Privacy Policy & Data Governance

1. Data Controller Identity

The Data Controller responsible for the processing of your personal data on this website is:

References in this policy to "we", "us", or "our" refer exclusively to Abdullah Mamun and the executive office of Abdullah Mamun.

2. Categories of Personal Data Collected

We collect personal data strictly when necessary to facilitate confidential executive dialogue, assess commercial partnerships, or safeguard our digital infrastructure:

• Direct Consultation Brief Data: When you submit an executive brief through our Contact Consultation Desk, we process your full name, corporate email address, subject matter, and strategic briefing parameters.
• Technical Network Telemetry: When you browse this platform, our secure UK servers process basic technical request data, including your Internet Protocol (IP) address (truncated/anonymized), browser user-agent, operating system, and HTTP request timestamps.
• Interface Preference Tokens: First-party local storage parameters (`am-theme`) that store your visual presentation preference (Dark Obsidian or Light Platinum). For further details, see our Cookie Policy.

3. Lawful Basis for Processing (UK GDPR Article 6)

We process your personal data under the following statutory legal bases defined in Article 6 of the UK General Data Protection Regulation:

• Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate commercial interests in evaluating institutional co-investment opportunities, conducting preliminary due diligence on brand distribution partners, defending our server network against automated denial-of-service (DDoS) threats, and administering corporate group governance.
• Consent (Article 6(1)(a)): Provided explicitly when you choose to transmit a confidential brief through our consultation intake form.
• Legal Obligation (Article 6(1)(c)): Where processing or retention is required by applicable laws of England and Wales (e.g. corporate statutory records, anti-money laundering regulations).

4. Use & Non-Disclosure of Personal Data

Your information is processed strictly by authorized personnel within Abdullah Mamun's private desk and Abdullah Mamun corporate administration for:

• Reviewing and responding to executive inquiries and institutional briefing submissions.
• Verifying commercial credentials before entering into confidential discussions.
• Administering contractual agreements relating to proprietary brands, property acquisitions, or trade logistics.

Absolute Invariant: We never sell, rent, monetize, or trade personal data to third-party marketing companies, data brokers, or digital advertising syndicates.

5. International Transfers & Group Governance

Abdullah Mamun commands multi-jurisdictional operations across the United Kingdom, United States (Abdullah Mamun LLC), Hong Kong (AUNEK LTD), and Bangladesh (Fairytales BD).

Where cross-border data transfer between group affiliates is required to review a multi-jurisdictional inquiry, transfers are conducted in accordance with Chapter V of the UK GDPR using UK International Data Transfer Agreements (IDTAs) or approved Standard Contractual Clauses (SCCs), ensuring statutory data protection standards equivalent to UK law.

6. Data Retention & Erasure Schedules

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Executive Consultation Submissions: Retained for up to 24 months from the date of submission for legitimate business record-keeping, unless an ongoing commercial engagement ensues or you request earlier erasure.
• Technical Server Access Logs: Automatically purged on a rolling 30-day schedule.
• Contractual & Financial Documentation: Retained for 6 years in compliance with UK statutory limitation periods under the Limitation Act 1980.

7. Your Statutory Rights Under UK GDPR

Under Articles 15 through 22 of the UK GDPR, you have the following enforceable rights:

• Right of Access (SAR): You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal records.
• Right to Erasure ('Right to be Forgotten'): You may request the deletion of your personal data where there is no overriding legal ground for its continued processing.
• Right to Restriction of Processing: You may request that we suspend processing while a dispute is resolved.
• Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object at any time to processing based on legitimate interests.
• Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing. We do not conduct automated profiling or automated decision-making.

8. Contacting the Data Protection Officer & ICO

To exercise any of your statutory rights or submit a data protection inquiry, please address your correspondence to our private administration:

If you are dissatisfied with our response, you have the statutory right to lodge a complaint with the UK data protection supervisory authority: