The High Route Agency
Noel Walton (sole proprietor)
noel@thehighrouteagency.com
The High Route Agency is a sole proprietorship operated by Noel Walton, providing investor marketing services to real estate GP teams. For the purposes of EU data protection law, The High Route Agency is the data controller for personal data collected through this website.
This website uses Google Analytics 4 (GA4), provided by Google LLC. GA4 collects data about how visitors interact with our site — including pages visited, session duration, referrer source, general geographic region (country level), and device type. GA4 assigns a pseudonymous identifier to each visitor via browser cookies and uses this to distinguish sessions.
What is collected: Pseudonymous usage data tied to a randomly generated visitor ID. We do not collect names, email addresses, or any directly identifying information through GA4. IP addresses are anonymised by Google before storage.
Cookies set by GA4: Analytics cookies are only placed after you have given consent via the cookie banner. The following cookies may be set:
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique users | 2 years |
| _ga_[ID] | Maintains session state | 2 years |
| _gid | Distinguishes users (short-term) | 24 hours |
Data transfer: GA4 data is processed by Google LLC, based in the United States. This transfer is covered by Standard Contractual Clauses (SCCs) under Google's Data Processing Amendment.
Legal basis: Consent (Art. 6(1)(a) GDPR) — analytics cookies are only set after you explicitly accept via the cookie consent banner. You may withdraw consent at any time by clicking "Cookie Preferences" in the site footer.
Data retention: GA4 is configured to retain data for a minimum period (2 months). You can also opt out at any time using the Google Analytics Opt-out Browser Add-on (available at tools.google.com/dlpage/gaoptout).
If you sign up to receive GP marketing insights via the email subscription form on our Insights page, we collect your email address.
What we use it for: Sending periodic content (typically monthly) on GP marketing strategy, capital raise systems, and investor pipeline topics. No promotional or sales content from third parties.
Legal basis: Consent (Art. 6(1)(a) GDPR) — you opt in explicitly by submitting the form.
How to withdraw consent: Click "Unsubscribe" in any email, or send a request to noel@thehighrouteagency.com. We will remove your address from the list within 5 business days.
Retention: Email addresses are held until you unsubscribe, then deleted within 6 months.
If you book a discovery call using the scheduling tool on our Contact page, we collect your name, email address, chosen time slot, and any message you include.
What we use it for: Scheduling the call and following up in connection with a potential engagement.
Legal basis: Legitimate interest and steps taken prior to entering a contract (Art. 6(1)(b) GDPR).
Retention: Booking records are retained for the duration of a business relationship, or for 12 months from the booking date if no engagement follows.
In the course of our business development, we research and collect professional contact information about GP (General Partner) teams, syndicators, and fund managers based in the United States. This data is sourced from publicly available records — primarily SEC EDGAR Form D filings and professional LinkedIn profiles.
What is collected: Business contact details including name, professional title, company name, business email address, business phone number, business address, SEC filing data (exemption type, offering amount, state of formation), and LinkedIn profile information.
What we use it for: To contact relevant US-based GP teams about our investor marketing services. Outreach is conducted via LinkedIn connection requests and, where appropriate, direct email.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). We have a legitimate interest in reaching business professionals whose publicly filed activities indicate a direct relevance to our services. We limit this processing to US-based business contacts only, use only business (not personal) contact details, and maintain a suppression list to ensure anyone who objects is never contacted again.
Retention: Prospects who do not respond to any outreach: deleted within 12 months of last outreach attempt. Prospects who responded but did not engage further: deleted within 24 months of last interaction. Prospects who request removal or object to processing: all data except the email address is deleted within 5 business days; the email address is retained on a suppression list solely to prevent future contact. Prospects who become clients: governed by the client engagement agreement.
Your right to object: If you have been contacted by The High Route Agency and do not wish to receive further communication, reply to any message or email noel@thehighrouteagency.com. We will suppress your contact details immediately and confirm within 5 business days.
We use a small number of third-party service providers (data processors) to operate this website and our business. Each processes data only on our instruction and under a Data Processing Agreement.
| Processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Webflow, Inc. | Website hosting and infrastructure | United States | Standard Contractual Clauses (SCCs) |
| Google LLC (Google Analytics 4) | Anonymous aggregate analytics | United States | Standard Contractual Clauses (SCCs) |
| Google LLC (Google Workspace) | Business contact data storage and email | United States | Standard Contractual Clauses (SCCs) |
| HubSpot, Inc. | CRM, contact pipeline management, and discovery call scheduling | United States | EU-US Data Privacy Framework (DPF) |
| MailerLite (UAB MailerLite) | Email marketing and automation | European Union (Lithuania) | GDPR-compliant (EU-based processor) |
| Stripe, Inc. | Client billing and payment processing | United States | EU-US Data Privacy Framework (DPF) |
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.
Some of our service providers are based in the United States. Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the transfer mechanism, as set out in each provider's Data Processing Agreement.
This applies to our US-based processors: Webflow, Google LLC (Google Analytics 4 and Google Workspace), HubSpot, and Stripe. Google's SCCs are incorporated into their Data Processing Amendment, which we have accepted. HubSpot and Stripe participate in the EU-US Data Privacy Framework. MailerLite is based in the European Union (Lithuania) and processes data within the EEA — no cross-border transfer mechanism is required.
As a data subject under EU law, you have the following rights regarding your personal data:
To exercise any of these rights, contact: noel@thehighrouteagency.com
We will respond within 30 days. No fee applies to reasonable requests.
If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Austrian Data Protection Authority:
Datenschutzbehörde (DSB)
Barichgasse 40-42
1030 Wien, Austria
dsb.gv.at
This website uses cookies in two categories:
Strictly necessary cookies are set by Webflow for core site functionality (e.g. navigation state). These do not require consent and cannot be disabled without breaking the site.
Analytics cookies are set by Google Analytics 4 only after you have given explicit consent via the cookie banner on your first visit. These cookies are described in full in the Analytics section above.
We do not use advertising cookies, retargeting cookies, or cookies set by social media platforms.
Managing your preferences: When you first visit this site, a cookie consent banner will appear. You can accept all cookies, decline non-essential cookies, or manage your preferences granularly. You can change your choice at any time by clicking Cookie Preferences in the site footer.
California residents (CCPA): You may opt out of the collection of analytics data by declining cookies via the consent banner. We do not sell personal information.
If we make material changes to this policy, we will update the "Last updated" date at the top of this page. We will not reduce your rights under this policy without direct notice where required by law.
For any data protection queries: