Last Updated: 13 September 2026
Rahmah Connect Ltd (“Rahmah Connect”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share and protect personal information when you:
Rahmah Connect is an online marketplace connecting customers with independent service providers. Our initial service categories include Companionship, Home Help, Cleaning and Meal Preparation. This policy applies to customers, prospective customers, service providers, prospective providers, website visitors, Founding Members, representatives of partner organisations and other individuals who interact with Rahmah Connect.
For the purposes of UK data protection law, the data controller is: Rahmah Connect Ltd Company number: 17403477 Registered office: 71–75 Shelton Street Covent Garden London WC2H 9JQ United Kingdom Website: rahmahconnect.com For privacy enquiries, please contact: support@rahmahconnect.com General enquiries: info@rahmahconnect.com We may provide a dedicated privacy or data-protection email address in the future. If we do, this policy will be updated accordingly.
The information we collect depends upon how you interact with Rahmah Connect. A. Account and contact information This may include:
B. Customer information When you use Rahmah Connect to find or book a provider, we may collect:
C. Provider information If you apply to become or operate as a provider, we may collect:
We will aim to collect only verification information reasonably necessary for the relevant purpose.
Protecting trust and safety within the marketplace is important to Rahmah Connect. Providers may therefore be required to undergo identity and other verification checks. Depending on the service offered, this may include:
Not every provider will necessarily be subject to the same checks. The verification required will depend upon the nature of the service and applicable requirements. DBS and related criminal-offence information receives additional protection under UK data protection law. Criminal-offence data requires an Article 6 lawful basis and an additional lawful condition under the Data Protection Act 2018 where an organisation does not process it under official authority. Rahmah Connect will determine and document the applicable lawful condition before processing such information and will apply appropriate safeguards. Where possible, we may record the outcome/status of an appropriate check rather than retaining a complete copy of a certificate for longer than necessary. Access to identity and DBS-related information will be restricted to authorised personnel and service providers who reasonably require access.
Some information you choose to provide may be particularly sensitive. For example, when arranging a service, you may choose to tell us or a provider about:
Health information and information revealing religious or philosophical beliefs are examples of special-category personal data under UK GDPR. Rahmah Connect will not require you to provide sensitive information unless it is genuinely necessary for a particular purpose. Where we rely upon your explicit consent to process optional special-category information, we will seek that consent through an appropriate affirmative action and explain the relevant purpose. You may withdraw consent where consent is the basis relied upon. Withdrawal will not affect processing lawfully carried out before withdrawal. In certain circumstances, another lawful condition may apply, for example where processing is necessary for the establishment, exercise or defence of legal claims or to protect vital interests where the legal requirements are met. The ICO confirms that processing special-category information requires an Article 6 lawful basis and an applicable Article 9 condition.
Sometimes a customer may arrange assistance for another person, such as a relative. If you give us personal information about another individual, you should only provide information you are entitled to provide and should, where appropriate, make that person aware that their information may be processed through Rahmah Connect. We may provide additional privacy information directly to that individual where required. Please do not provide unnecessary sensitive information about another person.
Payments made through Rahmah Connect are expected to be processed using Stripe and Stripe Connect. Rahmah Connect may receive information relating to:
Payment providers may collect payment-card or bank information directly. Rahmah Connect does not intend to store complete payment-card details where those details are handled directly by the payment processor. Payment providers may process personal information as independent controllers or processors depending upon the particular processing activity. Their own privacy information may also apply.
Where Rahmah Connect permits an authorised offline payment method, we may record information about the booking, payment method, applicable platform fees, invoices and payment status. This information may be used for:
When you use our website or platform, we may automatically receive technical information including:
Please see our Cookie Policy for more information.
Subject to the choices and consent required by applicable law, we intend to use technologies including:
These may help us understand how Rahmah Connect is used, measure campaigns and improve our marketing. Additional analytics or advertising providers may be introduced in the future. Where consent is required, non-essential tracking will be controlled through our cookie-consent mechanism. Our Cookie Policy provides further information.
