Privacy Policy

Last updated: October 2025

We respect your privacy and are committed to protecting your personal data. This notice explains what information we collect, why we collect it, and how it is handled in accordance with the UK GDPR.

1. Who We Are

This website is operated by Alwaha London (“we”, “us”, “our”).
If you have any questions about this notice or your data, contact us at [email protected].

2. What We Collect and Why

a. Website Analytics (Legitimate Interest)

When you visit our site, we automatically collect limited technical information to help us monitor performance, improve usability, and maintain security.

  • Pages viewed, clicks, and time on page
  • Browser type, screen size, and language
  • Referrer (if any)
  • Country and city (derived from your IP address)
  • A hashed version of your IP address (stored to detect unique visits)
  • Session ID and device information (non-identifiable)

This data helps us understand site usage and detect errors or abuse. No raw IP addresses or personal identifiers are stored.

Analytics data are retained for up to 6 months, then automatically deleted.

b. Contact Form (Consent)

If you use our Contact Us form, the information you provide is sent directly to us by email. It is not stored on the website or in any database, and is used only to respond to your enquiry.

3. Cookies

We use only essential cookies necessary for the website to function properly. We do not use tracking, advertising, or third-party analytics cookies.

4. Cloudflare

Our website is delivered and protected through Cloudflare, which may process minimal connection data (such as IP addresses and request headers) for security and performance purposes.

Cloudflare acts as a data processor under its Data Processing Addendum.

5. Your Rights

Under the UK GDPR you have the right to:

  • Request access to your personal data
  • Request correction or deletion
  • Object to processing based on legitimate interests
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise these rights by contacting [email protected].

6. Security

Analytics data are stored securely on our own systems. IP addresses are used briefly for geolocation, then immediately hashed with a long random salt, making them non-reversible and anonymous.

7. Updates

We may update this policy periodically. The latest version will always be available on this page.