Here is the exact, complete policy written entirely in plain text using strict UK English spelling and grammar (such as authorised, organisational, prioritise, licence, and programme).
There are absolutely no tables, no markdown code characters like asterisks, no hash symbols, and no web code. You can copy this text exactly as it appears and paste it directly into your Google Site text boxes.
ALMAS RAMLY SERVICES LTD – COMPREHENSIVE PRIVACY, DATA PROTECTION AND GDPR POLICY
Effective Date: 7th October 2026
Company Registration Number: 15666939
Registered Office Address: Flat 46, The River Buildings, 28 Western Road, Leicester, United Kingdom, LE3 0GR
Corporate Data Control Identity: Almas Ramly Services Ltd trading as Almas Ramly Facilities and Property Solutions
Systemic Class: Disclosed Business to Business to Consumer Managed Marketplace Platform and Disclosed Commercial Intermediary Agent
IMPORTANT NOTICE AND STATUTORY MANDATE TO THE CONSUMER
Please read this systemic data protection and privacy policy carefully before initiating any webpage navigation, form submission, quotation request, booking placement, or transactional direct bank transfer funding through the digital platforms, subdomains, secure communications handles, or digital interfaces owned and operated by Almas Ramly Services Ltd.
This document is a binding comprehensive statutory reveal and administrative decree constituting the legal infrastructure by which your privacy, data subject rights, and sensitive property information are recorded, retained, insulated, and systematically disclosed to separate third-party independent contractors in full alignment with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the laws of England and Wales.
By utilised access to the website almasramly.com, the submission of residential or commercial details, or the initiation of a booking flow, you concurrently accord your explicit legal consent, acknowledgement, and submission to the principles of independent data controller architecture, regulatory isolation, assignment transmissions, and retention parameters defined herein. If you object to the processing detailed in this comprehensive enactment, you must cease platform utility instantly.
SECTION 1: GLOBAL SCHEMATIC DEFINITIONS AND THEMATIC FOUNDATIONS
Operational Lexicon
Throughout this Comprehensive Privacy Policy, the following terms shall maintain the precise operational definitions assigned to them below, operating in symmetrical alignment with our backend trade structures:
The Company, The Intermediary, We, Us, Our: Refers directly, exclusively, and comprehensively to Almas Ramly Services Ltd, a private limited corporate entity incorporated and registered under the corporate regulatory authorities of England and Wales under Company Number 15666939, maintaining its primary legal corporate registration office at Flat 46, The River Buildings, 28 Western Road, Leicester, United Kingdom, LE3 0GR.
The Client, The Customer, You, Your: Refers strictly to the natural, individual person acting as a domestic consumer, or the authorised corporate representative of a commercial enterprise, business, institution, or property management trust, who interacts with the Intermediary’s platform to request, secure, schedule, or fund professional facilities management, property maintenance, lifestyle assistance, cleaning, or domestic technical tradesmen services for residential or non-commercial property execution.
Independent Contractor, Service Provider, Service Partner: Refers to the autonomous corporate business entity, trade professional, cleaning agency, or facilities supplier operating on a strict business-to-business contractual basis with the Intermediary, such as Bani Staffing Ltd, Company Number 15775879, or other approved entities on the platform network, tasked with the physical execution, materials management, technical delivery, and customer-site performance of the physical task ordered by the Client.
Personnel, Operatives, Staff: Refers explicitly to any individual employee, registered subcontractor, temporary worker, or designated substitute deployed directly by the Independent Contractor to attend the Client’s home, commercial asset, or designated physical boundary.
The Platform: Refers collectively to the primary web domain almasramly.com, secondary sub-domains, web embedding systems, online quotation capturing tools, digital backend processing software, interactive server interfaces, integrated WhatsApp Business communication flows, corporate email relays, and digital intake channels operated by the Company to capture client interest, compile task metrics, and schedule service provisions.
Service Assignment, Booking, Job Order: Refers to the specific unit of physical property cleaning or facility work coordinated, scheduled, or processed through the Intermediary's platform or communication channels, provided always that the specific date, location, and operational scope of the service has been explicitly accepted and confirmed by the Service Provider.