We may obtain personal information: Directly from you, such as when you register, create a profile, make a booking, apply as a provider or contact us. From another Rahmah Connect user, for example where someone arranges support on behalf of a family member. From service providers, such as identity-verification, payment, security and technology providers. From public or official sources, where appropriate and lawful for verification or fraud-prevention purposes. Through your use of the platform, including booking, transaction, communication and technical information. Through cookies and similar technologies, subject to applicable consent requirements.
Different processing activities may rely upon different lawful bases. Purpose Typical information Lawful basis Create and administer customer accounts Identity, contact and account data Contract Operate provider applications/accounts Identity, profile and provider data Contract and/or steps before entering a contract Facilitate bookings Customer/provider/booking information Contract Process payments, commissions and refunds Transaction information Contract and legal obligations where applicable Provide customer support Account, booking and communication data Contract and/or legitimate interests Verify providers Identity, qualifications and verification information Legitimate interests, contract and/or legal obligation as applicable Prevent fraud and protect platform security Account, device, transaction and risk information Legitimate interests, recognised legitimate interest or legal obligation where applicable Handle complaints and disputes Booking, communications and evidence Contract, legitimate interests and/or legal claims Maintain financial/tax records Transaction and account information Legal obligation Improve Rahmah Connect Usage and feedback information Legitimate interests or consent where required Analytics Website/device information Consent or another permitted basis/exemption where applicable Electronic marketing Contact/marketing information Consent or legitimate interests where permitted Advertising technologies Online identifiers/activity Consent where required Protect legal rights Relevant account, transaction and communication data Legitimate interests and/or legal obligation Respond to authorities Relevant information Legal obligation or other applicable lawful basis The ICO requires organisations to determine their lawful basis before processing and to tell people both the purpose and lawful basis. Where we rely upon legitimate interests, those interests may include operating and improving Rahmah Connect, maintaining platform safety, preventing misuse, protecting users, resolving disputes and protecting our business and legal rights. We will consider whether those interests are overridden by your rights and interests.
Certain provider information is intended to be displayed publicly or to registered customers so they can evaluate providers. This may include:
We will not publicly display identity documents, proof-of-address documents, DBS certificates, bank information or other private verification documentation. A verification badge should not be interpreted as a guarantee of future conduct or service quality.
Customers who complete eligible bookings may be permitted to leave reviews about providers. Reviews may display the reviewer's first name, initials or another limited identifier alongside the review, depending on the platform design. We may process reviews and related information to:
We may remove or restrict reviews that breach our review rules or applicable law. We will not remove a genuine review merely because it is negative.
Rahmah Connect may provide tools allowing customers and providers to communicate. Where communications occur through our platform, we may process and, where appropriate, retain communications for purposes including:
Users should avoid sharing unnecessary sensitive information through messages.
We may share personal information where reasonably necessary with categories of recipients including: Other Rahmah Connect users — where necessary to arrange and provide a booked service. Payment providers — including Stripe/Stripe Connect. Identity and verification providers — where used to conduct appropriate provider checks. Cloud and hosting providers — used to operate and secure our systems. Email and communications providers — including services used for transactional and operational communications. Analytics and advertising providers — such as Google, Meta and TikTok, subject to applicable consent requirements. Professional advisers — including lawyers, accountants, insurers and auditors. Regulators, courts, law-enforcement agencies and public authorities — where disclosure is required or permitted by law. Business purchasers/investors — where Rahmah Connect is involved in a genuine proposed investment, financing, merger, acquisition, reorganisation or sale, subject to appropriate safeguards. We do not sell personal information to advertisers.
Some technology and service providers used by Rahmah Connect may process information outside the United Kingdom. Where personal information is subject to a restricted international transfer, we will use an appropriate lawful transfer mechanism where required, such as:
Where required, appropriate transfer risk assessments or other safeguards will be used. The ICO requires privacy information to explain applicable safeguards for restricted transfers where an adequacy decision is not relied upon.
