HAMARA CHASKA
Privacy Policy
1. Who we are
Hamara Chaska is a halal frozen food brand operated by Hamara Chaska Ltd, a company registered in England and Wales (registration number 16602263, incorporated 23 July 2025) with its registered office in Milton Keynes, United Kingdom.
This website (hamarachaska.com) is operated by Hamara Chaska Ltd. The domain is registered to Data Solutionz Ltd (parent technology partner) and hosted on Vercel's content delivery network. Where we refer to “we”, “us” or “our” in this policy, we mean Hamara Chaska Ltd as the data controller for personal data processed in connection with this site.
For any privacy queries, contact us at rashid.awan@hamarachaska.com.
2. The scope of this policy
This policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It covers data collected through:
- This website (hamarachaska.com)
- Direct correspondence with us by email
- Our trade-buyer outreach activities (B2B prospecting)
- Our social media channels on Facebook (facebook.com/hamarachaska) and Instagram (@hamarachaska)
This policy does NOT cover any data you provide to third parties whose services you may use independently (for example, your own email provider or your employer's mail server).
3. What we collect, and when
This website is a static brand-presence one-pager. It does not run analytics, set cookies, log visitor IP addresses, or collect any personal data when you visit. You can browse hamarachaska.com without disclosing anything about yourself.
We process personal data only in these situations:
| When | What we collect | How |
|---|---|---|
| You email us at any @hamarachaska.com address | Your email address, name (if provided), and the contents of your message | Inbound mailbox hosted by Zoho Mail |
| We send you trade-buyer outreach | Business email address obtained from public business directories or your employer's website; your business name and role | Outbound via Resend |
| You reply to or click a link in our outreach | Email reply contents, click-through (if applicable) | Recorded in our outreach tracking database |
| You follow, comment on, or interact with our Facebook Page or Instagram account | Whatever you publicly share via Meta's platforms (your Meta-handle, public comments, reactions) | We see what Meta exposes to Page admins in the standard Insights interface; we do not download follower lists or harvest individual user data |
We do not collect: dates of birth, government identifiers, financial details, health information, location data, browsing history, or any consumer-protected attributes. We are a B2B trade-only brand and have no use for any of those categories.
4. Why we use it (legal bases)
| Use | Legal basis under UK GDPR |
|---|---|
| Responding to trade enquiries you initiate | Article 6(1)(b) — performance of (or steps toward) a contract |
| Sending unsolicited B2B outreach to businesses we believe may be a fit | Article 6(1)(f) — legitimate interest in growing a B2B trade network, balanced against your right to opt out (we honour unsubscribe requests immediately and permanently) |
| Recording outreach engagement to avoid re-contacting opted-out recipients | Article 6(1)(f) — legitimate interest in respecting your prior opt-out |
| Operating our social-media presence | Article 6(1)(f) — legitimate interest in a normal brand-presence activity |
We do not use your data for automated decision-making or profiling that produces legal effects on you.
5. Who we share it with
We use the following third-party processors, each contracted under data-processing agreements with appropriate UK / EU GDPR safeguards:
| Provider | Purpose | Region |
|---|---|---|
| Resend (resend.com) | Outbound transactional and outreach email | EU (AWS Frankfurt) |
| Zoho Mail (zoho.com) | Inbound mailbox hosting | EU |
| Vercel (vercel.com) | Static website hosting and content delivery | Global CDN; static assets only, no personal data flows through |
| Supabase (supabase.com) | Internal outreach-tracking database | EU (Ireland) |
| Meta Platforms Inc. (Facebook / Instagram) | Posting content to our own Page and Instagram Business Account; receiving aggregated Insights | US, with Standard Contractual Clauses |
| Anthropic (anthropic.com) | AI assistance for drafting outreach copy (your name and business name may be inserted into AI-drafted templates for personalisation) | US, with Standard Contractual Clauses |
We do not sell your data, lease your data, share it with advertising networks, or transfer it to anyone outside the list above.
6. International transfers
Some of our processors (notably Meta and Anthropic) are based in the United States. Transfers to these processors are protected by Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office (ICO). EU/EEA-based processors (Resend, Zoho, Supabase) keep data within the EU.
7. How long we keep it
| Data | Retention |
|---|---|
| Inbound email correspondence | 7 years (matches HMRC business records retention standard) |
| Outbound outreach records and bounce history | 7 years |
| Opt-out / unsubscribe records | Retained indefinitely so that we never re-contact you after you've opted out |
| Social-media engagement data | Whatever Meta retains in its Insights interface; we don't independently archive |
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (subject to overriding legitimate interests, such as opt-out records)
- Restrict processing while we investigate a request
- Object to processing based on legitimate interest
- Portability — request your data in a machine-readable format
- Withdraw consent at any time (for any processing based on consent)
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data
Email rashid.awan@hamarachaska.com to exercise any of these rights. We will respond within one month.
9. Opting out of outreach
To opt out of trade-buyer outreach immediately and permanently:
- Reply to any outreach email with the word “unsubscribe” in the subject or body, OR
- Email rashid.awan@hamarachaska.com with the same request
You will be added to our suppression list and will not be contacted again, even from different sender addresses we may use in future.
10. Cookies
This website does not set any cookies. We do not run analytics, advertising pixels, fingerprinting scripts, or any other client-side tracking. The only network requests your browser makes are to load the page itself (HTML, CSS, the logo image, and our self-hosted Lora font).
11. Security
We protect your data with:
- TLS encryption for all data in transit (HTTPS-only on the website; TLS on email transport)
- Encrypted-at-rest storage with all processors
- Row-level security on internal databases (only authenticated service roles can read outreach records)
- Two-factor authentication on all administrative accounts
- A minimal-data policy — we don't collect what we don't need
We will notify the ICO and affected individuals within 72 hours of becoming aware of any personal data breach that risks your rights.
12. Changes to this policy
We may update this policy. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be flagged in our outreach for at least 30 days before they take effect.
13. Contact
Data controller: Hamara Chaska Ltd
Address: Milton Keynes, United Kingdom
Email: rashid.awan@hamarachaska.com
This privacy policy was drafted with Promptra (an AI-assisted marketing tool by Data Solutionz Ltd). It has been adapted to the specific data flows of Hamara Chaska Ltd as listed in §3 and §5. For any clarifications about how we handle your data, get in touch.