Fadhal Ltd respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect your information when you visit fadhal.co.uk or contact us. Please read it carefully.
1. Who We Are
The data controller for this website is:
Fadhal Ltd
Company Number: 15633683
Registered Office: Unit 12, Ilford Business Centre, 316-E Ilford Lane, Ilford, England, IG1 2LT
Email: ta@talhaahmad.com
Website: fadhal.co.uk
Fadhal Ltd is registered with the Information Commissioner's Office (ICO) as a data controller.
If you have any questions about this policy or how we handle your data, please contact us at ta@talhaahmad.com.
2. What Data We Collect
We may collect the following categories of personal data:
- Identity data: your name
- Contact data: email address, telephone number
- Message content: enquiry details you submit via our contact form
- Technical data: IP address, browser type and version, time zone, operating system, and device information, collected automatically when you visit our site
We do not collect financial data, payment card details, or special category personal data (such as health, religion, ethnicity, or political opinions) through this website.
This website is not directed at children under the age of 18 and we do not knowingly collect data from children.
3. How We Collect Your Data
Direct interactions
You may provide us with personal data when you:
- Submit an enquiry via our contact form
- Email or telephone us directly
Automated technologies
When you visit our website, our hosting provider (Cloudflare) automatically collects technical data including your IP address, browser type, and pages visited. This is necessary for the secure and proper operation of the website. Please see Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Third-party services
Our website uses Google Fonts to load typefaces. When your browser loads these fonts, a request is sent to Google's servers, which may process your IP address. Please see Google's privacy policy at policies.google.com/privacy.
4. How We Use Your Data
We use your personal data only where we have a lawful basis to do so under UK GDPR and the Data Protection Act 2018. The table below sets out how and why we use your data:
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to your enquiry or request | Identity, Contact, Message content | Legitimate interests (to respond to business enquiries) |
| Managing a client engagement | Identity, Contact | Performance of a contract |
| Complying with legal obligations | Identity, Contact | Legal obligation |
| Operating and securing our website | Technical data | Legitimate interests (to maintain and secure the website) |
We do not use your data for automated decision-making or profiling. We do not send marketing emails without your explicit consent.
5. Sharing Your Data
We do not sell, rent, or trade your personal data to third parties. We may share your data with:
- Professional advisers: lawyers, accountants, or insurers, where necessary and under obligations of confidentiality
- Regulators and authorities: HMRC, the ICO, or other public bodies, where required by law
- IT service providers: our website hosting provider (Cloudflare), solely to operate and secure the website
All third parties are required to handle your data in accordance with applicable law and our instructions.
6. International Transfers
Our primary data processing takes place in the UK. Cloudflare and Google may process technical data (including IP addresses) on servers located outside the UK. Both are subject to appropriate transfer safeguards recognised under UK data protection law. We do not transfer your personal data (name, email, enquiry content) outside the UK.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Enquiries that do not lead to an engagement: up to 12 months from the date of last contact
- Client engagement records: 6 years from the end of the engagement, in accordance with HMRC requirements and standard limitation periods under the Limitation Act 1980
- Technical/server logs: as determined by Cloudflare's data retention practices (typically up to 30 days)
8. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your data where we no longer have a lawful basis to retain it
- Right to restriction: to request that we limit how we use your data in certain circumstances
- Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract
- Right to object: to object to processing based on legitimate interests
- Right to withdraw consent: where we rely on consent as the lawful basis, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at ta@talhaahmad.com. We will respond within one month. We may need to verify your identity before processing your request.
You will not ordinarily be charged a fee, unless your request is manifestly unfounded or excessive.
9. Complaints
If you are unhappy with how we have handled your personal data, please contact us first at ta@talhaahmad.com so we can seek to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113
10. Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS (encrypted connection). Contact form data is transmitted to us by email and stored securely.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.
11. Links to Third-Party Websites
This website may contain links to external websites. We are not responsible for the privacy practices or content of those sites and encourage you to read their privacy policies before providing any personal data to them.
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in law, our practices, or our services. The date at the top of this page shows when the policy was last updated. We encourage you to review this page periodically.
This policy is governed by the laws of England and Wales.