Audit-delivery providers
Baraka Hall uses contracted providers for payment processing, hosting, private storage, transactional email and the controlled audit worker. Each provider receives only the information needed for its role. Access to private reports and operational systems is restricted and reviewed. Provider certifications apply to the provider and covered service, not automatically to Baraka Hall.
Least collection
We collect only what is needed for enquiry, audit, proposal, delivery, support, and the specific project work agreed. We do not ask for information that is not relevant to the engagement.
Access control
- Access to client systems is requested only where needed for the work.
- Access is limited to the systems required for that project.
- Where possible, access is removed or reviewed after handover.
- Credentials should not be shared in unprotected channels.
Client files and data
Files, screenshots, credentials, content, product data, customer data, and workflow details are handled according to the engagement. Sensitive materials are stored only in systems appropriate for the work and are removed or archived when no longer needed.
Public case studies and proof
- Client data is not used in public case studies without permission or appropriate anonymisation.
- Metrics and results are not invented.
- Examples are clearly labelled as illustrative, internal, or anonymised where relevant.
Trusted providers
Where appropriate, Baraka Hall may use reputable third-party providers for hosting, email, forms, payments, analytics, project operations, automation, AI-assisted workflow support, and infrastructure. These providers may have their own security controls, contractual protections, and compliance documentation. The relevant responsibilities depend on the chosen operating model and written engagement.
Different operating models
Data handling depends on the operating model agreed:
- Audit-only. Baraka Hall reviews the systems in scope and delivers findings and recommendations.
- Build-and-handover. Baraka Hall builds and hands over the agreed assets or systems to the client.
- Managed care. Baraka Hall continues to maintain or improve agreed parts of the system.
- Operated system. Baraka Hall may operate parts of the system for the client.
- Client-operated system. The client operates the system after handover.
- Managed licence, lease-to-own, or ownership transfer. Rights and responsibilities are set out in the written agreement.
Larger engagements
Larger or more sensitive projects may include additional contractual terms, access rules, documentation, and handover requirements. These are agreed in writing before work begins.
Contact
For any data protection question, write to hello@barakahall.com.
Related pages