacy or data-protection authority with jurisdiction over you.
United States state privacy rights
Where a United States state privacy law applies to GSM and to a particular individual, that person may have additional rights such as access or confirmation, correction, deletion, portability, non-discrimination, use of an authorised agent, appeal of certain request decisions, and rights relating to sensitive personal information, sale, sharing or targeted advertising. Montvelle does not sell personal information for money and does not share personal information for cross-context behavioural advertising as those concepts are defined by the California Consumer Privacy Act, and we do not knowingly sell or share children's personal information for such advertising. If our practices change in a way that creates an applicable opt-out right, we will provide the legally required choice before the change applies. Requests can be made through Contact Montvelle; where applicable law requires an additional request method or preference signal, we will honour or provide it as required.
AI-assisted tools and automated decisions
We may use software and AI-assisted tools to organise information, support research, summarise documents or communications, help retrieve relevant context, detect potential security or misuse patterns and coordinate workflows. We do not intentionally use confidential member content to train a public or general-purpose model without an appropriate lawful basis and any permission required by law or Montvelle policy. AI output can be incomplete or wrong and is not treated as regulated professional advice. We do not intend to make solely automated decisions producing legal or similarly significant effects about admission, membership, safeguarding or another material member interest without a lawful basis and the safeguards required by applicable law, including meaningful human review and a way to challenge the decision where required. High-risk or sensitive uses are subject to additional assessment where law or good privacy practice requires it.
Cookies, local storage, translation and third-party links
The public website may use necessary browser storage and other technologies described in the Cookies notice. The language selector can use Google Translate to translate public pages in the browser; when activated, Google may process page and technical information under its own terms and privacy practices. External links and independently provided services are governed by the third party's own privacy terms. A link or reference does not by itself mean GSM controls or endorses that third party's privacy practices. The English-language Montvelle legal documents remain authoritative to the extent permitted by law.
Changes to this notice
We may update this notice when our services, technology, providers or legal obligations change. The current version and effective date are shown on this page. Material changes are communicated in a manner appropriate to their significance and, where required, before the new processing begins. A change to this notice does not by itself override a contractual commitment or remove a mandatory privacy right.
Contact
Speak to Montvelle
Questions, privacy requests, formal notices and cancellation instructions can use our secure contact form. GSM's official business email and registered office are listed in the Legal Notice.