Version: 1.0
Last updated: 23 October 2026
Effective date: 23 October 2026

1. Introduction

This Privacy Notice explains how Niyazmandiha, operated by Alki Labs Ltd, collects, uses, stores, shares and protects personal information.

It applies to visitors, registered users, business owners, reviewers, Community Ads advertisers and individuals who communicate with us or use our services.

We are committed to handling personal information responsibly and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This notice should be read alongside our Terms of Service, Cookie Notice and other applicable platform policies.

2. Data Controller and Contact Details

The data controller responsible for Niyazmandiha is:

Company: Alki Labs Ltd
Company number: 17253537
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Website: https://niyazmandiha.com
Privacy contact: privacy@niyazmandiha.com

Alki Labs Ltd determines the purposes and means of processing personal information for the operation of Niyazmandiha.

Where another organisation independently determines how it processes information obtained through the platform, that organisation may have separate data protection responsibilities.

3. Information We Collect

Depending on how you use Niyazmandiha, we may process the following categories of information.

3.1 Account Information

• Name or username.
• Email address.
• Telephone number, where provided or required.
• Account identifiers.
• Authentication and verification status.
• Account preferences and language settings.
• Account activity and security information.

3.2 Business Listing Information

• Business names and descriptions.
• Business addresses and service locations.
• Public business contact details.
• Business categories, services and opening hours.
• Images and other submitted content.
• Ownership claim information.
• Supporting evidence provided during claim reviews.
• Listing management and approval history.

3.3 Reviews and User Content

• Reviews and ratings.
• Content submitted by users.
• Associated account and listing identifiers.
• Reports relating to reviews or other content.
• Moderation decisions and relevant supporting information.

3.4 Community Ads

Where Community Ads are available, we may process:

• Advertisement descriptions and categories.
• Images and other submitted material.
• General location information.
• Advertiser account information.
• Email and mobile verification status.
• Private contact information where required for the service.
• Advertisement status, expiry and moderation history.

3.5 Communications and Messaging

Where messaging features are available, we may process:

• Enquiries and message content.
• Sender and recipient identifiers.
• Email addresses and contact details needed to deliver communications.
• Message timestamps and delivery status.
• Verification and access records.
• Abuse reports and related moderation information.

3.6 Security and Moderation Information

We may collect technical and account-related information necessary to protect the platform, including:

• IP addresses.
• Login and access records.
• Failed authentication attempts.
• Device and browser information.
• Security alerts.
• Suspected abuse or fraud indicators.
• User reports and supporting evidence.
• Enforcement decisions and appeals.

3.7 Cookies and Privacy Preferences

We may process information about your privacy choices, including whether you have accepted or rejected optional technologies.

Further information is available in our Cookie Notice.

4. How We Collect Information

We collect personal information when:

• You create or manage an account.
• You submit or claim a business listing.
• You publish a review or other content.
• You submit a Community Ad.
• You send an enquiry or message.
• You contact our support team.
• You report content or appeal a decision.
• You interact with our privacy controls.
• Our website processes technical information necessary for security and operation.

We may also obtain business information from publicly available sources or other lawful sources where appropriate.

5. Why We Use Personal Information

We process personal information for purposes including:

• Providing and maintaining Niyazmandiha.
• Creating and managing user accounts.
• Publishing and maintaining business listings.
• Processing ownership claims.
• Supporting reviews and ratings.
• Providing messaging and communication features.
• Operating Community Ads where enabled.
• Preventing fraud and misuse.
• Protecting users and platform security.
• Reviewing reports and enforcing platform policies.
• Responding to support requests and complaints.
• Complying with legal obligations.
• Maintaining appropriate records.
• Improving the reliability and functionality of our services.

We do not treat all information as necessary for every purpose.

6. Legal Bases for Processing

Where UK GDPR applies, we rely on an appropriate lawful basis for each processing activity.

These may include:

Contractual necessity: Processing required to provide services requested by registered users, such as account management and eligible platform features.

Legitimate interests: Processing necessary for legitimate purposes such as maintaining directory accuracy, preventing fraud, protecting security, handling disputes and operating the platform, where those interests are not overridden by individuals’ rights and freedoms.

Legal obligations: Processing required to comply with applicable laws, regulatory requirements or valid legal requests.

Consent: Processing based on a person’s freely given, specific and informed permission, including optional cookies and external services where consent is legally required.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Some processing activities may require additional safeguards or a different legal basis depending on the circumstances.