Data Protection Legislation: Refers collectively to the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 as amended, and all applicable UK regulatory codes issued by the Information Commissioner’s Office.
Independent Data Controller Status: Refers to the statutory classification wherein both the Intermediary and the incoming Service Provider separately, autonomously, and independently determine the purposes and means of processing personal data, acting as distinct legal islands under the UK GDPR, without joint liability or a processor-to-controller relationship.
The 24-Hour Quality Assurance Freeze Window: Refers strictly to the initial chronological twenty-four hour timeline following the immediate clock hour of a Service Assignment's physical conclusion, during which the Intermediary processes data audits, holds transaction details, and retains financial tracking prior to the absolute release or netting of the Provider Baseline Fee.
Designated Collection Account: Refers to the corporate business bank account of Almas Ramly Services Ltd to which all gross payments authorised by the Client are sent via direct bank transfer, serving as the sole authorised collection framework for the platform.
Dual Contractual Matrix and the Tripartite Data Reality
The Client understands, recognises, and contracts on the foundational data processing structural reality that their interaction with almasramly.com involves a dual-layered contractual and data matrix:
First is the Platform Contract Data Stream. The Client enters into a direct contractual relationship with the Intermediary governing the allocation of data, scheduling accuracy, digital consumer support, communications systems, and financial clearing services. The Intermediary acts as an independent data controller for this administrative phase.
Second is the Service Execution Contract Data Stream. The Client enters into a direct, localised service provision contract with the selected Independent Contractor for the physical delivery of the work. The Intermediary is not the physical employer of the tradesmen or cleaners, nor does it act as a direct principal party in the localised manual execution of the physical home task.
Consequently, for the execution phase, the Independent Contractor acts as an entirely separate Data Controller, inheriting full statutory responsibility under the UK GDPR for data safety, personnel access, on-site storage, and regulatory compliance the moment the operational data clears the Intermediary interface.
SECTION 2: STATUTORY IDENTITY, REGULATORY INSULATION, AND CONTACT SCHEMES
The Platform Identity and Mandate
Almas Ramly Services Ltd provides a customer-facing digital booking architecture specifically designed to link homeowners, commercial occupants, and private property tenants with vetted, compliant, independent trade and cleaning professionals. Our explicit operational and data mandate is strictly restricted to:
The curation, aesthetic management, cyber-security verification, and technical availability of the consumer booking engine located at almasramly.com.
The digital validation, identity collection, and administrative vetting tracking of third-party contractors prior to platform integration.
The processing of all financial client transactions, issuance of invoices, and manual verification of direct bank transfer receipts via our Designated Collection Account.
The management of customer support systems, communications relays, and dispute mediation workflows during the active lifecycle of a booking.
Corporate Disclosures and Statutory Contacts
For the purposes of the Data Protection Legislation, Almas Ramly Services Ltd is registered in England and Wales under Company Number 15666939. All personal data processed by the platform is overseen by our designated Data Protection Compliance Officer.
If you wish to execute any of your data subject rights, query our automated communication pipelines, report data inconsistencies, or file a notice of data concern, you must communicate strictly with our central administrative desk using the parameters detailed below:
Full Corporate Entity Name: Almas Ramly Services Ltd
Trading Designation: Almas Ramly Facilities and Property Solutions
Corporate Website: almasramly.com
Dedicated Legal Email Address: [email protected]
Registered Corporate Headquarters: Flat 46, The River Buildings, 28 Western Road, Leicester, United Kingdom, LE3 0GR
Primary Communications Handle: Internal encrypted email server infrastructure and verified platform-embedded communications tools.
Regulatory Authority Escalation
You maintain the absolute statutory right under Section 165 of the Data Protection Act 2018 to file a formal complaint at any time with the primary supervisory authority in the United Kingdom: The Information Commissioner’s Office.
The office can be contacted via written courier to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or via digital interface at website address ico.org.uk.
Almas Ramly Services Ltd pledges to engage in transparent, commercial good faith to resolve any privacy concerns prior to regulatory intervention. We request that you provide our officer a window of ten Working Days to review and audit any reported data issues before escalating to the Information Commissioner’s Office.
