Privacy Policy

1. Who we are

Istimar ("we", "us", "our") is the data controller for personal data collected through this website (istimar.co.uk). We are based at Level 39, One Canada Square, Canary Wharf, London E14 5AB, United Kingdom.

2. What data we collect

We only collect personal data that you choose to give us. We do not run analytics or advertising tracking on this website.

How we collect it	What we collect
Contact form	Name, email address, company name (if provided), and the content of your message
Newsletter sign-up (if you subscribe)	Email address
Website functionality	Essential cookies needed to run the site — see our Cookie Policy for details

3. Why we use your data

We use the information you provide to us for the following purposes:

• To respond to your enquiry — when you contact us via the website, we use your details to reply. Legal basis: legitimate interest in responding to enquiries you've made to us.
• To send you our newsletter — only if you actively subscribe. Legal basis: your consent, which you can withdraw at any time.

4. Who we share data with

We do not sell or rent your personal data. We may share data with trusted third-party service providers who help us run this website and communicate with you, including:

• Our website hosting provider, to keep the site running;
• Our email/newsletter service provider, if you have subscribed to our newsletter;
• Our cookie consent management provider (CookieYes), which helps us manage and record cookie consent.

These providers only process your data on our instructions and are contractually required to keep it secure.

5. How long we keep your data

We keep contact form enquiries for as long as reasonably needed to handle your enquiry and any follow-up, and no longer than 24 months unless a longer period is required by law or an ongoing business relationship. Newsletter subscriber data is kept until you unsubscribe.

6. Your rights

Under UK GDPR, you have the right to:

• Ask us what personal data we hold about you, and request a copy;
• Ask us to correct inaccurate data;
• Ask us to delete your data;
• Withdraw consent at any time (for example, by unsubscribing from our newsletter);
• Object to how we process your data;
• Complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe we have not handled your data properly.

To exercise any of these rights, contact us using the details below.

7. Data security

We take reasonable technical and organisational steps to protect the personal data we hold from unauthorised access, loss or misuse.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date.

9. Contact us