Privacy Policy and Data Protection Notice

As a block and estate management company, Amanah Asset Management Ltd collects, uses, stores, and shares personal information as part of the services we provide. We are fully committed to protecting the privacy, security, and confidentiality of all personal data entrusted to us.

Amanah Asset Management Ltd is regulated under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of data protection legislation, we act as the data controller in relation to the personal information we process. This means we determine how and why personal data is collected and used.

We ensure that all personal information is collected and processed lawfully, fairly, and transparently. Our use of personal data is limited to what is necessary, relevant, and proportionate to the management of residential blocks and estates. We follow strict data protection principles when handling information and maintain appropriate technical and organisational measures to safeguard it.

This notice explains:

• What personal data we collect
• How and why we collect and use it
• How long we retain personal information
• When and how data may be shared during the management of your building or estate, and after management ends
• Your rights in relation to the personal data we hold

It also explains how to contact us if you have any questions or concerns, and how to raise a complaint with the relevant supervisory authority if required.

Please ensure that you read this notice carefully, along with any other privacy notices we may provide from time to time. The most up-to-date version of our Privacy Notice will always be available on our website.

(A) AMANAH ASSET MANAGEMENT LTD operates as a professional estate and block management company, providing comprehensive property management services to residential and commercial developments across England and Wales.

(B) In the course of providing estate and block management services, the Company necessarily collects, processes and stores personal data relating to property owners, tenants, residents, contractors, and other individuals connected to the properties under management.

(C) The Company operates a website at [www.amanahassets.co.uk] which serves as a primary means of communication with existing and prospective customers, providing information about services, facilitating service requests, and enabling online account management for estate and block management customers.

(D) Through the website and in the delivery of services, the Company processes personal data including contact details, property information, payment details, correspondence records, and other information necessary for effective property management.

(E) The Company is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation in England and Wales.

(F) This Privacy Policy sets out how the Company collects, uses, stores, and protects personal data, and explains the rights of individuals whose personal data is processed in connection with estate and block management services and website usage.

1.1. In this Privacy Policy, the following terms shall have the meanings set out below:

Company means Amanah Asset Management Ltd, a company incorporated under the laws of England and Wales with Registered office at 230 St. Paul's Road, Highbury Islington London, N1 2LJ, Company No. 15909676.

Data Controller means the natural or legal person who determines the purposes and means of processing personal data, which in relation to this Privacy Policy is the Company;

Data Protection Legislation means all applicable data protection and privacy laws including the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and any successor or replacement legislation;

Data Subject means any living individual who is the subject of personal data, including estate and block management customers, property owners, tenants, residents, visitors to our website, and any other individuals whose personal data we process;

Estate and Block Management Services means the professional property management services provided by the Company including but not limited to maintenance coordination, financial management, resident liaison, contractor management, and compliance services for residential and commercial developments;

ICO means the Information Commissioner's Office, the UK's independent authority responsible for upholding information rights;

Personal Data means any information relating to an identified or identifiable natural person, including but not limited to names, addresses, telephone numbers, email addresses, financial information, and any other data that can directly or indirectly identify an individual;

Processing means any operation performed on personal data including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction;

Third Party means any natural or legal person, public authority, agency or body other than the Company, the data subject, and persons who are authorised to process personal data under the direct authority of the Company;

Website means the Company's website located at [www.amanahassets.co.uk] and any associated subdomains, mobile applications, or digital platforms operated by the Company.

2.1. This Privacy Policy applies to the collection, processing, and storage of Personal Data by the Company in connection with the provision of Estate and Block Management Services and the operation of the Website.

2.2. This Privacy Policy covers Personal Data relating to the following categories of Data Subjects:

(a) Current and prospective customers of Estate and Block Management Services including property owners, leaseholders, freeholders, and their authorized representatives;

(b) Tenants, residents, and occupiers of properties under the Company's management;

(c) Directors, shareholders, and employees of corporate entities that are customers of the Company;

(d) Contractors, suppliers, and service providers engaged in connection with managed properties;

(e) Visitors to and users of the Website, including those making enquiries about Estate and Block Management Services;

(f) Emergency contacts and other individuals whose details are provided in connection with managed properties.

