Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how NIKKAHFIED LTD ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you visit our website at nikkahfied.technology, use our cloud infrastructure services, media streaming platforms, custom social network solutions, or otherwise interact with us. We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 ("PECR"), and other applicable data protection legislation.

NIKKAHFIED LTD is a company registered in England and Wales. Our registered office is at 182-184 High Street North, London, E6 2JA, United Kingdom. For data protection enquiries, contact us at about@nikkahfied.technology or +44 7955 334411.

1. Scope and Roles

This Privacy Policy applies to personal data we process as a data controller in connection with our website, marketing activities, customer relationship management, billing, support, and the administration of our own business operations. Where we provide cloud infrastructure, media streaming, or bespoke social network development services to business customers, we may also process personal data on behalf of those customers as a data processor. In processor scenarios, the customer's privacy documentation and data processing agreement govern our processing activities, and this Privacy Policy should be read alongside those contractual terms.

We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, technology, or our services. Material changes will be notified via our website or direct communication where appropriate. We encourage you to review this document periodically.

2. Personal Data We Collect

2.1 Information You Provide Directly

We may collect personal data that you voluntarily provide when you request information, register for an account, submit a support ticket, complete a contact form, subscribe to communications, participate in surveys, apply for employment, or enter into a contract with us. This may include your name, job title, employer name, business contact details (email address, telephone number, postal address), billing and payment information, account credentials, communications preferences, and the content of messages you send to us.

Where you use our custom social network development services as an end user of a platform operated by one of our customers, your relationship is primarily with that customer. We may nevertheless receive personal data from customers in order to host, operate, secure, or support the platform on their behalf.

2.2 Information Collected Automatically

When you access our website or use certain online services, we automatically collect technical and usage information, which may constitute personal data where it can be linked to an identifiable individual. This includes IP address, browser type and version, device identifiers, operating system, referral URLs, pages viewed, session duration, clickstream data, error logs, and approximate geographic location derived from IP address. We collect this information through server logs, analytics tools, cookies, and similar technologies as described in our Cookie Policy.

2.3 Information from Third Parties

We may receive personal data from business partners, payment service providers, identity verification services, publicly available sources, professional networking platforms, event organisers, and our customers where necessary to deliver contracted services, prevent fraud, or maintain accurate business records.

3. Purposes and Legal Bases for Processing

We process personal data only where we have a lawful basis under UK GDPR. The table below summarises typical processing activities. Detailed explanations follow.

3.1 Contract Performance

We process personal data where necessary to perform a contract with you or your organisation, or to take steps at your request prior to entering into a contract. This includes provisioning cloud infrastructure, configuring media streaming environments, developing and deploying social network functionality, managing accounts, processing orders, invoicing, providing technical support, and communicating about service delivery.

3.2 Legitimate Interests

We rely on legitimate interests where appropriate, balanced against your rights and freedoms. Legitimate interests include operating and improving our website and services, ensuring network and information security, preventing abuse and fraud, conducting internal reporting and analytics, managing business relationships, enforcing our terms, and defending legal claims. Where we rely on legitimate interests, you may object to processing as explained in Section 10.

3.3 Legal Obligation

We process personal data where required to comply with legal obligations, including tax and accounting requirements, responding to lawful requests from public authorities, and maintaining records required by applicable law.

3.4 Consent

Where required by law, we obtain consent for specific processing activities, such as certain marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

4. How We Use Personal Data

We use personal data for the following purposes: delivering and administering our cloud infrastructure, media streaming, and social network development services; authenticating users and managing access controls; monitoring service performance, uptime, and capacity; diagnosing technical faults and security incidents; personalising user experience where configured by our customers; processing payments and managing accounts receivable; sending service-related notices including maintenance alerts and policy updates; providing customer support and training; conducting quality assurance and product development; carrying out marketing and business development where permitted; complying with legal and regulatory obligations; and establishing, exercising, or defending legal rights.

We do not use personal data for fully automated decision-making that produces legal or similarly significant effects unless we have notified you, provided meaningful information about the logic involved, and ensured appropriate safeguards as required by law.

5. Sharing and Disclosure

5.1 Service Providers and Sub-Processors

We engage trusted third parties to support our operations, including cloud hosting providers, content delivery networks, payment processors, email delivery services, customer relationship management platforms, analytics providers, professional advisers, and IT security vendors. These parties process personal data only on our documented instructions and subject to contractual confidentiality and data protection obligations consistent with UK GDPR requirements.

5.2 Business Customers

Where we act as a processor for a customer operating a social network or streaming service, we may share personal data with that customer as necessary to fulfil our contractual obligations. The customer determines how end-user data is used beyond our hosting and support role.

5.3 Corporate Transactions

If we undergo a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to successors subject to appropriate safeguards and notice where required by law.

5.4 Legal and Regulatory Disclosures

We may disclose personal data where required by law, court order, or governmental authority, or where necessary to protect the rights, property, or safety of NIKKAHFIED LTD, our customers, users, or others.

