Privacy notice

Who we are and who is responsible

Hamza Group is a trading identity used by a group of independent construction and property professionals operating in the United Kingdom. Work may currently be undertaken by individual sole traders or other appropriately appointed contractors, depending on the project.

The business is in the process of establishing its formal UK corporate structure. Where you enter into a contract for construction, design or other services, the identity of the person or business responsible for providing those services will be stated in the relevant quotation, proposal or contract.

During the current transitional structure, Mr Mohamed Hamza is responsible for the operation of the Hamza Group website and for the handling of personal information submitted through it. He decides how and why that information is used and is the data controller for it under UK data protection law. In this notice, "we", "us" and "our" mean Hamza Group acting through him.

For anything about this notice, or to use any of your data rights, email m.hamza@hamzagroup.co.uk. For general business enquiries, info@hamzagroup.co.uk remains our general contact. We do not publish a business address at present.

Mr Hamza being responsible for the website does not mean that he is the party to any contract for building or design work. The person or business that provides those services will be named in the quotation, proposal or contract.

What we collect

We only collect personal information when you send us an enquiry through the quote form or email us. The form asks for:

• your name, email address and telephone number, and how you would like us to contact you;
• the address or location of the project, and the type of property;
• what you would like us to help with, and a description of the work;
• optional details such as a company name, project stage, drawings, planning status, budget, preferred start time and how you heard about us.

The form does not ask for dates of birth, identity documents, payment or bank details, and it does not accept file uploads. Please do not include sensitive personal information in your description. We do not use accounts, logins or marketing sign-ups on this website.

Technical information

When you visit the site, our hosting provider processes technical information such as your IP address, browser type and the pages requested, in order to deliver the website securely and to protect it from abuse. To reduce spam, the form uses a hidden field, a timing check and a limit on how many enquiries can be sent from one address in a short period. These checks do not identify you and do not build a profile.

How we use it, and our lawful basis

We use your information to read and reply to your enquiry, to discuss and, if you wish, to prepare a quotation for the work, and to keep a record of the enquiry. Our lawful bases are:

• taking steps at your request before entering into a contract (answering your enquiry and preparing a quotation);
• our legitimate interests in running our business, responding to enquiries and keeping this website secure and free from abuse, which we balance against your rights;
• legal obligations, where we have to keep certain records.

Giving us this information is voluntary and is not a legal or contractual requirement, but we cannot reply to your enquiry without a way to contact you. We do not sell your information, we do not use it for automated decision making, and we do not use this website to send marketing email. We will only use your email address and telephone number to respond to you about your enquiry.

Who we share it with

Your enquiry is delivered to us by email. To do that we use trusted service providers who process information on our behalf and only for that purpose:

• Cloudflare, which hosts this website, protects it and handles our website email addresses;
• Resend, an email delivery service, which sends the enquiry from the website to our enquiries mailbox;
• our email provider, where the enquiries mailbox is read.

We may also share information where the law requires it, or with our professional advisers, subcontractors or suppliers where that is genuinely needed to deal with your project and you would reasonably expect it. We do not share it for advertising.

Transfers outside the UK

Some of these providers operate internationally, so your information may be processed outside the United Kingdom. Where that happens we rely on the safeguards the provider offers, such as an adequacy decision or standard contractual clauses with the UK addendum.

How long we keep it

Enquiries that do not progress. If your enquiry does not progress into a quotation, engagement or project, we intend to keep the personal information in it for 30 days, after which we delete the personal information we no longer need. The enquiry arrives as an email in our business email and calendar environment, which is provided by Microsoft, and we delete it from there.

What may remain. After that we may keep our enquiry reference number and a short note of the type of service enquired about, but only if what we keep contains no personal information and could not reasonably be used to identify you. We do not treat information as non-identifying just because a name or email address has been removed.

Enquiries that become projects. If your enquiry progresses into a quotation, engagement or active project, the information we need becomes part of our business and project records and the 30-day rule no longer applies to it. We then keep it for as long as is necessary for contract administration, project delivery, accounting and tax, warranties, insurance, health and safety, design and construction records, dispute management, regulatory obligations, and the establishment, exercise or defence of legal claims. How long depends on the type of record and the legal and business requirements that apply to it. We do not apply a single period to every project record.

Our providers. The website itself does not keep a database of enquiries or a copy of them: it sends each enquiry by email and nothing more. Our hosting and email delivery providers keep their own technical records under their own settings, and this 30-day policy describes how we handle enquiry information, not how long those providers keep their records. You can ask us to delete your enquiry sooner (see your rights below).

Keeping it secure

The website uses an encrypted connection (HTTPS), validates and limits what the form accepts, and does not store enquiries on the website itself: each enquiry exists as an email that is delivered to us.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information, in some circumstances;
• ask us to restrict how we use it, in some circumstances;
• object to us using it where we rely on legitimate interests;
• ask for it in a portable format, where that applies.

To use any of these rights, email m.hamza@hamzagroup.co.uk. We will respond within one month. You can also complain to the Information Commissioner's Office, the UK data protection regulator (ico.org.uk). We would appreciate the chance to put things right first.

Children

This website is for people planning building work. It is not aimed at children and we do not knowingly collect information from them.

Changes to this notice

We may update this notice if what we do changes. The date at the top shows when it was last updated (5 October 2026). We will update it when the formal UK company structure is established and responsibility for the website moves to it.