2.3. This Privacy Policy applies to Personal Data collected and processed through the following activities:

(a) Use of the Website including browsing, form submissions, account registration, and online communications;

(b) Provision of Estate and Block Management Services including property management, maintenance coordination, financial administration, and regulatory compliance;

(c) Customer relationship management including enquiries, complaints handling, service delivery, and ongoing communications;

(d) Marketing activities and business development in relation to Estate and Block Management Services.

2.4. This Privacy Policy does not apply to:

(a) Personal Data processed by the Company in its capacity as a data processor on behalf of other data controllers;

(b) Third-party websites or services that may be linked to from the Website;

(c) Personal Data collected and processed exclusively for the Company's internal human resources purposes relating to its own employees.

3.1. : Amanah Asset Management Ltd is the data Data Controller. The Data Controller responsible for your personal data collected through this website and in connection with our estate and block management services.

3.2. Company Registration: Amanah Asset Management Ltd is a company registered in England and Wales under company number 15909676.

3.3. Registered Office: Our registered office address is 230 St. Paul's Road, Highbury Islington London, N1 2LJ.

3.4. Business Address: Our principal place of business is 230 St. Paul's Road, Highbury Islington London, N1 2LJ.

3.5. Contact Details: You can contact us regarding data protection matters by:

(a) Email: management@amanahassets.co.uk

(b) Telephone: 07908753917

(c) Post: 230 St. Paul's Road, Highbury Islington London, N1 2LJ

3.6. Data Protection Officer: We have appointed a Data Protection Officer who can be contacted at management@amanahassets.co.uk.

3.7. ICO Registration: We are registered with the Information Commissioner's Office under registration number [ZC081346].

4.1. Identity and Contact Information: We collect personal data necessary to identify and communicate with you, including full name, residential address, correspondence address, telephone numbers, email addresses, and emergency contact details.

4.2. Property-Related Information: We process data relating to your property interests including property addresses, lease details, ownership status, tenancy information, and your role in relation to managed properties (whether as owner, leaseholder, tenant, or authorised representative).

4.3. Financial and Payment Information: We collect financial data necessary for service provision including bank account details, payment card information, direct debit mandates, service charge payment records, and billing addresses.

4.4. Service and Account Information: We process data relating to your use of our services including account login credentials, service requests, maintenance reports, complaints, correspondence records, and service preferences.

4.5. Website Usage Data: We collect technical information about your use of our website including IP addresses, browser type and version, device information, pages visited, time spent on pages, referring websites, and geographical location data.

4.6. Communication Records: We maintain records of all communications between you and the Company including emails, telephone calls, written correspondence, meeting notes, and any other form of contact.

4.7. Legal and Compliance Information: We may collect data necessary for legal compliance including identity verification documents, proof of address, landlord consent forms, and any information required for regulatory reporting.

4.8. Third Party Information: We may receive personal data about you from third parties including property developers, solicitors, managing agents, contractors, local authorities, and utility companies in connection with our estate and block management services.

5.1. The Company processes Personal Data on the basis of one or more of the following lawful grounds under Article 6 of the UK GDPR:

(a) Contractual necessity - processing is necessary for the performance of a contract to which the Data Subject is party, or to take steps at the request of the Data Subject prior to entering into a contract;

(b) Legal obligation - processing is necessary for compliance with a legal obligation to which the Company is subject;

(c) Legitimate interests - processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject;

(d) Consent - the Data Subject has given consent to the processing of their Personal Data for one or more specific purposes;

(e) Vital interests - processing is necessary to protect the vital interests of the Data Subject or of another natural person.

5.2. For Estate and Block Management Services, the Company primarily relies on the following lawful bases:

(a) Contractual necessity for processing data relating to property management agreements, service charges, maintenance requests, and direct service delivery;

(b) Legal obligation for processing required under property law, health and safety legislation, financial regulations, and statutory reporting requirements;

(c) Legitimate interests for processing relating to property security, debt recovery, contractor management, and general business administration.

