The Privacy Matrix.

At Carter & Co. Advisory, we operate on a foundational principle of absolute discretion. We recognize that for our clients—Sovereign Wealth Funds, Family Offices, and Institutional Capital Managers—privacy is not a preference; it is a structural necessity for the preservation of alpha and the security of global interests.

1. Scope of Intelligence Gathering

We only collect data that is fundamentally necessary to fulfill a specific mandate or to verify the institutional standing of an inquiring party. This includes:

• Identity Verification: Institutional credentials required to satisfy UAE Central Bank and VARA AML/KYC protocols.
• Mandate Briefings: Strategic operational data, capital constraints, and acquisition objectives provided via our secure portal.
• Digital Footprint: Minimal technical metadata (IP address, node location) required to maintain the integrity of our encrypted communication layers.

2. Encryption & Data Custody

Carter & Co. does not utilize third-party consumer cloud storage for client dossiers. Our data custody protocol involves:

• End-to-End Encryption: All briefings transmitted via our portal are encrypted at the source using AES-256 standards.
• Sovereign Hosting: Core mandate data is stored on private, high-security nodes located within the United Arab Emirates jurisdiction.
• Zero-Knowledge Policy: Access to client intelligence is strictly limited to the Managing Partners and the designated Lead Analysts assigned to a mandate.

3. Information Disclosure

The firm does not sell, lease, or syndicate client data to any external marketing entities. Disclosure only occurs under two specific conditions:

A. Mandatory Regulatory Disclosure

Where required by the laws of the DIFC or the United Arab Emirates to comply with anti-fraud or anti-money laundering investigations.

B. Syndicate Execution

Where a client explicitly authorizes the firm to share specific data with non-competing co-investors or legal counsel to finalize an acquisition or syndication.

4. Rights of the Principal

As the controller of your data, you maintain ultimate authority over its lifecycle. Upon the conclusion of a mandate, clients may request the "Total Purge Protocol," wherein all non-statutory dossiers and communications are forensically deleted from our active nodes.

5. Digital Interaction (Cookies)

Our digital interface utilizes essential "Session Cookies" purely for technical stability and to ensure the security of the Secure Terminal. We do not utilize third-party advertising pixels or behavioral tracking scripts.