SECTION 3: THE COMPREHENSIVE TAXONOMY OF PERSONAL DATA CAPTURED BY THE PLATFORM
We do not engage in the broad, speculative harvesting of consumer information. We restrict our data aggregation processes strictly to the operational metrics required to provide platform management and execute transactions. We collect, utilise, log, encrypt, and transfer the following distinct categories of personal data derived from your actions on almasramly.com:
Identity Data: This comprises the essential tokens required to verify the human or corporate presence executing a request. It includes your first name, middle names, legal family surname, corporate titles, job status markers, and company designations applicable to commercial property procurement managers, estate agents, or property developers. It also includes digital aliases or usernames generated during interactive chat interactions on the platform.
Contact Data: This comprises the structural routing tokens required to communicate, bill, and localise assignments. It includes precise physical residential address properties, building names, flat numbers, block identifiers, verified UK postal codes, specific Greater London Borough designations, regional UK town or city anchors, primary personal or corporate email addresses, primary telephone numbers, secondary landline records, and verified mobile numbers used for WhatsApp Business integration.
Property and Task Data: This comprises the specific, highly localised physical and contextual parameters describing the site environment where the independent contractor must execute manual labour. It includes property size metrics, square footage, room counts, bathroom ratios, architectural configuration details, and specific service requirement profiles such as End of Tenancy cleaning specifications, deep stain removals, or post-construction debris profiles. It also covers property access logs, including key-safe combinations, gate entry codes, concierge instruction arrays, alarm deactivate sequences, physical keys handover protocols, and property context media including high-resolution digital photographs, video walk-throughs, and timestamped images uploaded by the Client to clarify task requirements or log pre-existing property defects. Finally, it records health, safety, and environmental hazard warnings such as structural limits, active water ingress, biological hazards, or structural ceiling conditions.
Transaction and Financial Data: This comprises the non-card economic records processed through our direct funding architecture. It includes bank identification data derived from incoming direct bank transfer text strings, including client account names, clear bank sorting codes, partial account numbers displayed on financial statements, unique transaction payment reference strings created by the client or generated by the platform to verify transfer allocation, consolidated billing histories, system invoice indexes, tax ledger configurations, platform commission markup margins, verified payment receipts, digital transfer screenshots, and communication statements indicating a transaction has cleared.
Technical and Device Tracking Data: This comprises the passive digital footprint captured by our server environments to protect almasramly.com against cyber-attacks, bot inputs, or fraudulent access vectors. It includes Internet Protocol addresses, network routing origins, internet service provider data strings, browser application types, version structures, plug-in configurations, layout engine footprints, full browser fingerprint configurations, operating system versions, device hardware profiles, screen resolutions, language settings, and full Uniform Resource Locator clickstream records showing how you arrived at almasramly.com, your navigation sequence through our service catalogues, your interaction times, and your checkout page duration.
Special Category Data Insulation
Almas Ramly Services Ltd does not actively require or intentionally collect any Special Category Data as defined under Article 9 of the UK GDPR, including biometric identifiers, genetic codes, racial or ethnic origins, political theories, religious beliefs, trade union memberships, or precise health status records. Where a Client inadvertently discloses special category details within free-text input boxes or over WhatsApp chat interfaces, such data is instantly restricted and processed under the sole lawful basis of absolute client consent and explicit task execution necessity.
SECTION 4: THE TECHNICAL PROVENANCE OF DATA COLLECTION METHODOLOGIES
Your personal and property metrics enter our architecture via distinct technical pathways, ensuring total transparent provenance across the platform lifecycle:
Direct Interactions: The overwhelming majority of data we hold is provided directly by you when you perform conscious actions on almasramly.com. These input events include filling out our custom service specification fields or quotation capture systems, transmitting messages, media attachments, and property data files directly to our vetted administrative WhatsApp numbers, uploading images and structural walk-through videos to clarify complex property requirements, interacting with our customer service desks via email to request booking adjustments, log performance issues, or process cancellation notifications, and supplying direct bank transfer verification evidence to accelerate allocation dispatching.