5.3. Where the Company relies on legitimate interests as a lawful basis, the Company has conducted a balancing test to ensure that its legitimate interests do not override the Data Subject's rights and freedoms.

5.4. For marketing communications and non-essential Website functionality, the Company will generally seek explicit consent from Data Subjects.

5.5. Data Subjects have the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.

  6.1. We collect Personal Data through various methods in connection with our estate and block management services and Website operations.

6.2. Direct Collection from Data Subjects

(a) Information provided when you complete forms on our Website, including contact forms, service enquiry forms, and account registration forms.

(b) Details submitted when requesting quotes, making service requests, or booking appointments through our online systems.

(c) Information provided during telephone conversations, email correspondence, or face-to-face meetings with our staff.

(d) Data collected when you subscribe to our newsletters, marketing communications, or service updates.

6.3. Automatic Collection Through Website Technology

(a) Information automatically collected through cookies, web beacons, and similar tracking technologies when you visit our Website.

(b) Technical data including your IP address, browser type, operating system, referring website, pages visited, and time spent on our Website.

(c) Usage data regarding how you interact with our Website features and services.

6.4. Third Party Sources

(a) Information received from property developers, managing agents, or previous management companies when we take over management of a development.

(b) Data obtained from Land Registry records, local authority records, and other publicly available sources relevant to property management.

(c) Information provided by contractors, suppliers, or service providers in connection with property management services.

(d) Details received from residents' associations, freeholders, or other stakeholders in managed developments.

6.5. Property Management Records

(a) Information collected during property inspections, maintenance visits, and emergency callouts.

(b) Data obtained through CCTV systems, access control systems, and security monitoring where applicable to managed properties.

(c) Records created during the administration of service charges, ground rent collection, and financial management activities.

7.1. The Company processes personal data for the following primary purposes in connection with estate and block management services:

(a) To provide estate and block management services including property maintenance, financial management, compliance monitoring, and resident liaison services.

(b) To manage customer accounts, process service charges, collect payments, and maintain financial records relating to managed properties.

(c) To communicate with property owners, tenants, residents, and other stakeholders regarding property matters, service updates, and administrative requirements.

(d) To coordinate maintenance works, repairs, and improvements to managed properties through engagement with contractors and service providers.

7.2. The Company may process personal data for administrative and operational purposes including:

(a) To respond to enquiries, complaints, and service requests submitted through the Website or other communication channels.

(b) To maintain customer relationship management systems and service delivery records.

(c) To prepare reports, statements, and documentation required for property management and customer communication.

(d) To manage and improve the Website functionality, user experience, and technical performance.

7.3. The Company processes personal data for legal and regulatory compliance purposes:

(a) To comply with statutory obligations relating to property management, health and safety, building regulations, and financial record-keeping.

(b) To establish, exercise, or defend legal claims and to cooperate with regulatory authorities and law enforcement agencies.

(c) To conduct due diligence checks, fraud prevention, and compliance with anti-money laundering requirements.

7.4. Where consent has been obtained, the Company may process personal data for marketing and communications purposes:

(a) To send newsletters, service updates, and promotional materials about the Company's estate and block management services.

(b) To conduct customer surveys and market research to improve service delivery.

(c) To provide information about additional services that may be of interest to existing customers.

7.5. Processing will only occur where the Company has a lawful basis under Data Protection Legislation and will be limited to what is necessary and proportionate for the stated purposes.

8.1. The Company may share your personal data with third parties in the following circumstances, where we have a lawful basis to do so and where necessary for the provision of our estate and block management services.

8.2. Service Providers and Contractors

(a) We may share personal data with contractors, tradespeople, maintenance companies, cleaning services, security providers, and other service providers who perform work on the properties we manage.

(b) Such sharing is limited to information necessary for the completion of their services, including contact details, property access information, and relevant property conditions or requirements.

