Privacy Policy

You are viewing our International legal terms (for the United States and other jurisdictions outside the UK, EU/EEA, Switzerland, the Crown Dependencies, and Gibraltar). If you are in the UK, EU/EEA, Switzerland, the Crown Dependencies, or Gibraltar, view our UK and European version.

Last updated: 22 October 2026

1. Who We Are

Bretalon Ltd (“Bretalon”, “we”, “us”, or “our”) is a strategic research and advisory company registered in England and Wales (company number 16253606), with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom (see our Legal Notice). We are the data controller responsible for personal information collected through bretalon.com and our advisory business.

Privacy contact: [email protected]

2. Information We Collect

Ordinary Website Visitors (No Cookies or Tracking): You can read our reports and pages without creating an account or providing personal information:

No visitor cookies or local storage: We set no cookies and store nothing in browser local storage for ordinary visitors (cookies are set only for our own staff and contractors who sign in to WordPress administration or open internal design preview links; see our Cookie Notice).
No analytics, ads, or third-party trackers: We do not use analytics tools, advertising networks, or tracking pixels. Fonts and the news ticker are served directly from bretalon.com, so your browser does not contact third-party servers when loading our pages.
Do Not Track and Global Privacy Control: Because we do not track visitors across third-party websites or set tracking cookies, we treat all visitors as untrackable regardless of browser “Do Not Track” or Global Privacy Control signals.
Server and network logs: When you request a page, our hosting and network providers automatically log standard technical metadata (IP address, browser type, operating system, requested page, and timestamp) to deliver the site and protect it against abuse.

Inquiries, Advisory Clients, and Published Research: When you contact us through our website contact form, email us, or engage our advisory services, or when we prepare published research, we process the following information:

Contact and inquiry details: Your name, email address, organization, job title, chosen topic, and message.
Engagement and billing records: Project scoping details, business correspondence, meeting notes, contract records, billing address, and payment details for advisory clients.
Individuals mentioned in published research: Our reports and research briefs reference publicly available information (such as official records, regulatory filings, and news reporting) about public figures, corporate officers, and other individuals relevant to geopolitical, economic, and corporate analysis.

Providing contact information is voluntary when you submit a general inquiry, and is necessary to enter into and perform a contract if you engage our advisory services; if you do not provide it, we cannot respond to your inquiry or provide advisory services.

3. How We Use Personal Information

We use personal information only for the following business and legal purposes:

Operating and securing our website: Using technical log data to deliver pages and protect our systems (our legitimate interest in website security and availability).
Responding to inquiries: Replying to messages you send us (our legitimate interest in communicating with readers and addressing questions or corrections, or taking pre-contractual steps at your request when you inquire about our advisory services).
Providing advisory services: Scoping, performing, and administering client engagements and invoices (performing our contract with a client and our legitimate interest in managing business client relationships).
Publishing research and commentary: Analyzing and citing publicly available information about public figures, executives, and other individuals in our reports and research briefs (our legitimate interest in research, commentary, and publishing).
Legal compliance, professional advice, and business operations: Maintaining accounting and tax records, complying with legal obligations, obtaining legal or accounting advice, defending legal claims, and managing any business restructuring or transfer (compliance with legal obligations and our legitimate interests in operating our business and protecting our legal rights).

We do not sell personal information, do not share personal information for cross-context behavioral advertising, do not send unsolicited marketing emails, and do not engage in automated decision-making or profiling.

4. How We Share Information and International Processing

We share personal information only as follows:

Technology provider: PureTensor (PureTensor Ltd in the United Kingdom and PureTensor, Inc. in the United States) hosts this website and operates, on our behalf as our technology service provider, the Google Workspace inbox that receives contact form messages and emails sent to [email protected].
Infrastructure and communication providers: Amazon Web Services (website hosting in London), Cloudflare (network delivery and security), and Google Workspace (email hosting for [email protected] and our team inbox), each of whose customer agreements incorporates standard data processing terms, as well as FormSubmit (formsubmit.co, a US service used to relay website contact form messages by email).
Professional advisers and authorities: Our lawyers, accountants, and auditors under confidentiality obligations, or courts, regulators, and law enforcement when required by law.
Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected individuals.

Our website servers are located in London, United Kingdom, while several of our providers (PureTensor, Inc., FormSubmit, Google, and Cloudflare) process data in the United States. Where personal data is transferred from the United Kingdom to the United States, we rely on the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) for certified recipients, the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses where included in a provider’s terms, and, for inquiries you choose to submit, the necessity of processing at your request to take pre-contractual steps (UK GDPR Article 49(1)(b)). You may contact us at [email protected] for details or a copy of the applicable transfer safeguards.

5. Data Retention

Under our data retention policy, we keep personal information for the following periods:

Server and network logs: Target retention of up to 90 days for security monitoring (subject to the log retention settings of our hosting and network providers).
Contact form inquiries and direct emails to [email protected]: Website database copies of contact form submissions are automatically deleted 730 days (2 years) after receipt. Under our retention policy, direct email inquiries to [email protected] and relayed inquiry copies in our team inbox are retained for up to 2 years from last contact if no client relationship follows, subject to periodic mailbox review and any separate retention by third-party relay services.
Client communications: Target retention for the duration of the engagement plus 2 years.
Client contracts, invoices, and payment records: Duration of the engagement plus 6 years for tax, accounting, and legal limitation purposes.

6. Your Privacy Rights and Choices

Regardless of where you reside, you may contact us at any time to request access to the personal information we hold about you, ask us to correct inaccurate information, request deletion or restriction of your information, request a portable copy, or object to our processing (see Privacy Requests).

To make a request or raise a privacy complaint, email [email protected], use our contact form, or write to Bretalon Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We respond to requests free of charge within one calendar month (and may extend by up to two additional months for complex requests, with notice), and we acknowledge privacy complaints within 30 days. Because Bretalon Ltd is a UK company subject to UK data protection law, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

7. Security and Children’s Privacy

We use encrypted connections (TLS), access controls, and secure hosting to protect personal information, though no internet transmission can be guaranteed 100% secure.

Our website and advisory services are directed at business and professional audiences, not individuals under 18 (or children under 13 under the US Children’s Online Privacy Protection Act). We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time and will post the revised date at the top of this page.