7. Public and Private Information

Certain information submitted to Niyazmandiha is intended for public display.

This may include:

• Published business information.
• Public reviews and ratings.
• Approved Community Ads.
• Publicly displayed usernames or attribution.
• Other content deliberately submitted for publication.

Public information may be viewed by visitors and may be indexed by search engines when indexing is enabled.

We do not intentionally publish private contact destinations, authentication credentials, identity evidence, internal moderation records or private messaging content.

Users should avoid including unnecessary personal or sensitive information in publicly submitted content.

Removing public content from Niyazmandiha does not guarantee its immediate removal from search engine caches or third-party copies.

8. Business Claims and Verification

We may process information submitted to establish a person’s authority to manage a business listing.

This may include contact details, business relationships, supporting documents and relevant claim history.

An approved business claim grants management access but does not necessarily establish independent identity verification or business accreditation.

Access to claim evidence is restricted to authorised personnel where reasonably necessary.

Business claim and verification records are intended to be retained while the claim or verification remains active and for up to 12 months after closure, rejection or transfer, subject to justified exceptions.

The relevant automated retention processes require implementation verification.

9. Community Ads Verification

Where Community Ads are enabled, advertisers must complete the email and mobile telephone verification required by the platform.

These checks help confirm access to the supplied contact methods.

They do not independently establish a person’s legal identity, professional qualifications, reliability or suitability.

Additional verification requirements may be introduced where necessary and will be explained before relevant information is collected.

Verification records are not intended for public display.

10. Messaging and Communications

Niyazmandiha may provide messaging features that allow users to contact eligible business owners.

We process information necessary to deliver, secure and manage those communications.

Access to private conversations is restricted according to the platform’s authorisation rules.

Where business management changes, a newly authorised manager does not automatically receive access to private conversations associated with a previous manager.

Where appropriate, communications may be reviewed following an authorised abuse report, complaint or legal requirement.

Messaging retention policy: Conversations and associated messaging records are intended to be retained for 24 months after the last relevant activity, subject to legal holds, investigations, privacy requests and other justified exceptions.

The messaging system includes retention-eligibility functionality, but automatic deletion has not yet been enabled. Records may therefore remain beyond the intended period until the deletion process is activated and verified.

11. Reviews and Account Deletion

Reviews and ratings form part of the public information available through Niyazmandiha.

Our policy is to preserve legitimate published reviews after a user deletes their account, where lawful and appropriate, while removing the reviewer’s identifying account information.

The intended anonymisation process includes:

• Replacing public reviewer attribution with Anonymous Reviewer.
• Removing the association with the deleted user account.
• Retaining the rating and review content where lawful.
• Reviewing review text for personal information that may require removal or redaction.

This anonymisation workflow is not yet fully aligned with the current account-erasure implementation, which may remove review text.

Until the intended process is implemented and verified, review content may be deleted during account erasure.

We will handle deletion and anonymisation requests in accordance with applicable data protection law.

12. Who We Share Information With

We may share information with service providers where necessary to operate Niyazmandiha.

Depending on the service and configuration, these may include:

IONOS: Website hosting and related infrastructure services.

Resend: Transactional email delivery, including account-related communications and messaging notifications.

Wordfence: Website security and threat protection.

Google Maps: Optional external mapping services, where enabled through the relevant privacy controls.

We may also disclose information to:

• Professional advisers where reasonably necessary.
• Competent authorities where legally required or permitted.
• Other parties involved in legitimate legal proceedings.
• Relevant users where information is intentionally shared through platform functionality.

We do not make private account information publicly available merely because a user registers with Niyazmandiha.

The precise processing arrangements, locations and retention practices of individual providers depend on their applicable services and agreements.

13. International Data Transfers

Some service providers may process personal information outside the United Kingdom.

Where Niyazmandiha is responsible for transferring personal data internationally, we will use appropriate safeguards where required by applicable law.

These may include recognised adequacy arrangements or approved contractual safeguards.

The specific arrangements depend on the provider and the countries involved.

14. Cookies and External Services

We use necessary cookies and similar technologies to support website operation, authentication, security and privacy preferences.

Optional technologies may include external mapping services and, in the future, analytics or advertising technologies.

Google Maps is treated as an optional external service and is subject to the applicable privacy controls.

Optional frontend analytics and production advertising are not currently active.