8.3. Professional Advisors

(a) We may share personal data with our legal advisors, accountants, auditors, insurance providers, and other professional service providers where necessary for the proper management of properties and resolution of legal or financial matters.

(b) This includes sharing information for debt recovery, legal proceedings, insurance claims, and regulatory compliance matters.

8.4. Regulatory Bodies and Legal Authorities

(a) We may disclose personal data to regulatory bodies including local authorities, HM Revenue & Customs, the Property Redress, and other relevant regulatory or statutory bodies where required by law or regulation.

(b) We may also disclose personal data to law enforcement agencies, courts, or other legal authorities where we are legally obligated to do so or where disclosure is necessary for the prevention or detection of crime.

8.5. Property-Related Third Parties

(a) We may share personal data with freeholders, head lessees, managing agents of connected properties, utility companies, and local authorities where necessary for property management purposes.

(b) Information may be shared with prospective purchasers or tenants during property sales or lettings processes, limited to information necessary for those transactions.

8.6. Data Protection Safeguards

(a) All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures to protect your personal data.

(b) We enter into written agreements with third parties that process personal data on our behalf, ensuring they comply with data protection requirements and process data only as instructed by us.

8.7. No Sale of Personal Data

(a) We do not sell, rent, or trade personal data to third parties for marketing purposes.

9.1. The Company processes personal data for the following primary purposes in connection with estate and block management services:

(a) To provide estate and block management services including property maintenance, financial management, compliance monitoring, and resident liaison services.

(b) To manage customer accounts, process service charges, collect payments, and maintain financial records relating to managed properties.

(c) To communicate with property owners, tenants, residents, and other stakeholders regarding property matters, service updates, and administrative requirements.

(d) To coordinate maintenance works, repairs, and improvements to managed properties through engagement with contractors and service providers.

9.2. The Company may process personal data for administrative and operational purposes including:

(a) To respond to enquiries, complaints, and service requests submitted through the Website or other communication channels.

(b) To maintain customer relationship management systems and service delivery records.

(c) To prepare reports, statements, and documentation required for property management and customer communication.

(d) To manage and improve the Website functionality, user experience, and technical performance.

9.3. The Company processes personal data for legal and regulatory compliance purposes:

(a) To comply with statutory obligations relating to property management, health and safety, building regulations, and financial record-keeping.

(b) To establish, exercise, or defend legal claims and to cooperate with regulatory authorities and law enforcement agencies.

(c) To conduct due diligence checks, fraud prevention, and compliance with anti-money laundering requirements.

9.4. Where consent has been obtained, the Company may process personal data for marketing and communications purposes:

(a) To send newsletters, service updates, and promotional materials about the Company's estate and block management services.

(b) To conduct customer surveys and market research to improve service delivery.

(c) To provide information about additional services that may be of interest to existing customers.

9.5. Processing will only occur where the Company has a lawful basis under Data Protection Legislation and will be limited to what is necessary and proportionate for the stated purposes.

10.1. The Company primarily processes personal data within the United Kingdom and does not routinely transfer personal data to countries outside the UK.

10.2. Where international transfers of personal data are necessary for the provision of estate and block management services, such transfers will only occur in the following limited circumstances:

(a) to cloud storage providers or software service providers whose servers may be located outside the UK but who provide adequate safeguards for data protection;

(b) to professional advisors, contractors, or service providers located outside the UK where their expertise is specifically required for property management services;

(c) where required by law or court order to disclose information to overseas authorities or legal proceedings.

10.3. Before any international transfer takes place, the Company will ensure that appropriate safeguards are in place, including:

(a) confirmation that the receiving country has been deemed to provide an adequate level of data protection;

(b) implementation of Standard Contractual Clauses approved for UK data transfers;

(c) verification that the recipient organisation has binding corporate rules or other approved certification schemes;

(d) obtaining explicit consent from the data subject where other safeguards are not available.

10.4. Data subjects have the right to obtain information about international transfers affecting their personal data and to request details of the safeguards in place by contacting the Company using the details provided in section 16.