Automated Technologies: When you browse almasramly.com, our server clusters deploy automated technologies to track machine performance and secure digital perimeters. These methods include server log tracking to capture entry times, page responses, and download failure records to maintain platform health, and essential platform cookies which are minimal, functional cookies deployed to maintain your booking cart, secure your form inputs against cross-site scripting attacks, and measure device compatibility.
Third-Party Corporate Exchanges: We may occasionally receive data elements from legitimate business sources, such as financial settlement statements and clearing lists delivered by our authorised corporate banking facilities in the UK to confirm the arrival of direct bank transfer funds, and business-to-business property records shared by verified estate management entities, corporate landlords, or commercial property brokers who have obtained your legal permission to route booking data through our platform.
SECTION 5: THE LEGAL AND SYSTEMIC RATIONALE FOR DATA PROCESSING
Under Article 6 of the UK GDPR, we are legally required to explicitly declare the exact lawful basis supporting every operational deployment of your personal information. We operate strictly under three pillars of legal justification:
Operational Purpose 1: Client Onboarding, Quote Compilation, and System Invoice Issuance. The data categories deployed include Identity Data, Contact Data, and Property and Task Data. The lawful justification is the Performance of a Contract under Article 6(1)(b) of the UK GDPR. Processing is vital to register your profile, compute project values, and supply an invoice detailing direct bank transfer instructions.
Operational Purpose 2: Secure Allocation and Local B2B Contractor Dispatch. The data categories deployed include Identity Data, Contact Data, and Property and Task Data. The lawful justification is the Performance of a Contract under Article 6(1)(b) of the UK GDPR. We must transmit your address, room configuration, and property conditions to the regional contractor to enable them to perform the work under their strict service agreements.
Operational Purpose 3: Bank Transfer Verification and Financial Clearing. The data categories deployed include Financial Data, Transaction Data, and Identity Data. The lawful justification is the Performance of a Contract and Compliance with a Legal Obligation under Article 6(1)(b) and (c) of the UK GDPR. We cross-match bank records with your invoice to verify funding and satisfy UK corporate tax reporting standards.
Operational Purpose 4: The 24-Hour Quality Freeze Audit and Dispute Mediation. The data categories deployed include Identity Data, Contact Data, Property Data, and Transaction Data. The lawful justification is our Legitimate Interests under Article 6(1)(f) of the UK GDPR. Processing is required to protect the platform margin, verify project quality, and mediate disputes before contractor payouts occur.
Operational Purpose 5: Cyber Security Protection, Fraud Prevention, and Platform Integrity. The data categories deployed include Technical Data, Device Tracking Data, and Identity Data. The lawful justification is our Legitimate Interests under Article 6(1)(f) of the UK GDPR. We maintain a legitimate business interest in protecting our infrastructure from cyber-attacks and enforcing our anti-circumvention rules.
Operational Purpose 6: Legal Defence and Regulatory Coordination. The data categories deployed include all categories. The lawful justification is a Legal Obligation and Legitimate Interests under Article 6(1)(c) and (f) of the UK GDPR. We retain and disclose information when required by UK courts, HMRC audits, or the Home Office.
SECTION 6: THE DISCLOSURE SYSTEM AND THE B2B CONTRACTOR MATRIX
Because Almas Ramly Services Ltd operates strictly as a disclosed commercial intermediary and digital platform marketplace, we do not perform manual cleaning or property management ourselves. To achieve physical fulfilment, we must share a limited portion of your personal information with independent third-party contractors. This process is governed by strict safeguards that match our internal operational metrics.
The Tripartite Data Transmission Flow
When you authorise a booking on almasramly.com and clear your direct bank transfer invoice, a specific workflow is triggered. Client data is submitted to the Almas Ramly platform for encryption and validation. A manual transfer via our secure backend is then initiated, routing Identity Data, Contact Data, and Property and Task Data to the independent contractor system.
