Privacy notice

This notice explains what personal data Soran Hourami Consultancy collects through this website and in the course of its work, why it is collected, and what rights you have over it. It is written in plain English on purpose.

Who is responsible for your data

Soran Hourami Consultancy is an independent property consultancy run by Soran Hourami, based in the United Arab Emirates and working with clients in the United Kingdom and internationally. I am the data controller for the personal data described here.

For anything about this notice or about your data, email hello@soran.uk.

What I collect

There are only two routes by which I hold personal data.

• When you contact me. This site has no contact form. If you email hello@soran.uk, I receive whatever you choose to put in that email: typically your name, your email address, and details of your property, portfolio or the decision you are weighing up. If we go on to work together, I will hold the information needed to do that work, which may include property addresses, tenancy and lease details, financial and performance figures, and correspondence.
• When you visit this site. My hosting provider records standard technical information for every request: IP address, browser and device type, the page requested, and the date and time. This is ordinary server logging, used to keep the site available and secure. The same provider also gives me aggregated visitor statistics built from that request data, such as how many people viewed each page, which country they came from, and which site or search engine sent them. I see those figures as totals and trends. I do not use any of it to build a profile of you or to identify you personally.

Cookies, analytics and tracking

This site sets no cookies. It stores nothing on your device, runs no advertising or tracking pixels, embeds nothing from social networks, and does not follow you to other websites.

The visitor statistics described above are measured by my hosting provider, Cloudflare, at the point your browser requests a page. They are cookieless, they involve no device fingerprinting, and they are reported to me in aggregate rather than as individual browsing histories. Because nothing is stored on or read from your device for this purpose, no consent is required and you are not being asked to click through a cookie banner.

Why I use it, and on what legal basis

• To reply to your enquiry and discuss possible work. My legitimate interest in responding to someone who has chosen to contact me, and taking steps toward a contract.
• To carry out consultancy work for clients. Performance of our contract, or my legitimate interest in delivering the engagement where the client is an organisation.
• To keep the site available and secure. My legitimate interest in operating a functioning, protected website.
• To understand how this site is used. My legitimate interest in knowing which pages are useful and where visitors come from, measured in aggregate so the impact on your privacy is minimal.
• To keep proper business records. Compliance with legal, tax and professional obligations.

I do not sell personal data, share it for anyone else's marketing, or add you to a mailing list off the back of an enquiry.

Who else handles it

I keep the list of third parties deliberately short. Each acts as a service provider to me, under its own security and data protection commitments.

• Cloudflare hosts this website, serves and protects it worldwide, and provides the aggregated, cookieless visitor statistics described above.
• Fastmail provides the email service behind hello@soran.uk.
• Professional advisers and authorities where I am required or permitted to disclose information, for example to accountants, insurers, or in response to a valid legal obligation.

International transfers

Because I am based in the United Arab Emirates and my providers operate global infrastructure, personal data you send me will be accessed in the UAE and may be stored or processed outside the United Kingdom and the European Economic Area. Where data protection law requires it, such transfers are made under appropriate safeguards, including the standard contractual clauses or equivalent terms offered by the providers above. If you would like more detail on the safeguards that apply to your data, just ask.

How long I keep it

• Enquiries that do not become work: kept for up to two years, in case you come back to the conversation, then deleted.
• Client records: kept for the duration of the engagement and then for as long as needed to meet tax, legal and professional record-keeping requirements, normally seven years from the end of the engagement.
• Server logs: retained for a short period by the hosting provider, typically days to a few weeks.
• Visitor statistics: held by Cloudflare for a limited reporting window and only ever in aggregate. I keep no separate copy and no per-visitor records.

Your rights

Depending on where you are based, you have some or all of the following rights over your personal data: to be told what I hold and receive a copy of it, to have inaccurate data corrected, to have data deleted, to restrict or object to how it is used (including any use based on legitimate interests), to receive it in a portable format, and to withdraw consent where consent was the basis for using it.

To exercise any of these, email hello@soran.uk. I will respond within one month. There is no charge, and I will not ask you to justify the request.

If you are in the United Kingdom and unhappy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. If you are in the European Economic Area, you can complain to your national supervisory authority. I would appreciate the chance to put things right first, but you are not obliged to come to me before going to a regulator.

Security

Correspondence and client material are held in access-controlled, password-protected accounts with two-factor authentication enabled, and this site is served over HTTPS. No system is perfectly secure, so please avoid sending highly sensitive material by unencrypted email. If you need a more secure route for documents, ask and I will arrange one.

Children

This is a business-to-business and private-client service that is not directed at children, and I do not knowingly collect personal data from anyone under 16.

Changes to this notice

If how I handle personal data changes, for example if I add a contact form to this site or start using a different measurement tool, I will update this page and revise the date at the top. Material changes affecting existing clients will be communicated directly.

← Back to the site