Legal
Terms & Privacy
Last updated:
Privacy Policy
1. Who we are
Tosú Advisory is an independent AI advisory firm registered in Ireland (CRO no. 825631), with its principal place of business in County Longford, Ireland. We provide AI strategy, vendor selection, and proof-of-value advisory services to enterprise clients.
For the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018, Tosú Advisory is the data controller of personal data collected through this website.
If you have any questions about this policy or how we handle your data, please contact us at info@tosuadvisory.com.
2. What data we collect
We collect personal data in the following circumstances:
Enquiry form: When you submit the contact form on our website, we collect your name, email address, and the content of your message (including what you are trying to decide). This is the only form on this website.
Email correspondence: If you contact us directly by email, we retain that correspondence.
Website analytics: We may collect anonymised usage data (pages visited, browser type, approximate location) to understand how visitors use our site. No personally identifiable information is collected at this level.
We do not collect sensitive personal data, payment card data, or data from children.
3. How we use your data
We use the personal data you provide solely to respond to your enquiry and assess whether we can help you, communicate with you about a potential or existing engagement, and comply with any legal obligations that apply to us.
We do not use your data for marketing without your explicit consent, and we do not sell, rent, or share your personal data with third parties for their own marketing purposes.
4. Legal basis for processing
We rely on the following legal bases under GDPR Article 6: legitimate interests (Art. 6(1)(f)) for responding to enquiries and managing pre-contractual communications; contract (Art. 6(1)(b)) for processing necessary to perform a contract with you; and legal obligation (Art. 6(1)(c)) where we are required to retain records by Irish law.
5. Data retention
We retain enquiry data for up to 24 months from the date of your last contact with us, unless a longer retention period is required by law or necessary for an ongoing engagement. Data relating to completed engagements is retained for 7 years in line with Irish accounting and tax obligations.
When data is no longer needed, it is securely deleted or anonymised.
6. Data sharing and transfers
We do not transfer your personal data outside the European Economic Area (EEA). We use a small number of trusted service providers to operate this website (hosting, email delivery). These providers act as data processors under written agreements and are prohibited from using your data for their own purposes.
We will disclose personal data if required to do so by law or in response to a valid request from a competent authority.
7. Your rights
Under GDPR, you have the right to access the personal data we hold about you, rectify inaccurate or incomplete data, erase your data where there is no lawful basis for continued processing, restrict processing in certain circumstances, object to processing based on legitimate interests, receive your data in a structured machine-readable format, and withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please email info@tosuadvisory.com. We will respond within one month.
You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority: www.dataprotection.ie.
8. Cookies
This website uses only essential cookies required for the site to function. We do not use tracking, advertising, or analytics cookies that require consent. If this changes, we will update this policy and display an appropriate consent notice.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via TLS. Access to personal data is restricted to those who need it to respond to your enquiry.
10. Changes to this policy
We may update this Privacy Policy from time to time. The last updated date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.
Terms of Engagement
1. About these terms
These Terms of Engagement govern the use of the Tosú Advisory website at tosuadvisory.com and any advisory services provided by Tosú Advisory to clients.
Tosú Advisory is registered in Ireland (CRO no. 825631) with its principal place of business in County Longford, Ireland.
By using this website or engaging our services, you agree to these Terms. If you do not agree, please do not use this website or engage our services.
2. Website use
The content on this website is provided for general information purposes only. It does not constitute professional advice and should not be relied upon as such without first obtaining specific advice relevant to your circumstances.
We make reasonable efforts to keep the information on this website accurate and up to date, but we make no warranties or representations as to its accuracy, completeness, or fitness for any particular purpose.
You may not use this website in any way that is unlawful, harmful, or that could damage our reputation or the experience of other users.
3. Advisory services
Tosú Advisory provides independent AI advisory services including AI readiness assessments, vendor selection support, and proof-of-value programme design. The specific scope, deliverables, fees, and timeline for any engagement are agreed in writing before work commences.
Our advice is based on information provided by the client and our independent assessment at the time of the engagement. We are not responsible for outcomes arising from incomplete or inaccurate information provided to us.
We do not accept commissions, referral fees, or any other financial benefit from technology vendors. Our advice is independent.
4. Fees and payment
Our fees are fixed and agreed in writing before any engagement begins. We do not charge by the hour. Invoices are issued in accordance with the payment schedule set out in the engagement letter.
Payment is due within 30 days of the invoice date unless otherwise agreed in writing. We reserve the right to suspend work on an engagement where invoices remain unpaid beyond their due date.
All fees are quoted exclusive of VAT. Where applicable, Irish VAT will be added at the prevailing rate.
5. Confidentiality
We treat all client information as strictly confidential. We will not disclose confidential information to any third party without your prior written consent, except where required by law or regulation.
We may reference the existence of an engagement (e.g. in a client list) without disclosing any confidential details, unless you request otherwise.
6. Intellectual property
All content on this website — including text, design, and structure — is the property of Tosú Advisory and is protected by Irish and international copyright law. You may not reproduce, distribute, or create derivative works without our prior written consent.
Deliverables produced as part of a client engagement become the property of the client upon receipt of full payment, unless otherwise agreed in the engagement letter. We retain the right to use anonymised methodologies and frameworks developed during engagements in future work.
7. Limitation of liability
To the fullest extent permitted by Irish law, Tosú Advisory's total liability to you in connection with any engagement shall not exceed the total fees paid by you for that engagement.
We are not liable for any indirect, consequential, or special loss, including loss of profit, loss of data, or loss of business opportunity, even if we have been advised of the possibility of such loss.
Nothing in these Terms limits our liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded by law.
8. Termination
Either party may terminate an engagement by giving 14 days' written notice. In the event of termination, you will be invoiced for work completed up to the termination date, calculated on a pro-rata basis against the agreed fixed fee.
We reserve the right to terminate an engagement immediately if a client acts in a manner that is unlawful, abusive, or materially in breach of these Terms.
9. Governing law and disputes
These Terms are governed by and construed in accordance with the laws of Ireland. Any dispute arising from these Terms or any engagement shall be subject to the exclusive jurisdiction of the Irish courts.
Before initiating formal proceedings, both parties agree to attempt to resolve any dispute through good-faith negotiation for a period of 30 days.
10. Changes to these terms
We may update these Terms from time to time. The last updated date at the top of this page will reflect any changes. For active engagements, the Terms in force at the time the engagement letter was signed will apply unless both parties agree otherwise in writing.
11. Contact
If you have any questions about these Terms, please contact us at info@tosuadvisory.com or by post to Tosú Advisory, County Longford, Ireland.