Contractual Safeguards Enforced on the B2B Network
We protect your data by imposing comprehensive legal obligations on all contractors via our master backend agreements. Every contractor on our platform is bound by the following strict provisions:
Independent Statutory Data Controller Status: Each contractor acts as an independent Data Controller for the execution phase. They assume full, non-delegable civil and statutory liability for the processing, storage, and protection of your personal information once it is transmitted to them.
The Permitted Data Boundary: The contractor is permitted to share only the specific physical site address, scheduled cleaning time, and baseline room specifications strictly with the individual dispatched personnel assigned to execute that specific booking. Core assets, such as platform data layouts, communications logs, pricing spreads, and administrative commission metrics, are completely baby-stepped and withheld from field personnel.
Absolute Prohibition of Marketing and Upselling: Any client contact details or property histories obtained via our platform constitute the exclusive trade secrets of the Intermediary. Contractors are strictly prohibited from utilising your data to distribute independent marketing materials, newsletters, or promotional campaigns, or from soliciting off-platform direct bookings. Any breach triggers a heavy contractual introduction fee debt.
Mandatory Post-Termination Data Destruction: The moment a booking is completed and the 24-hour review window expires, the contractor is under an absolute obligation to immediately purge, delete, and permanently erase all your personal data from all mobile devices, physical notebooks, and local storage configurations.
On-Site Identification and Verification Protocols: To ensure your security on-site, our framework mandates that all dispatched personnel visibly display a standardised, professional, lanyard-style security identification badge at all times while on your premises. To minimise data leakage, these badges are restricted to displaying the worker's first name, job title, a passport-style photo, and the contractor's corporate logo, with zero direct telephone numbers, website URLs, or QR codes permitted.
Disclosures to Professional Processors and Public Bodies
We may share data elements with select entities operating under strict confidentiality rules, including cloud accounting providers to generate invoices, encrypted UK hosting providers and email infrastructure networks that maintain our servers, and UK regulatory authorities, such as HMRC, the Home Office, or law enforcement bodies, where we are legally required to do so under the laws of England and Wales.
SECTION 7: TRANS-BORDER DATA EMBARGOES AND SUPPLY CHAIN ISOLATION
Absolute UK and EEA Territorial Embargo
Almas Ramly Services Ltd treats consumer privacy as a localised sovereign right. We maintain an absolute policy of territorial restriction regarding data residency:
All Client identity, contact, transaction, and property records are hosted exclusively on highly secure, encrypted server arrays located within the physical boundaries of the United Kingdom or the European Economic Area.
We do not transfer, route, or mirror your personal information to third-party data processing facilities outside the protection of the UK GDPR, unless explicitly required by you for a cross-border commercial engagement.
The Ethical Sanctions Framework and Geopolitical Supply Chain Isolation
In strict alignment with the risk management policies defined in our backend trade network, we enforce strict geopolitical and ethical limits on our data systems and supply chains to protect our brand and ensure compliance:
Regarding UK Sanctions Enforcement, we maintain an absolute zero-tolerance stance toward any entity, service provider, or individual listed on the consolidated UK Sanctions List managed by the Office of Financial Sanctions Implementation. No data, payments, or transaction pathways will ever interact with sanctioned bodies.
Regarding our Geopolitical Supply Chain Embargo, it is an absolute condition of our platform ecosystem that all network entities maintain zero corporate, financial, operational, or trade ties with the State of Israel or its allied economic and military supply frameworks.
Regarding Software and Hosting Exclusions, we certify that almasramly.com does not utilise, embed, or host any software systems, analytical scripts, API widgets, or database architectures developed in, hosted within, or sourcing capital from the State of Israel.
If a contractor is found to be operating from or maintaining commercial links with these prohibited sectors, their platform access is instantly terminated without notice, and all client records are immediately pulled back to protect our data ecosystem.
SECTION 8: RIGOROUS DATA RETENTION SYSTEMS AND ACCELERATED LIFECYCLES
We reject the practices of indefinite data hoarding. We retain your personal information only for the minimum duration required to satisfy legal obligations, complete transactions, or defend against liability.
Unconverted Leads and Web Quotations: If you submit a request for a quote or fill out an enquiry form on almasramly.com but do not clear a direct bank transfer invoice, that transaction is classified as unconverted. All identity, contact, and property data associated with the request is automatically purged from our active databases within ninety calendar days.
