Privacy Policy

1. Who We Are

Barandu Limited is a senior independent advisory registered in England and Wales. We provide discreet strategic counsel to founders, principals, government stakeholders, and ultra-high-net-worth individuals navigating complex, high-stakes decisions.

For the purposes of data protection law, Barandu Limited is the data controller in respect of any personal data we hold about you. References to "we", "us" or "our" in this policy are references to Barandu Limited.

2. The Information We Collect

We collect and process personal data only where it is necessary for the purposes described in this policy. The categories of personal data we may collect include:

• Identity data: your name, title, and professional role
• Contact data: your email address, telephone number, and correspondence address
• Professional data: your organisation, industry, and the nature of your enquiry or engagement
• Communication data: the content of any correspondence you send to us, including via our website contact form
• Technical data: your IP address, browser type, and usage data collected automatically when you visit our website

We do not collect sensitive personal data (such as health information, financial account details, or biometric data) through this website. Where such data is relevant to a client engagement, it is handled under separate, bespoke confidentiality arrangements.

3. How We Use Your Information

We use the personal data we collect for the following purposes, and only where we have a lawful basis for doing so:

• To respond to enquiries submitted through our website or by other means
• To manage and deliver advisory engagements where a relationship has been established
• To maintain records of our business relationships and communications
• To comply with our legal and regulatory obligations
• To improve the performance and content of our website

Our lawful bases for processing are: the performance of a contract or pre-contractual steps taken at your request; compliance with a legal obligation; and our legitimate interests in operating a professional advisory business, where those interests are not overridden by your rights and freedoms.

4. How We Share Your Information

We treat all client and prospective client information with the strictest discretion. We do not sell, rent, or trade personal data with third parties for commercial purposes.

We may share your personal data with trusted third-party service providers who assist us in operating our website and business — for example, website hosting providers or analytics services. Such providers are required to process your data only on our instructions and in accordance with applicable data protection law.

We may also disclose personal data where required to do so by law, or in connection with legal proceedings.

5. International Transfers

Barandu Limited operates internationally. In the course of providing advisory services, personal data may be transferred to, and processed in, countries outside the United Kingdom and the European Economic Area. Where such transfers occur, we take appropriate steps to ensure that your personal data is protected to the standard required by applicable data protection law.

6. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. For enquiries that do not result in an engagement, we will typically retain contact information for a period of two years. For client engagements, records are retained for a period of seven years following the conclusion of the engagement, in accordance with standard professional practice.

7. Your Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate or incomplete data
• The right to request erasure of your personal data, subject to certain conditions
• The right to object to or restrict our processing of your personal data
• The right to data portability in certain circumstances
• The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details set out in Section 9 below. We will respond to all requests within one month, as required by law.

8. Cookies and Website Analytics

Our website uses analytics tools to help us understand how visitors use the site. This may involve the collection of technical data such as IP addresses, browser types, and pages visited. This data is used in aggregate and is not used to identify individual visitors.

You can control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of the website.

9. Contact Us

If you have any questions about this privacy policy, wish to exercise your data protection rights, or have a concern about how we handle your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, at www.ico.org.uk.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. We encourage you to review this policy periodically.