Privacy Policy

This policy explains how Kareem Alkhazaleh trading as Alkhazaleh Advisory (“Alkhazaleh Advisory”, “we”, “us”) collects and uses personal data when you visit this website or submit information to us. Kareem Alkhazaleh is a sole trader trading as Alkhazaleh Advisory and is the controller of that personal data for the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018. You can contact us by email at kareem@alkhazalehadvisory.com or by post at [Business address to be confirmed].

Information we collect

We collect only the information needed to assess and progress potential transactions and introductions:

• Identity and contact details: name, job title, organisation, email address, telephone number and, where provided, a LinkedIn profile.
• Professional information: your role, your relationship to a business or opportunity, your coverage and background (for introducers), and whether you are regulated.
• Business and transaction information: details of acquisition criteria, businesses and opportunities, including headline financial information and any documents you choose to provide. This information usually relates to companies, but may include personal data about owners or directors.
• Records of our correspondence and dealings with you.
• Limited technical information needed to operate and protect the website, such as a hashed (non-reversible) representation of your IP address used to prevent abuse of our forms.

We do not use advertising cookies. If we use website analytics, we use a privacy-focused service that does not set cookies or track you across other websites, and we never send the content of your submissions to it.

How we use your information

• To review, verify and respond to your submission or enquiry.
• To identify potential counterparties and, with the necessary consent, make introductions.
• To enter into and perform agreements with you, including success-fee arrangements.
• To keep appropriate business records and to meet our legal, tax and regulatory obligations.
• To protect the security of our website and systems and to prevent fraud and misuse.

Legal bases

We rely on the following lawful bases:

• Legitimate interests — operating our business of originating transactions and making introductions, and responding to enquiries, where these interests are not overridden by your rights.
• Contract — taking steps at your request before entering into an agreement, and performing agreements with you.
• Legal obligation — where we must keep or disclose information by law.
• Consent — where we ask for it, for example before sharing identifying information about your business with a third party. You may withdraw consent at any time.

Who we share information with

We do not sell personal data. We share it only as follows:

• With potential counterparties, and only with your agreement. Identifying information about a business owner or acquirer is not disclosed without consent.
• With service providers who process data on our behalf under contract, including our website hosting, database and secure file storage, and email delivery providers.
• With our professional advisers, such as lawyers and accountants, under a duty of confidentiality.
• Where required by law, regulation or a court, or to protect our legal rights.

International transfers

Some of our service providers may process data outside the United Kingdom. Where they do, we rely on adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Where an introduction involves a counterparty outside the UK, information is shared only with your agreement.

How long we keep information

We keep submissions for as long as they remain relevant to a potential transaction. Where no relationship develops, we aim to delete or anonymise submissions within 24 months of our last meaningful contact. Records relating to agreements, introductions and fees are kept for up to six years after the relationship ends, to meet legal and tax requirements and to establish or defend legal claims.

Security

Information is transmitted over encrypted connections and stored with access restricted to authorised personnel. Documents are held in private storage and are never publicly accessible. No system is completely secure, and we encourage you to share only what is needed at each stage.

Your rights

You have the right to request access to, correction of, or erasure of your personal data; to restrict or object to its processing; to data portability; and to withdraw consent where we rely on it. Some rights are subject to exemptions, for example where we must retain records by law. You may also complain to the Information Commissioner’s Office (ico.org.uk), although we would appreciate the chance to address your concerns first.

Information about others

If you provide information about another person — for example an introducer submitting details of a business owner — you must be entitled to do so, and should make them aware of this policy where appropriate.

Contact

To exercise your rights or ask a question about this policy, contact Kareem Alkhazaleh at kareem@alkhazalehadvisory.com, by post at [Business address to be confirmed], or through our contact form.

Changes

We may update this policy from time to time. The current version will always be available on this page.