Data Protection

Baraka Hall handles client information carefully and proportionately. This page explains the principles that apply across audits, builds, and managed engagements.

Least collection

We collect only what is needed for enquiry, audit, proposal, delivery, support, and the specific project work agreed. We do not ask for information that is not relevant to the engagement.

Access control

• Access to client systems is requested only where needed for the work.
• Access is limited to the systems required for that project.
• Where possible, access is removed or reviewed after handover.
• Credentials should not be shared in unprotected channels.

Client files and data

Files, screenshots, credentials, content, product data, customer data, and workflow details are handled according to the engagement. Sensitive materials are stored only in systems appropriate for the work and are removed or archived when no longer needed.

Public case studies and proof

• Client data is not used in public case studies without permission or appropriate anonymisation.
• Metrics and results are not invented.
• Examples are clearly labelled as illustrative, internal, or anonymised where relevant.

Trusted providers

Where appropriate, Baraka Hall may use reputable third-party providers for hosting, email, forms, payments, analytics, project operations, automation, AI-assisted workflow support, and infrastructure. These providers may have their own security controls, contractual protections, and compliance documentation. The relevant responsibilities depend on the chosen operating model and written engagement.

Different operating models

Data handling depends on the operating model agreed:

• Audit-only. Baraka Hall reviews the systems in scope and delivers findings and recommendations.
• Build-and-handover. Baraka Hall builds and hands over the agreed assets or systems to the client.
• Managed care. Baraka Hall continues to maintain or improve agreed parts of the system.
• Operated system. Baraka Hall may operate parts of the system for the client.
• Client-operated system. The client operates the system after handover.
• Managed licence, lease-to-own, or ownership transfer. Rights and responsibilities are set out in the written agreement.

Larger engagements

Larger or more sensitive projects may include additional contractual terms, access rules, documentation, and handover requirements. These are agreed in writing before work begins.

Contact

For any data protection question, write to hello@barakahall.com.

Baraka Hall is operated by Baraka Valley Holdings Ltd. Contact: hello@barakahall.com.