Brileco Infotech
Privacy Policy
Last updated:Brileco Infotech Pvt Ltd ("Brileco", "we", "us", "our") provides regulatory compliance consulting, RegTech advisory, and specialized compliance staffing services to financial institutions across India, the United States, the United Kingdom, and Singapore. This policy explains what personal information we collect through this website, why we collect it, how long we keep it, and the rights available to you under the European Union's General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA, India's Digital Personal Data Protection Act 2023 (DPDP Act), and Singapore's Personal Data Protection Act (PDPA).
On this page
1. Information we collect
When you submit our contact form, we collect the details you provide directly: your name, company name, business type, target jurisdiction(s), and work email address. When you email us directly, we collect whatever information is contained in that correspondence. We do not ask for financial account numbers, government identification numbers, or other sensitive personal data through this website, and we ask that you not include such details in any message to us.
Like most websites, our server automatically logs basic technical information — such as browser type, general device information, and the date and time of a visit — for security and site-reliability purposes. This is standard server logging, not individualized tracking.
2. Why we process it (legal basis)
Where the GDPR or UK GDPR applies, we rely on the following legal bases for processing:
- Consent — when you voluntarily submit the contact form and tick the consent checkbox.
- Legitimate interests — to respond to enquiries, maintain the security of this website, and understand aggregate demand for our services, balanced against your rights and interests.
- Legal obligation — where we are required to retain certain records under applicable law, such as anti-money-laundering recordkeeping rules relevant to regulated-sector engagements.
3. How we use it
- To respond to your enquiry and follow up on the services you've asked about.
- To prepare for and conduct an introductory consultation, where relevant.
- To understand, in aggregate, which jurisdictions and services prospective clients ask about most, so we can improve this site and our service offering.
- To maintain the security, integrity, and proper functioning of this website.
We do not use form submissions for automated decision-making or profiling that produces legal or similarly significant effects, and we do not sell or share your personal information for cross-context behavioral advertising.
4. When we share information
We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances:
- Within Brileco — with the regional team covering your target jurisdiction, so the right specialists can respond.
- Service providers — with third parties who help us operate this website, such as hosting and email-delivery providers, bound by confidentiality obligations and permitted to use your information only to provide services to us.
- Legal requirements — where disclosure is required to comply with a legal obligation, court order, or governmental request, or to protect the rights, property, or safety of Brileco, our clients, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to govern any personal information transferred.
5. International data transfers
Because we operate across India, the United States, the United Kingdom, and Singapore, information you submit may be accessed by our team members in any of these locations in order to respond to your enquiry. Where personal information originating in the EU, UK, or another jurisdiction with cross-border transfer restrictions is transferred internationally, we take reasonable steps to ensure it receives a comparable standard of protection, including through contractual safeguards such as Standard Contractual Clauses where applicable.
6. Data retention
We retain enquiry information only for as long as needed to respond to you and to maintain business records consistent with applicable law in the jurisdictions we operate in — including any recordkeeping obligations tied to regulated-sector engagements. Where no engagement follows an enquiry, we periodically delete enquiry records that are no longer needed for these purposes.
7. Your rights, by region
European Union & United Kingdom (GDPR / UK GDPR)
You have the right to access, correct, or erase your personal information; to restrict or object to our processing of it; to data portability; and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.
California (CCPA / CPRA)
California residents have the right to know what personal information we collect and why, to request deletion of that information, and to correct inaccurate information. We do not sell or share personal information as defined under the CCPA/CPRA, so no opt-out mechanism is required for that activity. You will not be discriminated against for exercising any of these rights.
India (Digital Personal Data Protection Act, 2023)
As a Data Principal under the DPDP Act, you have the right to access a summary of the personal data we process about you and the processing activities involved, to seek correction and erasure of your personal data, to have your grievances addressed, and to nominate another individual to exercise these rights on your behalf in the event of death or incapacity. You may reach our Grievance Officer using the contact details in Section 12.
Singapore (Personal Data Protection Act)
You have the right to access and correct your personal data, and to withdraw consent for its collection, use, or disclosure, subject to legal or contractual restrictions. You may direct requests to our Data Protection contact in Section 12.
To exercise any of the rights above, contact us using the details in Section 12. We will respond within the timeframe required by the applicable law, and may need to verify your identity before actioning a request.
8. Cookies and analytics
This site does not use advertising or cross-site tracking cookies. It does not currently use analytics cookies either. If that changes, we will update this policy in advance and, where required by law, request your consent before any non-essential cookie is set.
9. Children's privacy
This website and our services are directed at businesses and professionals, not children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, contact us using the details in Section 12 and we will delete it.
10. Security
We use reasonable technical and organizational measures — including access controls and secure transmission practices — to protect the personal information you share with us, appropriate to its sensitivity. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security, but we work to safeguard your information at every stage we control.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page reflects the most recent revision. Material changes affecting how we handle previously collected information will be communicated through this website.
12. Contact & grievance officer
For any question about this policy, to exercise a privacy right described above, or to raise a grievance under the DPDP Act or PDPA, contact:
Brileco Infotech Pvt Ltd
Email: info@brilecoinfotech.com
Offices: India · USA · UK · Singapore