Who we are
Baraka Hall is the public name of the studio. Baraka Hall is operated by Baraka Valley Holdings Ltd. For any privacy question or request, write to hello@barakahall.com.
Information we may collect
- Name
- Email address
- Phone number if you provide it
- Business name and website URL
- Enquiry details and service interest
- Audit request details
- Project details, brief, and scope information
- Files, screenshots, content, product data, or other assets you submit
- Booking or call details
- Marketing preferences
- Technical information such as IP address, browser type, device type, pages visited, and interaction data where applicable
How we use information
- Responding to enquiries and questions
- Preparing audits, proposals, and recommendations
- Delivering the services agreed with you
- Managing client communication and project work
- Improving website performance, clarity, and security
- Sending optional studio updates where you have opted in
- Handling accounting, invoicing, records, and legal obligations
- Protecting the website and business from misuse
Lawful bases
- Pre-contract and contract steps where you ask about or engage our services.
- Legitimate interests for business communication, website improvement, security, and service development.
- Consent where you opt into optional studio updates.
- Legal obligation for accounting, tax, and business records.
Contract is used where the person is the contracting buyer, including a sole trader or other individual entering the business contract. Where an employee or representative acts for a separate business, legitimate interests may support the necessary business-contact, authority, order-administration and service-delivery processing. Consent is used for optional marketing and any optional technology that legally requires it. Legal obligation applies to records that must be retained by law.
Audit, payment and delivery information
When you configure or buy an audit, we may process the website URL, business name, selected goal, package and modules, competitor URLs, instructions, delivery email, buyer and authority confirmations, accepted Terms and Privacy versions, marketing preference, price, currency, Stripe Checkout and payment references, audit status, generated findings, report metadata, delivery events and support messages.
Stripe processes payment-card information. Baraka Hall receives payment status and transaction references but does not receive or store full card details. Resend processes the delivery email and technical delivery events for transactional order and report notifications.
Automated audit production
Build, Complete and Executive reports are produced through Baraka Hall's automated, evidence-led audit system. The system evaluates publicly accessible website information against the modules purchased and uses any optional context you provide to focus the analysis. No human review is included by default.
The audit does not make decisions about employment, credit, insurance, legal rights or access to an essential service. It produces a commercial diagnostic report for the business buyer to assess and use with their own judgement.
Transactional email
We use the delivery email to acknowledge the paid order, provide audit-status and report-ready notifications, handle delivery failures and respond to support requests. These service messages are necessary to perform the audit contract and are separate from optional marketing.
Transactional audit emails do not intentionally use marketing tracking pixels. Optional studio updates are sent only where the relevant marketing permission or other lawful basis applies, and preferences can be changed at any time.
Who we share information with
Where appropriate, we may share information with reputable third-party providers used to run the studio. These providers may have their own security controls and compliance documentation. Categories include:
- Hosting provider
- Managed email provider
- Analytics provider, only if enabled
- Project management tools
- Payment provider
- Accounting provider
- Automation or AI tooling providers where appropriate
- Professional advisers such as legal or accounting
We do not sell or rent personal information. Where any provider processes data outside the UK, appropriate safeguards are used.
Retention
- Enquiry information is retained only as long as useful for business communication and reasonable follow-up.
- Project and client records are retained as needed for delivery, support, legal, tax, accounting, and dispute reasons.
- Marketing preferences are retained until you unsubscribe or ask to be removed.
- Access credentials are not retained longer than necessary unless required for managed support.
- Audit files and shared assets are retained only where needed for active work, support, records, or agreed ongoing care.
Your rights
Under UK data protection law you may request:
- Access to your personal data
- Correction of inaccurate data
- Deletion where applicable
- Restriction of processing
- Objection to processing
- Portability where applicable
- Withdrawal of consent for optional processing
To exercise any right, write to hello@barakahall.com.
International processing
Some infrastructure, payment, email, hosting or automation providers may process information outside the United Kingdom. Where this occurs, Baraka Hall uses the provider's applicable contractual and legal transfer safeguards and limits the information shared to what is needed for the service.
Data-protection questions and complaints
Contact hello@barakahall.com if you have a question, wish to exercise a data-protection right or believe personal information has been mishandled. Baraka Hall will acknowledge a data-protection complaint within 30 days and will investigate and provide an outcome without undue delay. We may ask for information needed to verify identity before disclosing personal information.
You may also complain to the Information Commissioner's Office at ico.org.uk. Contacting Baraka Hall first does not remove that right.
Cookies
See our cookie policy for details of cookies used on this website.
Changes to this policy
This policy may be updated from time to time. The most recent version is always published at this URL.