We do not intend to keep personal information indefinitely. Retention periods depend on the type of information, why it was collected, legal requirements, dispute/claims periods and security needs. As an initial framework: Information Indicative approach Active account information While account remains active Closed account information Limited period after closure where necessary for legal, fraud, dispute or regulatory purposes Booking/transaction records Generally up to 6 years where required for accounting, tax or legal purposes Financial invoices/records Normally retained in accordance with applicable UK tax/accounting requirements Customer support/dispute records For the period reasonably necessary to resolve the matter and manage legal risk Marketing consent/preferences While relevant, plus records necessary to demonstrate consent/opt-out Identity verification documents Only as long as reasonably necessary for verification/security purposes DBS/criminal-offence information Subject to a specific documented retention policy and kept no longer than necessary Cookie information According to the periods disclosed through our cookie-management system These are intended as operational principles rather than a promise that every item will always be retained for precisely the same period. The ICO requires organisations either to state retention periods or explain the criteria used to determine them.
We use appropriate technical and organisational measures designed to protect personal information against:
Measures may include access controls, authentication, encryption where appropriate, secure infrastructure, monitoring, backups, staff/access restrictions and security procedures. No internet-based service can guarantee absolute security. Users are responsible for keeping their account credentials confidential and should notify us promptly if they believe their account has been compromised.
Depending upon the circumstances and lawful basis, UK data protection law may give you rights including:
These rights are not absolute and may depend upon the circumstances and lawful basis. To exercise a privacy right, contact: support@rahmahconnect.com We may need to verify your identity before fulfilling a request. Your right to object Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing in certain circumstances. You also have the right to object at any time to the use of your personal information for direct marketing. The ICO specifically requires the right to object to be brought clearly and separately to people's attention.
Where permitted, we may contact you about:
We will comply with applicable rules concerning electronic marketing. Where consent is required, we will seek it. You can unsubscribe from marketing emails using the unsubscribe mechanism provided in the message or by contacting us. Stopping marketing does not prevent us sending service communications necessary for your account or bookings, such as booking confirmations, security notices, payment information or changes materially affecting our services.
If you join our Founding Member programme, waiting list or pre-launch registration, we may use the information you provide to:
Where marketing consent is required, it will be obtained separately as appropriate.
Rahmah Connect accounts are intended for persons aged 18 or over. Children must not create accounts. A customer may in some circumstances arrange an appropriate service relating to a child, but the adult account holder remains responsible for the booking. Where a service involves children, additional provider-verification, safeguarding or eligibility requirements may apply. We will only process children's information where there is an appropriate lawful basis and will seek to minimise the information collected.
Information disclosed through Rahmah Connect may occasionally indicate a serious risk to an individual or another person. Where permitted or required by law, we may use or disclose relevant information to protect individuals, investigate serious safety concerns, prevent or detect unlawful activity, comply with legal obligations or establish, exercise or defend legal claims. Any such processing will be assessed according to the circumstances and applicable legal requirements. Rahmah Connect is not an emergency service. If someone is in immediate danger, users should contact the appropriate emergency services.
Rahmah Connect may use automated tools to assist with matters such as fraud detection, security, risk indicators, matching or platform administration. We do not currently intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals without providing the protections required by law. If this changes, we will update our privacy information and implement the applicable safeguards.
Where a proposed processing activity is likely to result in a high risk to individuals' rights and freedoms, Rahmah Connect will assess whether a Data Protection Impact Assessment (DPIA) is required. This is particularly relevant when considering new uses of sensitive information, criminal-offence information, extensive profiling or new technologies. The ICO specifically identifies high-risk processing as a trigger for considering/undertaking a DPIA.
If you have a concern about how we handle your personal information, please contact us first so that we can investigate: support@rahmahconnect.com You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator. Information Commissioner's Office We would appreciate the opportunity to address your concerns directly, but your right to contact the ICO is not affected.
We may update this Privacy Policy as Rahmah Connect develops, including when:
The latest version will be published on rahmahconnect.com, and the “Last updated” date will identify when it was most recently revised. Where required, we will provide additional notice or seek fresh consent for a material change.
For questions about this Privacy Policy or your personal information: Rahmah Connect Ltd Company number: 17403477 71–75 Shelton Street Covent Garden London WC2H 9JQ United Kingdom Privacy/support enquiries: support@rahmahconnect.com General enquiries: info@rahmahconnect.com
For caring individuals and local providers who want to build meaningful relationships with local families needing care.
For mosques, local community hubs, charities, and support groups looking to connect their vulnerable cohorts with help.
Book trusted services. Earn reward points. Unlock exclusive member benefits. Support your community.
© 2026 Rahmah Connect Ltd. All rights reserved.
