Privacy policy

1. Scope and responsibility

This policy applies to personal information associated with visits to aitc.bramston.associates and institutional enquiries relating to AITC Holding. Bramston & Associates Ltd administers website enquiries and is the contact point for privacy matters. Where another entity independently determines why and how personal information is processed under a specific mandate, that entity may provide an additional privacy notice.

2. Information that may be processed

• Enquiry information: name, organisation, professional email, jurisdiction or corridor, enquiry type and message.
• Communication records: emails, meeting arrangements, responses and related professional correspondence.
• Limited technical information: server security or access logs that a hosting provider may generate, such as IP address, browser, timestamp, requested page and security events.
• Due diligence information: only after an appropriate secure process and separate purpose have been established; additional notices or contractual terms may apply.

3. Sources

Information may be obtained directly from you, your organisation, professional representatives, public professional sources, counterparties, service providers or technical systems involved in delivering and securing the website.

4. Purposes and legal grounds

Information may be used to assess and respond to enquiries; manage communications; consider conflicts, eligibility and institutional fit; secure and operate the website; maintain records; comply with legal obligations; establish or defend legal rights; and, where a mandate proceeds, prepare an appropriate engagement process. Depending on context and applicable law, processing may rely on consent, steps requested before contract, contract performance, legal obligation or legitimate interests in secure and responsible institutional communication.

5. Data minimisation

Please provide only information needed for an initial discussion. Do not send passports, national identity documents, bank statements, account credentials, source-of-funds records, medical data or confidential transaction documents by the public form or open email unless specifically requested through a secure channel.

6. Sharing

Information may be shared on a need-to-know basis with authorised Bramston personnel; professional advisers; technology, communications and hosting providers; relevant counterparties with appropriate authority; and public authorities where legally required. Personal information is not sold.

7. International transfers

Cross-border enquiries may require information to be accessed or processed outside the country where it was collected. Appropriate contractual, organisational or legal safeguards should be applied where required, taking account of the nature of the information and destination.

8. Retention

Enquiry information is retained only as long as reasonably necessary for response, relationship management, legal obligations, conflict records, security and the establishment or defence of claims. Unsuccessful or inactive enquiries should be periodically reviewed and deleted or minimised unless a lawful reason requires continued retention.

9. Security

Reasonable technical and organisational measures are intended to protect information. No internet or email transmission is completely secure. Sensitive evidence should be exchanged only through an agreed protected method.

10. Your rights

Subject to applicable law and exemptions, you may have rights to request access, correction, deletion, restriction, portability, objection or withdrawal of consent, and to complain to a competent data-protection authority. Identity and authority may need to be verified before a request is actioned.

11. Cookies and tracking

The supplied website does not include first-party analytics, advertising trackers or behavioural profiling. See the cookie policy. Hosting infrastructure may use strictly necessary technical mechanisms or logs for security and delivery.

12. Children

The website is intended for institutional and professional audiences and is not directed to children.

13. Contact and complaints

Privacy requests may be sent to info@bramston.co or to Bramston & Associates Ltd at Carleton Tower, 19 Wall Street, Cybercity Ebene 72201, Mauritius. Please state “Privacy request” and provide enough information to identify the relevant communication.

14. Changes

A revised policy may be published when practices, legal requirements or website functionality change. The effective date identifies the current version.