Privacy Notice and Data Governance Framework

This Privacy Notice sets forth the comprehensive protocols governing the acquisition, processing, retention, and dissemination of personal data by Brookfield Trading Limited. We are steadfastly committed to safeguarding the fundamental privacy rights and digital assets of all individuals interacting with our service landing pages. In strict accordance with prevailing regulatory frameworks, including the UK GDPR and the Data Protection Act, this instrument delineates our operational transparency, accountability mechanisms, and your statutory entitlements. Please review this governance framework meticulously to understand our rigorous commitment to information privacy.

Data Categories and Collection Methodologies

Brookfield Trading Limited acquires personal data through transparent, explicit, and lawful means directly from the data subject during service engagement processes. The specific categories of information collected to facilitate, execute, and optimize our professional service offerings comprise:

• Identifiers: Full legal name, preferred salutation, and corporate or residential affiliation details.
• Communication Coordinates: Verified electronic mail addresses via [email protected] and direct telephone routing numbers via 44 118 959 3219.
• Location and Log Data: Geographic territory indicators, IP addresses, browser specifications, and digital interaction timestamps gathered during landing page navigation.
• Transaction Particulars: Service selection metrics, billing preferences, and historical inquiry logs tied to our commercial deliverables.

Operational Purposes and Legal Bases for Processing

The collection and subsequent handling of your personal data are strictly bound to explicit operational necessities. Brookfield Trading Limited processes personal information exclusively under recognized lawful bases, aligning our commercial objectives with regulatory mandates:

• Performance of a Contract: Processing is strictly necessary to deliver requested services, manage user accounts, and fulfill pre-contractual steps initiated by the data subject.
• Legitimate Interests: Enhancing our landing page performance, conducting internal market analysis, securing our digital perimeter, and optimizing service delivery, provided such interests do not override fundamental data subject rights.
• Legal Compliance: Adhering to statutory reporting obligations, financial auditing requirements, and responding to lawful directives from competent judicial authorities.
• Explicit Consent: Where mandatory, we process specific data categories based on the unambiguous, freely given, and revocable consent of the user, particularly concerning direct marketing communications.

Information Retention Periods and Archival Policies

Personal data processed by Brookfield Trading Limited is retained solely for the duration necessary to fulfill the operational purposes for which it was originally collected, or to satisfy legal, accounting, and regulatory compliance obligations. Our retention schedule is structured as follows:

• Active service inquiry data is maintained for a maximum of twenty-four months following the cessation of direct communication.
• Transactional and contractual records are archived securely for a mandatory period of six years to satisfy corporate governance and tax legislation.
• Technical log files and analytics identifiers are pseudonymized or permanently purged within twelve months of acquisition.
• Data held under explicit consent is retained until the data subject withdraws such consent or explicitly requests erasure.

Third-Party Disclosures and Data Transfers

Brookfield Trading Limited maintains a strict policy against the unauthorized commercial monetization, sale, or unvetted trade of personal information. However, to execute our professional services efficiently, data may be disclosed to carefully vetted third-party categories under strict confidentiality obligations:

• Authorized Sub-processors: Cloud storage providers, customer relationship management platforms, and IT infrastructure maintainers acting strictly on our documented instructions.
• Professional Advisors: Legal counsel, certified public accountants, and regulatory compliance auditors bound by professional secrecy duties.
• Law Enforcement Agencies: Statutory bodies, courts, or governmental regulators when mandated by applicable law or formal legal process.

Where personal data is transferred outside the domestic jurisdiction, we implement robust safeguards, including Standard Contractual Clauses and adequacy assessments, ensuring an equivalent level of data protection.

Data Security Architecture

Protecting the confidentiality, integrity, and availability of your personal information is of paramount importance to Brookfield Trading Limited. We deploy state-of-the-art technical and organizational security measures designed to mitigate risks of accidental loss, unauthorized access, destruction, alteration, or unlawful disclosure. Our protective infrastructure encompasses end-to-end encryption protocols during data transit, multi-factor authentication for administrative access, role-based access controls, and regular vulnerability assessments of our digital environment. Physical records are secured within our primary facility located at 33 Castle Street, Woodley, Reading, England, accessible exclusively by authorized personnel.

Data Subject Rights and Regulatory Recourse

Under applicable data protection statutes, users retain comprehensive control over their personal information. Brookfield Trading Limited facilitates the unhindered exercise of your statutory rights, which comprise:

• Right of Access: The prerogative to request confirmation regarding whether we process your data and obtain a comprehensive copy of such records.
• Right of Rectification: The ability to demand immediate correction of inaccurate, incomplete, or outdated personal data.
• Right of Erasure: The entitlement to request the deletion of personal information where it is no longer necessary for the purposes collected, or where consent is withdrawn.
• Right to Restrict Processing: The option to limit the operational use of your data under specific contested circumstances.
• Right to Data Portability: The capacity to receive your provided data in a structured, commonly used, and machine-readable format for transmission to another controller.
• Right to Object: The unqualified right to challenge processing based on legitimate interests or direct marketing profiling.

To exercise any of the aforementioned rights, or to raise inquiries regarding our data governance practices, formal requests must be directed to our designated data protection channels at [email protected] or in writing to 33 Castle Street, Woodley, Reading, England. Furthermore, users retain the absolute right to lodge a formal complaint with the relevant national supervisory authority if they believe our processing practices violate statutory mandates. This policy is subject to periodic review and was last updated on 05/10/2026.