10.5. The Company will review and update its international transfer procedures regularly to ensure continued compliance with UK data protection legislation.

11.1. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

11.2. Service-related data including contact details, property information, service records, and correspondence will be retained for the duration of our contractual relationship and for seven years following termination of services.

11.3. Financial data including payment records, invoicing information, and transaction details will be retained for seven years from the end of the financial year in which the transaction occurred, in accordance with accounting and tax law requirements.

11.4. Marketing data will be retained until you withdraw consent or opt out of marketing communications, after which it will be deleted within 30 days unless retention is required for other lawful purposes.

11.5. Website usage data including cookies, analytics data, and technical logs will be retained for a maximum of 26 months unless deleted earlier in accordance with our Cookie Policy.

11.6. Complaint and dispute records will be retained for seven years from resolution of the matter to protect our legitimate interests and comply with potential legal proceedings.

11.7. CCTV and security footage where applicable will be retained for 30 days unless required for investigation of incidents or legal proceedings.

11.8. We will review retained personal data annually to ensure continued relevance and necessity for the purposes for which it is held.

11.9. Personal data will be securely deleted or anonymised when retention is no longer justified, using appropriate technical measures to ensure data cannot be recovered.

11.10. In certain circumstances, we may retain personal data for longer periods where required by law, court order, or where necessary to protect our legitimate interests, provided such retention is proportionate and lawful.

12.1. The Website uses cookies and similar tracking technologies to enhance user experience, analyze website performance, and provide personalized services to estate and block management customers.

12.2. Cookies are small text files stored on your device when you visit the Website, which help us recognize your browser and remember certain information about your preferences and previous visits.

12.3. We use the following types of cookies on the Website:

(a) Strictly necessary cookies that are essential for the Website to function properly, including session management and security features.

(b) Performance cookies that collect anonymous information about how visitors use the Website, including page visits, time spent on pages, and error messages.

(c) Functionality cookies that remember your preferences and settings to provide enhanced features and personalized content.

(d) Analytics cookies that help us understand website traffic patterns and user behavior to improve our services.

12.4. The Website may use Google Analytics and other third-party analytics tools to collect statistical information about website usage, which helps us improve our estate and block management services and website functionality.

12.5. Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or receive notification when cookies are being sent to your device.

12.6. Disabling certain cookies may limit your ability to use some features of the Website, including online account access and service request functionality.

12.7. The Website may contain links to third-party websites that have their own cookie policies, and we are not responsible for the privacy practices of such external sites.

12.8. We may use web beacons and similar tracking technologies in emails sent to customers to measure email open rates and link clicks for communication effectiveness.

12.9. You can withdraw consent for non-essential cookies at any time by adjusting your browser settings or using any cookie preference tools provided on the Website.

13.1. The Company may use personal data collected through the Website and in the course of providing Estate and Block Management Services to send marketing communications about our services, including property management updates, new service offerings, and relevant industry information.

13.2. Marketing communications may be sent by email, post, telephone, or text message to existing customers where we have a legitimate interest in promoting related services, or to prospective customers who have provided explicit consent.

13.3. We will only send electronic marketing communications (including email and text messages) where:

(a) you have given specific consent to receive such communications; or

(b) you are an existing customer and the communications relate to similar services to those you have previously purchased or enquired about, and you have not opted out of receiving such communications.

13.4. You have the right to opt out of receiving marketing communications at any time by:

(a) clicking the unsubscribe link included in electronic communications;

(b) contacting us directly using the contact details set out in clause 16;

(c) updating your communication preferences through your online account (where applicable); or

(d) notifying us in writing that you wish to opt out of marketing communications.

13.5. Opting out of marketing communications will not affect communications that are necessary for the provision of Estate and Block Management Services, including service updates, account statements, maintenance notifications, and other operational communications.

13.6. We may engage Third Parties to assist with marketing activities, including email service providers and marketing agencies, who will process your personal data in accordance with our instructions and appropriate data protection safeguards.

