Privacy notice
Privacy notice
This notice covers The GRC Brief, the free monthly GRC newsletter by Naresh Thalla Mudhiraj, and the email you give to unlock the free downloads.
Last updated 19 October 2026
This site (thallanaresh.com) is a free, personal, non-commercial GRC learning project run by Naresh Thalla Mudhiraj. This notice explains what happens to your details when you sign up for The GRC Brief, whether on the newsletter page or anywhere else on this site, and when you enter your email to unlock the free PDF and CSV downloads.
What I collect
Newsletter signups:
- Your email address (required).
- Your first name and main interest area, only if you choose to give them.
- Your consent to receive the newsletter, and the date you signed up.
Unlocking the free downloads:
- Your email address (required) and first name (optional).
- Which file you clicked, the page you were on, and whether you ticked the box to also receive The GRC Brief.
You only enter your email once: your browser then remembers that downloads are unlocked (a simple flag in your browser's local storage, not your email). Browsing the questions and guides does not require any personal details.
Why I collect it
Newsletter: only to send you The GRC Brief: news on standards, regulations, exam changes, new questions and free resources. Your interest area helps me decide which topics to cover.
Downloads: the email you give to unlock the downloads is used to know who downloads these free resources. You will only receive The GRC Brief if you tick the optional box to opt in; otherwise I will not send you newsletters or marketing emails. I do not use your details for anything else.
Lawful basis
I rely on your consent: for the newsletter, which you give by ticking the box on the signup form (or the optional box on the download form); for downloads, which you give by submitting your email to unlock them. This is the basis used under the EU/UK GDPR and India's Digital Personal Data Protection (DPDP) Act, 2023. You can withdraw your consent at any time, and withdrawing it is as easy as giving it.
Where it is stored
Newsletter signups and download unlock details are stored as form submissions with Netlify (Netlify Forms), the service that hosts this site. When the newsletter starts, your details may be moved to an email newsletter service, used only to send the newsletter. I will update this notice to name that service.
Sharing
I never sell, rent or share your details with anyone for marketing. They are only processed by the service providers named above to run the newsletter.
How long I keep it
Newsletter details: until you unsubscribe or ask me to delete them, or until the newsletter stops, whichever comes first. Download unlock details: until you ask me to delete them, or until I no longer need them to understand who uses the downloads.
Your rights: unsubscribe, access, correction, deletion
Every newsletter will include an unsubscribe link. You can also ask to see, correct or delete your details, or withdraw consent, by messaging me on LinkedIn. I will act on requests promptly.
Changes
If this notice changes, the date above will be updated.