6. International Transfers

Personal data may be transferred to and processed in countries outside the United Kingdom, including countries that may not provide an equivalent level of data protection. Where we transfer personal data internationally, we implement appropriate safeguards as required by UK GDPR, such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, adequacy regulations, or other approved transfer mechanisms. Copies of relevant safeguards may be requested by contacting about@nikkahfied.technology.

Our cloud infrastructure and media delivery services may involve storage or processing in multiple regions to ensure resilience, performance, and disaster recovery. We assess transfer risks and apply supplementary measures where necessary.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, reporting, and archival requirements. Retention periods vary depending on data category, contractual obligations, and statutory limitation periods.

Typical retention practices include: account and contract records retained for the duration of the relationship plus up to seven years thereafter for legal and tax purposes; billing and transaction records retained in accordance with HMRC requirements; support correspondence retained for up to three years unless longer retention is required for dispute resolution; website logs retained for up to twelve months unless required for security investigations; marketing suppression lists retained indefinitely to honour opt-out preferences; and backup copies deleted according to scheduled rotation cycles subject to disaster recovery needs.

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention and destruction procedures.

8. Security Measures

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures include access controls based on least privilege, multi-factor authentication for administrative systems, encryption in transit using TLS, encryption at rest where supported by underlying infrastructure, network segmentation, vulnerability management, logging and monitoring, incident response procedures, staff training, and contractual security requirements for suppliers.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of account credentials and notifying us promptly of any suspected unauthorised access.

9. Cookies and Similar Technologies

Our website and certain services use cookies, pixels, local storage, and similar technologies to enable functionality, analyse usage, and support marketing where permitted. Detailed information about cookie categories, purposes, durations, and management options is set out in our Cookie Policy, which forms part of our transparency obligations under PECR. You may manage cookie preferences through our consent mechanism and browser settings, noting that disabling certain cookies may affect website functionality.

10. Your Rights Under UK GDPR

Subject to applicable conditions and exemptions, data subjects have the following rights:

Right of access: You may request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information about processing.

Right to rectification: You may request correction of inaccurate personal data or completion of incomplete data.

Right to erasure: You may request deletion of personal data in certain circumstances, such as where data is no longer necessary or consent has been withdrawn.

Right to restriction: You may request restriction of processing in specified situations, including while accuracy is contested or processing is unlawful but you prefer restriction to erasure.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request transfer of personal data you provided to us in a structured, commonly used, machine-readable format.

Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds or need data for legal claims.

Rights related to automated decision-making: You have rights regarding solely automated decisions with legal or similar significant effects, as described in Section 4.

To exercise your rights, contact about@nikkahfied.technology. We may request information to verify your identity. We respond within one month, extendable by two further months where requests are complex or numerous, in which case we will inform you of the extension and reasons.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Contact details are available at ico.org.uk. We encourage you to contact us first so we can address your concerns.

11. Marketing Communications

Where permitted by law, we may send marketing communications about our cloud infrastructure, streaming, and social platform services. Business contacts may receive marketing based on legitimate interests where relevant to their role. We honour opt-out requests promptly and maintain suppression records. Marketing emails include unsubscribe mechanisms. Service-related communications necessary for contract performance are not marketing and may continue notwithstanding marketing opt-out.

12. Children's Data

Our corporate services and website are directed at businesses and professionals. We do not knowingly collect personal data from children under thirteen without appropriate parental or guardian consent and customer configuration. Customers operating social platforms are responsible for age-appropriate policies and consent mechanisms for their end users.

13. Processor Processing on Behalf of Customers

When we process personal data as a processor for customers, we do so pursuant to written instructions in a data processing agreement. We assist customers with data subject requests where feasible, notify customers of personal data breaches without undue delay, and maintain records of processing activities as required. Customers remain responsible for determining lawful bases and providing privacy notices to end users.

14. Data Protection Impact Assessments

Where processing is likely to result in high risk to individuals, we conduct data protection impact assessments and consult the ICO where required. Our streaming and social network solutions may involve large-scale processing of user-generated content; we work with customers to assess risks and implement mitigations such as moderation tools, access controls, and retention limits.

15. Contact Details and Data Protection Enquiries

For questions about this Privacy Policy or our processing of personal data, contact:

NIKKAHFIED LTD
182-184 High Street North, London, E6 2JA, United Kingdom
Email: about@nikkahfied.technology
Telephone: +44 7955 334411
Website: https://nikkahfied.technology

If we appoint a Data Protection Officer or UK representative in the future, details will be published on our website and incorporated into this Policy by reference.

We document processing activities in our records of processing, review them regularly, and align retention schedules with business and legal requirements.

Personal data processed in connection with media streaming may include viewing preferences, playback diagnostics, and device capabilities to optimise delivery quality.

For social network platforms we host, content moderation logs and abuse reports may contain personal data processed strictly for platform safety and contractual compliance.

We apply role-based access controls so that personnel access personal data only where necessary for their job function.

Security incidents involving personal data are assessed promptly, contained, remediated, and reported to customers or authorities where required by law.

We provide privacy training to staff with access to personal data and require confidentiality undertakings as appropriate.

Aggregated and anonymised statistics derived from usage data may be used for service improvement without identifying individuals.

When you link third-party accounts to our services where supported, we receive information according to your authorisation and the third party's policies.