Privacy Policy

Effective: January 1, 2026 • Last Updated: March 1, 2026

BrownFort Advisory, operating under M S Sulthan Legal Associates, is committed to protecting your privacy in compliance with applicable data protection laws worldwide.

1. Data Controller

BrownFort Advisory (M S Sulthan Legal Associates)
Ground Floor, T1, Hi LITE Business Park, Kozhikode, Kerala — 673014
Contact: +91 89435 15000

2. Data We Collect

2.1 You Provide

Name, organisation, email, phone, industry, AI system details, and voluntary additional information.

2.2 Automatic

IP address, browser, OS, pages visited, time spent, referrer, device identifiers.

2.3 Engagement

Business/technical information for Services including AI systems, data architectures, regulatory status.

3. Legal Basis (GDPR Art. 6 / DPDPA Sec. 4)

• Consent: When you submit forms or opt in.
• Contract: To perform Services under Engagement Letter.
• Legitimate Interest: Analytics, security, improvement.
• Legal Obligation: When required by law.

4. Use

Responding to enquiries, delivering services, regulatory updates (with consent), improving offerings, legal compliance, security.

5. Sharing

We do not sell or trade data. Share only with: technical partners (under NDA), professional advisors (under privilege), authorities (when required).

6. International Transfers

Safeguards: EU SCCs, DPDPA provisions, UAE PDPL localisation, US state law contractual protections.

7. Retention

Enquiries: 24 months. Engagements: 7 years post-completion. Analytics: 26 months. Marketing: until consent withdrawal.

8. Your Rights

• Access: Copy of your data.
• Rectification: Correct inaccurate data.
• Erasure: Deletion (subject to retention obligations).
• Restriction: Limit processing.
• Portability: Structured format.
• Objection: Object to legitimate-interest processing.
• Withdraw Consent: Any time.
• Nomination (DPDPA): Nominate another to exercise rights.

Contact: +91 89435 15000. Response within 30 days.

9. Security

TLS/SSL encryption, access controls, regular assessments, confidentiality agreements, secure disposal.

10. Cookies

Essential cookies for functionality; analytics for usage patterns. Controllable via browser. Site works without non-essential cookies.

11. Children

Not directed to under-18s. No knowing collection of children’s data.

12. Supervisory Authority

EU: Your Member State DPA. India: Data Protection Board under DPDPA.

13. Updates

Material changes published with updated effective date.