Last updated: 14 October 2026
This site does not track you. It sets no cookies, runs no analytics, and has no contact form. The only personal data we handle from the site is what you choose to put in an email or a call.
Who we are
Nomos Expand LLC, trading also as Nomos Expand, Glomad Tax and Nomos Notabu, advises on cross-border tax, residency, exit planning and structuring for internationally mobile individuals and companies. The company is registered in the United States.
The website is hosted by Infomaniak Network SA in Switzerland. Email and meetings are provided by Proton AG in Switzerland. Working files are kept on local hardware or with Proton AG in Switzerland. Enquiries about this policy or about personal data should be sent to contact@glomad.tax.
Nomos Expand LLC is the controller for the personal data described here. We have not appointed a data protection officer. We are not required to.
What the website does not do
- No cookies. The site sets none, and it does not use your browser's local or session storage. There is nothing to consent to.
- No analytics. No Google Analytics, no other measurement tool, no visitor statistics.
- No contact form. You write to us by email. Nothing from a form is sent to a processor.
- No advertising pixels. No Meta pixel, no LinkedIn Insight Tag, nothing similar.
- No third-party fonts, scripts, maps or video. Pages are served from our own domain. Your browser does not call another service to read them.
Where the site lives
The domain is registered with Infomaniak Network SA and the site is hosted by Infomaniak Network SA in Switzerland. The pages are static. There is no database and no user account on the host.
Like any host, Infomaniak Network SA keeps a technical log when a page is requested: usually your IP address, the time, the page, and your browser and operating system. That log is used to deliver the site and to deal with abuse. It is not used to build a profile of you. Client files and correspondence are not stored on the host.
Email and calls
Email and meetings are provided by Proton AG in Switzerland. Mail in the Proton mailbox is zero-access encrypted, which means Proton cannot read it.
If you also use Proton Mail, the message is end-to-end encrypted. If you write from Gmail, Outlook or most other providers, it is encrypted in transit only. Your own provider can read it. Subject lines and email addresses are not end-to-end encrypted, whichever provider you use.
For a call we use Proton Meet. Audio, video, screen sharing and chat are end-to-end encrypted, so Proton cannot see the content. Proton still sees connection metadata: that a meeting happened, and how long it lasted. If you want another tool, say so.
If you need to send something sensitive — accounts, staff data, anything commercially confidential — tell us first. We will set up a password-protected file or PGP, which is end-to-end encrypted regardless of your email provider.
Where the work itself is kept
Notes, drafts and client files from an engagement are kept on local hardware or with Proton AG in Switzerland, not on the website and not on the web host. Email stays in Proton. If a local consultant, lawyer, tax adviser or accountant needs a document to do their part of the work, we send them only what they need.
Why we keep what you send, and the legal basis
We use what you send to reply, to decide whether we can help, and — if you become a client — to do the work and to meet our own tax and record-keeping duties. We do not use it for advertising.
The legal basis depends on how we came to be in contact:
- You wrote to us. Steps toward a contract, and performance of that contract once we are working together (Article 6(1)(b)).
- We wrote to you. Our legitimate interest in offering relevant services to a business (Article 6(1)(f)). You can object and we will stop.
- Records we have to keep. Legal obligation, where tax or professional rules require it (Article 6(1)(c)).
- Host logs. Our legitimate interest in running a working site (Article 6(1)(f)).
Who else sees it
We do not sell personal data and we do not share it for marketing.
Infomaniak Network SA processes the host log. Proton AG processes email and meeting traffic. Both are in Switzerland and act under contract.
The work is cross-border. A question about a market is usually answered with someone qualified in that market, who may be outside the EU, the EEA, the UK and Switzerland. We tell you who is on the matter, and we share only what they need.
A local consultant, lawyer, tax adviser or accountant who advises you in their own name is an independent controller. They follow their own rules, not this policy. We say so when that is the case. If someone instead handles data only for us, we put a written agreement in place first.
Data sent to another country
Where a matter requires personal data to be sent to another country, and the transfer is from the EU, the EEA, the United Kingdom or Switzerland, one of the following applies, in this order:
- An adequacy decision. The destination is already treated as adequate under the GDPR, the UK GDPR, or Swiss law, as applicable.
- A written transfer agreement. Where a partner processes data for us and there is no adequacy decision: the EU standard contractual clauses, the UK International Data Transfer Agreement or UK Addendum, or the Swiss equivalent, with a risk assessment where one is required.
- The contract you asked for. The transfer is needed to do the engagement, or to take the steps you asked for before one. That covers most of the work, because the other country is the point of the instruction.
- A filing made for you. We instruct a local firm to incorporate, file, or register tax or payroll in that country.
- Your explicit consent. Only if none of the above fits, and only after we have explained the risk.
If you want the files kept to a particular country, say so at the start. We will tell you whether that is possible for the market you want.
How long we store emails and files
An email that does not turn into paid work is deleted within two years of the last message. Files and correspondence from a piece of work are stored for the period the tax and professional rules for that work require, then deleted. The host log is kept only for as long as Infomaniak Network SA keeps it to run the site and deal with abuse.
Your rights
Requests should be sent to contact@glomad.tax.
You may request access to the personal data we hold, rectification, erasure, restriction of processing, or a portable copy. Where processing is based on legitimate interests, you may object. Where processing is based on consent, you may withdraw that consent.
These rights are available under the GDPR in the EU and the EEA, under the UK GDPR in the United Kingdom, and under the Swiss Federal Act on Data Protection. You may also lodge a complaint with the supervisory authority in your place of residence. In the United Kingdom that authority is the Information Commissioner's Office (ico.org.uk). In Switzerland it is the Federal Data Protection and Information Commissioner (edoeb.admin.ch).
Nomos Expand LLC does not sell personal data and does not share it for cross-context behavioural advertising. Residents of US states that grant a right of access, correction or deletion, including California, may exercise that right at the same address.
If this policy changes
If we add analytics, a booking tool, or a contact form, we will update this page before it goes live, and change the date above.