GOVERNANCE / CONFIDENTIALITY & INTEGRITY
Confidentiality & Integrity
Confidentiality protects information that should remain private. Integrity requires thatmaterial instructions and disclosures are attributable to the right authority and independentlyverified before action.
McLeod Family Office coordinates family stewardship within defined mandates. Information is shared for alegitimate purpose, with appropriate counterparties and through established channels. Public information doesnot establish the legal authority of any individual, entity or transaction.
McLeod Family Office serves the McLeod family. It does not solicit third-party capital, manage externalclient assets or offer investment products to the public.
Disclose with purpose, not by default.
Confidential information is shared on a need-to-know basis for a legitimate institutional purpose. Before
material is disclosed, the requesting counterparty and the basis for that exchange should be identified. A public
webpage, an email signature or a familiar organization name does not by itself establish permission to receive
protected information.
Recognize the right counterparty
Confirm the relevant organization and authorized contact before relying on a request to disclose nonpublic materials.
Use an agreed channel
Do not send identity documents, banking records, family information or confidential corporate files through an initial open enquiry. Establish an appropriate secure method through verified contacts first.
Verify the instruction, not merely the sender.
A message may appear authentic without being an authorized instruction. Official-domain guidance and email
authentication are useful signals; they are not substitutes for confirming the person, purpose and authority
relevant to a requested action.
Standing safety statement: Do not act on new or changed payment instructions, bank details or requests for confidential information solely because they arrived by email, message or document. Independently verify the instruction through an official contact route obtained separately from the communication.
Separate entity authority
The Family Office is a coordinating institution. Each purpose-specific legal entity and operating business retains responsibilities under its own governing arrangements. Website copy alone cannot establish signing authority or a mandate.
Integrity depends on clear responsibility.
Family governance defines long-term direction and reserved responsibilities. The Office coordinates within its
mandate; legal entities and operating businesses hold responsibilities appropriate to their structure. Specialist
advisers support defined assignments without replacing accountable decision-making.
Family governance
Purpose, reserved direction and stewardship expectations.
Family Office
Coordinates governance, risk, administration, strategy and reporting within its mandate.
Purpose-specific vehicles
Hold responsibilities for their designated entity purposes.
Operating businesses
Boards and executives manage operating responsibilities and business decisions.
External advisers
Provide specialist expertise/independent challenge under appropriate engagement.
Preserve institutional memory
Documented decisions, appropriate reporting and continuity arrangements reduce dependence on any single person. The public website does not disclose those private records.
Seven Approved Safeguards
McLeod Family Office adheres to these safeguards for protected disclosure, verification, and engagement.
Need-to-know disclosure
Share information only for a legitimate purpose with an identified, appropriately authorized recipient.
Verified counterparties
Confirm organization, individual and authority independently where sensitive action is requested.
Controlled exchange
Do not submit banking/identity/nonpublic records in an initial open enquiry; establish approved method first.
Official channels
Obtain official contact information from verified, separately accessed routes.
Authentication limits
SPF, DKIM and DMARC can help assess sending-domain authentication; they do not authorize instructions.
Changed instructions
Independently confirm new or changed bank/payment details using separately sourced official contact.
Suspicious messages
Do not reply, share secrets or act solely on suspicious instructions; use approved guidance.
Direct Answers
What does confidentiality mean at McLeod Family Office?
Information is disclosed only for a legitimate institutional purpose and with appropriate counterparties through established channels. Public pages do not provide access to private family or entity records.
How is integrity different from confidentiality?
Confidentiality limits who receives protected information. Integrity concerns whether material information, instructions and authority are authentic, accurate and appropriately confirmed before use.
May I send confidential documents using the public contact form?
No confidential identity, payment or corporate materials should be submitted during first contact. Confirm the legitimate recipient and arrange an appropriate secure channel first.
Does a familiar email address prove a payment instruction is authorized?
No. Even a successful email authentication check does not establish transaction authority. Independently confirm new or changed payment details using an official route obtained separately.
Can the Family Office bind any family-owned operating business?
A website description alone does not establish binding authority. Operating companies and legal entities retain their own governance and contracting responsibilities.
Where can I verify an official communication?
Use the independently accessed McLeod Verification Centre and approved official channels; do not rely solely on contact information included in the message under review.
Does this page describe McLeod’s internal cybersecurity systems?
No. It explains public safe-engagement principles and does not attest to specific security architecture, certifications, penetration tests or monitoring services.
How can I report a suspicious message?
Follow the published Verification Centre guidance. A direct reporting channel will appear only if an approved, monitored service has been established and its route is publicly verified.
Verify before sharing or acting.
When you need to confirm a communication, independently locate the official VerificationCentre or Contact the Office route. Do not supply passwords,authentication codes, sensitive identity documents or bank records through this page.
