Privacy policy
How Al Essa Investment handles personal data submitted through this website.
Interim notice
This page describes what this website does with personal data as it is currently built. It is published pending review by the company’s legal advisers and will be replaced by the reviewed document before or shortly after launch.
Who is responsible
The data controller for this website is Alessa Holdings Limited, company number 10296376, registered office 1st Floor Arthur Stanley House, 40–50 Tottenham Street, London W1T 4RN, United Kingdom. Registered in England and Wales.
Al Essa Investment is the business name under which Alessa Holdings Limited operates this website.
What we collect
This website has one form. When you submit it, we receive the information you enter:
- Full name
- Company, if you choose to give one
- Email address
- Country
- Phone number, if you choose to give one
- Subject and message
- Confirmation that you have read this policy
Alongside your message the server records the date and time, a truncated record of your browser’s user-agent string, and a one-way cryptographic hash of your IP address. The IP address itself is not stored. The hash exists so that repeated automated submissions can be recognised and rate-limited; it cannot be reversed to recover the address.
There is no analytics, no advertising, no tracking pixel, no social embed and no third-party script of any kind on this website. Nothing you do here is shared with another company.
Why we use it, and on what basis
We use what you send solely to read your enquiry and to respond to it where appropriate. The lawful basis is our legitimate interest in responding to business enquiries addressed to us, and, where you have given it, your consent.
Enquiries are not used for marketing. We do not send newsletters and we do not add enquirers to a mailing list.
Who can see it
Your enquiry is delivered by email to our team and stored on the server that hosts this website. Our hosting provider processes it on our behalf as part of providing that service. It is not passed to anyone else.
How long we keep it
Enquiries are retained for as long as necessary to deal with the matter raised and to keep a record of correspondence. The specific retention period is being confirmed with our advisers and will be stated here.
Cookies
This website sets one cookie, and only when you visit the contact page: a session cookie used to protect the form against cross-site request forgery and to hold the verification question. It expires when you close your browser. There are no analytics or advertising cookies. The cookie policy sets this out in detail.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. You also have the right to complain to the Information Commissioner’s Office.
To exercise any of these rights, please use the contact form. We do not publish an email address or a telephone number.
Security
This website is served over an encrypted connection. The form is protected by a cross-site request forgery token, a verification question, a hidden field that automated senders fill in, a minimum completion time and a per-connection rate limit. Credentials are held outside the public web directory and are never stored in the website’s code.
Changes
We will update this page when the way we handle personal data changes, or when the reviewed document replaces this interim one.