If these services are introduced, we will update the relevant privacy disclosures and implement the consent requirements that apply.

Further information is provided in our Cookie Notice.

15. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.

Our retention arrangements include the following periods and policies:

Information category	Retention period or policy
Account information	While active; intended inactivity process after 24 months plus a 30-day grace period
Published reviews	Intended to remain with anonymised attribution after account deletion, where lawful
Closed moderation reports	Configured retention of up to 730 days (approximately 24 months) after closure
Security and failed-login records	Target of 90 days
Transactional email delivery records	Target of 90 days
Business claims and verification records	While active plus up to 12 months after closure, rejection or transfer
Messaging records	24 months after last relevant activity
Consent preference cookie	Up to 12 months
Consent history	Intended retention of 24 months
Backups	Intended 30-day rolling retention

Not all retention and deletion workflows are fully operational. In particular, messaging deletion remains disabled, account inactivity deletion is not implemented, and certain retention periods require further configuration or verification.

Records may be retained longer where justified by legal obligations, ongoing investigations, fraud prevention, security incidents or legal claims.

Retention periods will be reviewed and updated where necessary to reflect actual processing practices and applicable law.

16. Inactive Accounts and Unmanaged Listings

Niyazmandiha’s intended account inactivity policy is:

1. An account reaches 24 months without qualifying activity.
2. The account holder receives a warning.
3. A 30-day grace period allows the user to reactivate the account.
4. If the account remains inactive, it becomes eligible for deletion, subject to applicable retention exceptions.

This automated process is not currently operational.

Business listings are treated separately from user accounts.

A legitimate business listing is not automatically deleted because its owner account becomes inactive or is deleted.

Where appropriate, Niyazmandiha may request confirmation of continued business management authority or refer an unmanaged listing for administrator review.

17. Your Data Protection Rights

Depending on applicable law and the circumstances, you may have the right to:

• Be informed about how your information is used.
• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Request restriction of certain processing.
• Object to processing based on legitimate interests.
• Request portability of eligible information.
• Withdraw consent where processing relies on consent.
• Exercise applicable rights relating to solely automated decisions with legal or similarly significant effects.

These rights are not absolute and may be subject to lawful exemptions.

We may request reasonable information to verify your identity before responding to a request.

Where UK GDPR applies, we will normally respond within one month, subject to legally permitted extensions.

To exercise your rights, contact privacy@niyazmandiha.com.

18. Automated Decisions and Profiling

Niyazmandiha may use automated systems to assist with spam detection, security checks, content screening and moderation prioritisation.

These tools may flag or temporarily restrict activity where appropriately configured.

We do not intend to rely solely on ambiguous automated classifications to impose permanent account bans.

Where applicable law provides additional rights concerning solely automated decisions with legal or similarly significant effects, those rights will be respected.

19. Children’s Privacy

Niyazmandiha accounts are intended for individuals aged 18 or older.

Individuals under 18 are not permitted to register accounts or publish Community Ads.

Public browsing is generally available without registration.

Where services involving children, such as tutoring, are advertised, arrangements must be made by a parent or legal guardian and remain subject to our safeguarding policies.

We do not intentionally provide registered accounts to children.

If we become aware that an account was created in violation of our age requirements, we may take appropriate action.

20. Information Security

We use technical and organisational measures intended to protect personal information against unauthorised access, misuse, alteration, loss and disclosure.

These may include:

• Account authentication controls.
• Access restrictions.
• Security monitoring.
• Website security software.
• Role-based permissions.
• Protected administrative access.
• Appropriate backup and recovery arrangements.

No internet-based service can guarantee absolute security.

We review our security measures as the platform develops.

21. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can investigate.

Privacy contact: privacy@niyazmandiha.com

Where UK data protection law applies, you also have the right to complain to the Information Commissioner’s Office (ICO).

ICO website: https://ico.org.uk

You may also have rights to complain to another competent supervisory authority depending on your location and applicable law.

22. Changes to This Notice

We may update this Privacy Notice to reflect changes in our services, processing activities, service providers or applicable legal requirements.

The current version will be published on Niyazmandiha with its last-updated date.

Where required, we will provide additional notice or request consent before introducing relevant changes.

23. Contact

For privacy enquiries, personal data requests or concerns about this notice, please contact:

Alki Labs Ltd — Niyazmandiha

Company number: 17253537
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Website: https://niyazmandiha.com
Email: privacy@niyazmandiha.com