Fulfilled Transactional and Ledger Records: Where a booking is completed, we are legally required under the Taxes Management Act 1970 and HMRC regulations to maintain accurate accounting files. The associated Identity Data, Contact Data, and Transaction Data are retained within our encrypted ledger architecture for six full financial years following the date of the transaction. Access to these archive blocks is restricted to our core financial officers.
Property Access and Security Data Isolation: To ensure your security, property access codes, key safe combinations, and concierge entry files are treated with the highest sensitivity. These metrics are completely removed from all active communications channels within forty-eight hours following the expiration of the 24-hour Quality Assurance Freeze Window.
Definitive Anonymisation Protocols: Where retention terms expire and no active dispute exists, data blocks are either permanently destroyed using secure overwriting methods or permanently anonymised. The resulting scrubbed datasets retain no individual identifiers and are used strictly for internal tracking and calculating platform volume metrics.
SECTION 9: THE 24-HOUR INSPECTION WINDOW AND CRITICAL POST-DISBURSEMENT LIABILITY DISCLOSURE SHIFTS
The structure of our privacy architecture changes based on the timeline of your booking, moving through a strict transition point upon the expiration of the 24-hour Quality Assurance Freeze Window.
The Active Tracking Phase
From the moment you submit a booking request until exactly twenty-four hours after the physical work concludes, the Intermediary acts as your primary point of contact. We monitor performance logs, handle communication updates, and retain your transaction data inside our active dashboard to mediate any quality disputes or missed-task claims.
The Post-Disbursement Phase and Automatic Liability Shift
Pursuant to the commercial framework governing our backend network, once the 24-hour window expires without dispute, the Intermediary's administrative role is fully concluded and legally discharged. The baseline payment is released to the independent contractor, finalising the transaction.
If you uncover latent property defects, hidden structural damage, or theft after this 24-hour window has closed, the Intermediary carries zero financial or legal liability. To facilitate resolution, our role shifts automatically to a disclosure framework:
We will instantly supply you with the contractor's full corporate credentials, including their registered office address, companies house registration number, and verified public liability insurance records.
You and the contractor must handle all subsequent insurance claims, disputes, or legal actions directly between yourselves, completely bypassing our digital platform. We will retain all relevant historical transaction logs to support any authorised court or police investigations.
SECTION 10: MANDATORY SECURITY PROTOCOLS AND DIRECT BANK TRANSFER SHIELD
Technical Safeguards and the Direct Bank Transfer Shield
We implement robust technical and organisational measures to secure your personal data, including secure socket layer encryption protocols governing all entry paths into almasramly.com, and strict access limits that restrict your data to employees and contractors who have a clear operational need to know.
Importantly, we operate under the Direct Bank Transfer Shield. Because our business model relies exclusively on manual direct bank transfers rather than automated card gateways, our website does not collect, store, or process credit card numbers or sensitive CVV codes. This design choice completely insulates you from online database scraping attacks and card fraud risks.
Independent Regulatory Insulation for Data Breaches
In full compliance with our backend network rules, we enforce strict data isolation protocols to protect our users and limit liability:
Regarding the 12-Hour Urgent Notice Mandate, if a contractor experiences a security failure, data leak, or unauthorised access involving your information after transmission, they are contractually bound to notify our officer within twelve hours. They must provide a detailed report specifying the scope of the incident and their mitigation strategy.
Regarding Direct Reporting to the ICO, the contractor assumes sole statutory liability for the incident as an independent Data Controller. They are legally required to report the breach directly to the Information Commissioner's Office under their own unique registration identifier within seventy-two hours, and must supply a copy of this submission to our administrative desk.
The contractor holds the Intermediary fully indemnified against any administrative fines, legal defence fees, or third-party distress claims arising from data security failures within their network or personnel teams. Clients are thus assured that the entity responsible for local execution remains directly accountable before UK regulators for any data privacy failures on-site.