13.7. We will maintain records of your marketing preferences and ensure that these are respected across all our communication channels.

14.1. The Company implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing Personal Data, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing.

14.2. Technical security measures include:

(a) encryption of Personal Data both in transit and at rest where appropriate;

(b) regular security updates and patches to all systems and software used to process Personal Data;

(c) secure backup and disaster recovery procedures to ensure business continuity and data availability;

(d) network security controls including firewalls, intrusion detection systems, and secure access protocols;

(e) regular security monitoring and logging of access to systems containing Personal Data.

14.3. Organisational security measures include:

(a) restriction of access to Personal Data to authorised personnel only on a need-to-know basis;

(b) regular training of staff on data protection requirements and security procedures;

(c) implementation of clear data handling policies and procedures;

(d) regular review and testing of security measures and incident response procedures;

(e) background checks on personnel with access to Personal Data where appropriate.

14.4. In the event of a personal data breach, the Company will:

(a) assess the risk to individuals and determine whether notification to the ICO is required within 72 hours of becoming aware of the breach;

(b) notify affected Data Subjects without undue delay where the breach is likely to result in high risk to their rights and freedoms;

(c) maintain records of all data breaches including the facts, effects, and remedial action taken;

(d) take immediate steps to contain the breach and prevent further unauthorised access or loss.

14.5. The Company regularly reviews and updates its security measures to address emerging threats and ensure continued protection of Personal Data.

14.6. Where Third Parties process Personal Data on behalf of the Company, appropriate contractual safeguards are in place to ensure equivalent levels of security are maintained.

15.1. We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations.

15.2. When we make material changes to this Privacy Policy, we will notify affected Data Subjects through one or more of the following methods:

(a) posting a prominent notice on our Website;

(b) sending an email notification to registered users at their last known email address;

(c) providing written notice to property owners and residents through our standard communication channels for Estate and Block Management Services.

15.3. Non-material changes, such as administrative updates or clarifications that do not affect your rights or our data processing practices, may be made without prior notice.

15.4. The updated Privacy Policy will take effect 30 days after we provide notice of material changes, or immediately upon publication for non-material changes.

15.5. Your continued use of our Website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15.6. If you do not agree with any changes to this Privacy Policy, you should discontinue use of our Website and contact us regarding your data processing preferences.

15.7. Previous versions of this Privacy Policy will be archived and made available upon request for a period of three years from the date they were superseded.

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those rights include;

• fair processing of information and transparency over how we use your use personal information,
• access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address,
• require us to correct any mistakes in your information which we hold,
• require the erasure of personal information concerning you in certain situations,
• receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations,
• object at any time to processing of personal information concerning you for direct marketing,
• object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you,
• object in certain other situations to our continued processing of your personal information,
• otherwise restrict our processing of your personal information in certain circumstances,
• claim compensation for damages caused by our breach of any data protection laws.
• 
  

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation.

If you would like to exercise any of those rights, please contact us by:

• email, call or write us at management@amanahassets.co.uk, 07908753917, Amanah Asset Management, 230 St. Paul's Road, Highbury Islington London, N1 2LJ
• let us have enough information to identify you, for example your full name, address and address of the property we manage
• let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill) and
• let us know the information to which your request relates, including any account or reference numbers, if you have them.

Keeping your personal information secure.

We take steps to protect your personal data against loss or theft as well as unauthorized access, disclosure, copying to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

 (a) You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal data has been processed unlawfully or your data protection rights have been violated.

(b) The ICO can be contacted at:

(c) Website: www.ico.org.uk

(d) Telephone: 0303 123 1113

(e) Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

(f) You may lodge a complaint with the ICO at any time, but we encourage you to contact us first so that we may attempt to resolve any concerns directly.

This Privacy Policy has been approved and adopted by AMANAH ASSET MANAGEMENT LTD and comes into effect on 21 August 2025.

This Privacy Policy will be reviewed annually and updated as necessary to ensure continued compliance with applicable data protection legislation.