Who We Are
Istibqa Ltd
Registered in England and Wales · Company No. 17089113
27 West Park Terrace, Bradford, BD8 9SQ, United Kingdom
Tel: +44 7760 979458
Email: [email protected] · [email protected]
For all data protection enquiries or to exercise your rights, contact us at the address above. We aim to respond within 30 calendar days.
Data We Collect & Why
Website visitors:
- IP address, browser type, and pages visited (via anonymised, cookieless analytics)
- Referral source and session duration
- Cookie preferences (stored locally)
Enquiry form submitters (index.html contact form):
- Full name and organisation
- Email address
- Enquiry type and message content
Commercial partners & affiliates:
- Name, job title, and company
- Email address and phone number
- Contract and payment details for partnership agreements
- Referral activity and commission records
Data we do NOT collect: We do not collect payment card details directly (handled by secure third-party processors). We do not collect special category data (health, biometric, etc.) unless explicitly agreed in a separate data processing arrangement.
Why We Process Your Data
| Purpose | Lawful Basis | Retention |
|---|---|---|
| Responding to enquiries submitted via the contact form | Legitimate interests | 2 years from last contact |
| Managing commercial partnership agreements | Contract performance | Duration of agreement + 6 years |
| Processing affiliate commissions and payouts | Contract performance | 7 years (statutory accounting) |
| Website analytics (anonymised, aggregated) | Legitimate interests | 12 months rolling |
| Security monitoring and fraud prevention | Legitimate interests | 12 months |
| Compliance with legal obligations | Legal obligation | As required by law |
Who We Share Data With
We share data only with the following sub-processors, each under appropriate data processing agreements:
- Formspree Inc (USA) — contact form submission handling. Data transmitted over HTTPS and retained per Formspree's data retention policy.
- Cloudflare Inc (USA) — CDN, DDoS protection, and DNS. Processes IP addresses and request metadata. SCCs in place.
- Google LLC (USA) — Google Fonts (font delivery). No personal data transmitted beyond standard HTTP headers.
- Stripe Inc (USA, where applicable) — payment processing for partner agreements. PCI-DSS Level 1 certified.
We do not sell personal data to third parties. We do not use personal data for advertising or profiling.
Our products (Tadhkir, Invux AI) operate as separate entities with their own privacy policies and data processing arrangements.
Cross-Border Transfers
Some of our sub-processors operate outside the UK and EEA. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the UK ICO or the European Commission
- Adequacy decisions where applicable
- Binding Corporate Rules where relevant
We will not transfer personal data to any country without ensuring an adequate level of protection equivalent to UK GDPR standards.
How We Use Cookies
We use the following categories of cookies:
- Strictly necessary — required for the site to function (e.g. cookie preference storage). No consent required.
- Performance & Analytics — anonymised, aggregated usage data to understand how our site is used. No personal identifiers stored. Requires consent.
- Affiliate Attribution — first-party cookie tracking referrals from our brand partner network. Anonymised. Requires consent.
You can manage your cookie preferences at any time using the banner on our homepage, or via your browser settings. Blocking strictly necessary cookies may affect site functionality.
Your Data Protection Rights
Under UK GDPR, you have the following rights in respect of your personal data:
- Right of access — to obtain a copy of the personal data we hold about you
- Right to rectification — to have inaccurate or incomplete data corrected
- Right to erasure — to request deletion of your personal data ('right to be forgotten')
- Right to restriction — to restrict how we process your data in certain circumstances
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
- Rights related to automated decision-making — we do not make solely automated decisions with legal or significant effects on individuals
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
How Long We Keep Data
- Enquiry form submissions: 2 years from the date of last contact, unless a commercial relationship develops
- Partner and affiliate records: duration of the agreement plus 6 years (UK statutory requirement)
- Payment and financial records: 7 years (HMRC and Companies Act requirements)
- Website analytics logs: 12 months rolling, anonymised
- Security and access logs: 12 months
After the applicable retention period, data is securely deleted or anonymised.
How We Protect Your Data
We implement industry-standard technical and organisational measures, including:
- All data transmitted over HTTPS/TLS 1.2+ — enforced via Cloudflare
- Access to personal data restricted to authorised Istibqa Ltd personnel only
- Form submissions processed via Formspree over encrypted connections
- No plaintext storage of sensitive credentials or payment details
- Regular review of third-party sub-processor security practices
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay.
Children
Istibqa Ltd's website and services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at [email protected].
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the effective date at the top of this page. Material changes will be communicated via a notice on our homepage. Your continued use of our site or services constitutes acceptance of the updated policy.
Get in Touch
For privacy-related enquiries, data subject requests, or concerns:
Istibqa Ltd
27 West Park Terrace, Bradford, BD8 9SQ, United Kingdom
Email: [email protected]
Tel: +44 7760 979458
Company No. 17089113 · Registered in England and Wales
If you are unsatisfied with our response, you have the right to complain to the UK ICO at ico.org.uk or call 0303 123 1113.