SECTION 11: EXHAUSTIVE SPECIFICATION OF CONCURRENT DATA SUBJECT RIGHTS
Under the UK GDPR and the Data Protection Act 2018, you maintain clear statutory rights regarding the processing of your personal information. You can exercise these rights at any time by contacting us at [email protected].
The Right to Access: You have the right to request a complete copy of all personal information, property logs, communication records, and billing files we hold regarding your profile. We will fulfil these requests free of charge within one calendar month, pursuant to Article 12 of the UK GDPR. If your request is found to be clearly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or refuse compliance.
The Right to Rectification: If you find that your name, address, contact numbers, or property layout metrics are inaccurate or incomplete, you have the right to demand their instant correction. We will update our active databases and notify the matched contractor within forty-eight hours of verification.
The Right to Erasure: You have the right to demand the permanent deletion of your personal data from our systems where the data is no longer required for the purposes for which it was originally collected, you withdraw your consent for processing and no alternative legal basis applies, or you object to processing based on legitimate interests and no overriding business grounds exist. Note that we cannot erase transaction ledgers or billing records that are required to satisfy our six-year corporate tax obligations under UK law.
The Right to Restrict Processing: You have the right to request that we freeze all active processing of your data while keeping it stored, under the scenarios where you contest the accuracy of the information, during the window where we audit the metrics, the processing is found to be unlawful but you oppose erasure and request restriction instead, or we no longer require the data for operational purposes but you need it to establish, exercise, or defend legal claims.
The Right to Data Portability: You have the right to request a clean transfer of your property metrics, transaction histories, and profile information in a structured, machine-readable format such as a standard CSV or Excel file. This file can be delivered directly to you or exported to an alternative platform provider of your choice.
Protocol for Identity Verification: To protect user privacy and prevent data theft, we will never fulfil a data subject request without validating the source. When a request is filed, you must provide verification evidence, such as a passport scan, a recent utility bill confirming your service address, or clear confirmation from the email address linked to your original booking.
SECTION 12: STATUTORY COOKIE TRACKING FRAMEWORKS AND INTEGRATED TELEMETRY
To provide a functional and reliable experience on almasramly.com, we utilise a clean, minimal cookie framework that complies with the Privacy and Electronic Communications Regulations.
Classification of Deployed Cookies
Session Cookies: These are transient tracking elements that exist only while your browser tab remains open. They are vital to secure form submissions against Cross-Site Request Forgery attacks, maintain your service selections during checkout, and manage session handshakes with our servers. These cookies do not require consumer opt-in and cannot be deactivated.
Analytics and Performance Trackers: We use minimal, privacy-focused analytical cookies to monitor server performance, measure page loading speeds, and verify configuration settings across different devices. These metrics are processed collectively, ensuring your individual identity remains hidden.
Manual Control and Browser Settings
You can choose to block, reject, or erase cookies at any time through your browser's security settings. Deactivating essential session cookies may cause layout issues or disrupt the form submission process on almasramly.com.
SECTION 13: PROCEDURES FOR DYNAMIC AMENDMENTS AND STRUCTURAL REVISIONS
Administrative Update Rights
Almas Ramly Services Ltd reserves the right to modify, adjust, update, or rewrite portions of this Privacy Policy at any time to reflect changes in UK legislation, adjustments in data workflows, or updates to our backend network rules.
Notification Protocols for Structural Shifts
When structural updates occur, we will post the updated document directly on almasramly.com and change the effective date at the top of the policy. Where modifications materially alter how we handle your personal data, we will send a notification directly to your registered email address or post a prominent banner notice on our homepage at least five Working Days before the changes take effect. We encourage you to check this page regularly to stay informed about how we protect your personal and property information.
SECTION 14: STATUTORY CONCLUSION AND ACCORDANCE DECLARATION
This Privacy, Data Protection, and GDPR Policy constitutes the definitive, complete, and legally binding statement of Almas Ramly Services Ltd regarding its consumer data operations on almasramly.com.
No verbal assertions, customer service statements, or informal text messages shall have the authority to alter or override the structured disclaimers, independent data controller divisions, liability shifts, or retention parameters established within this policy.
For further clarification regarding any section of this policy, please contact our Data Protection Compliance Officer at [email protected].