Privacy Policy
The short version
- We collect only what we need: what you enter in our forms, and basic analytics about how the site is used.
- We ask for your consent, and you can withdraw it any time, as easily as you gave it.
- We don't sell your data.
- You can ask to see, correct, or delete your data by emailing hello@thebrandos.io.
This summary is for quick reference. The full policy below is what applies.
BrandOS ("BrandOS", "we", "us", or "our") runs the website thebrandos.io. This policy explains what personal information we collect when you visit or use our site, why we collect it, and what rights you have over it. We've written it to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, as well as the EU/UK General Data Protection Regulation (GDPR), so it applies whether you're in India or elsewhere.
By using our site, you agree to the practices described here. If you don't agree, please don't use the site.
1. Who we are
BrandOS is a brand of Sohail's Influence Engine, a sole proprietorship owned by Mohammad Sohail Alam, based in Jamshedpur, Jharkhand, India. We are the data controller, or "data fiduciary" under the DPDP Act, responsible for your personal data.
- Operator: Sohail's Influence Engine (sole proprietorship), trading as BrandOS
- Udyam Registration: UDYAM-JH-06-0088067
- Location: Jamshedpur, Jharkhand, India
- Contact email: hello@thebrandos.io
2. Grievance and data protection contact
If you have any question, request, or complaint about your personal data, you can reach our grievance contact:
Grievance Officer: Mohammad Sohail Alam
Email: hello@thebrandos.io
Phone (optional): [add a business phone number if you want one listed]
We'll acknowledge your request promptly and respond within the timelines the law sets, which under the DPDP Rules is within 90 days for grievances. If you're not satisfied with how we handle it, you can escalate to the Data Protection Board of India, or, if you're in the EU or UK, to your local supervisory authority.
3. What information we collect
We only collect what we need to run the site and respond to you.
Information you give us directly
- When you fill in our contact or lead form: your name, email address, and anything you choose to write in your message.
- When you sign up for our newsletter: your name and email address.
Information collected automatically
- Basic technical data through analytics tools, such as your approximate location, device type, browser, the pages you view, and how you arrived at our site. This is usually aggregated and doesn't identify you by name.
- Cookies and similar technologies. See our Cookie Policy for the full breakdown.
We don't knowingly collect sensitive personal data through the site, and we don't process children's data without verifiable parental consent, as the DPDP Act and Rules require.
4. Why we use your data and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Reply to your enquiries | To answer your questions and discuss our services | Your consent / to take steps at your request |
| Send newsletters | To share updates and content you signed up for | Your consent |
| Run site analytics | To understand what's useful and improve the site | Your consent for non-essential cookies / our legitimate interest |
| Keep the site secure | To prevent fraud and misuse | Our legitimate interest / legal obligation |
Under the DPDP Act, our main ground is your consent, which you give freely when you submit a form or opt in.
5. Consent and how to withdraw it
Where we rely on your consent, you can withdraw it at any time, and we've made that as easy as giving it. To withdraw:
- Click "unsubscribe" in any newsletter email to stop marketing messages.
- Adjust your choices through our cookie settings for analytics and marketing cookies.
- Email hello@thebrandos.io to withdraw consent for anything else.
Withdrawing consent won't affect anything we did lawfully before you withdrew it, and it may mean we can no longer provide parts of the service that depend on that data.
6. How we share your data
We don't sell your personal data. We share it only with:
- Service providers who help us run the site, such as our hosting provider, email platform, and analytics tool. They act on our instructions and are bound to keep your data secure.
- Authorities, if the law requires it or to protect our legal rights.
7. International data transfers
Some of our service providers may store or process data outside India or the EU. Where that happens, we take reasonable steps to make sure your data stays protected to the standard this policy sets out, and we comply with any restrictions the Central Government notifies on transfers to specific countries under the DPDP Rules.
8. How long we keep it
We keep your data only as long as we need it:
- Contact form messages: up to [24] months after our last exchange, unless you ask us to delete them sooner.
- Newsletter data: until you unsubscribe.
- Analytics data: as per our analytics provider's retention settings, typically [14] months.
We also keep records of consent and of any data requests for as long as the law requires. After a retention period ends, we delete or anonymise the data.
9. How we protect your data
We use reasonable technical and organisational measures to keep your data safe, including secure hosting, encrypted connections (HTTPS), and limited access. No method of transmission over the internet is completely secure, so we can't promise absolute security. If a breach affects your personal data, we'll notify you and the Data Protection Board of India in line with the timelines the DPDP Rules set, including a detailed report to the Board within 72 hours.
10. Your rights
You have the right to:
- Ask what data we hold about you and get a copy of it
- Correct data that's wrong, out of date, or incomplete
- Ask us to delete your data
- Withdraw your consent at any time
- Nominate someone to exercise these rights on your behalf if you can't, or in the event of death or incapacity (a right specific to the DPDP Act)
- Raise a grievance with us and, if needed, complain to a data protection authority
If you're in the EU or UK, you also have the right to restrict or object to certain processing and to data portability.
To exercise any of these, email hello@thebrandos.io. There's no charge, and we'll respond within the timeframe the law sets.
11. Children's data
Our site and services are meant for adults and aren't directed at children under 18. We don't knowingly collect their data without verifiable parental consent. If you believe a child has given us data, email hello@thebrandos.io and we'll remove it.
12. Third-party links
Our site may link to other websites. We're not responsible for their privacy practices, so do check their policies before sharing anything with them.
13. Changes to this policy
We may update this policy as our site or the law changes. When we do, we'll update the date at the top. Significant changes will be flagged on the site.
14. Contact us
Questions about this policy or your data? Email hello@thebrandos.io and we'll get back to you.
