1. Who is responsible for the data?
The data controller for this survey is Karim DW, Sweden, operating the Amana Home research project personally.
2. What this notice covers
This notice covers personal data collected through the Amana Home survey and any optional contact details provided by respondents.
The survey is used to evaluate demand, affordability, trust expectations, Sharia-compliance expectations, and product-design requirements for a possible riba-free home-financing service in Sweden.
This survey does not create a customer relationship, financing application, credit assessment, mortgage offer, or eligibility decision.
3. What data may be collected
| Category | Examples | Required? |
|---|---|---|
| Survey profile data | City, household situation, income range and related profile information. | Some questions may be required for validation. |
| Housing and affordability data | Current housing situation, housing cost, purchase price range, down-payment readiness, expected financing amount and comfortable monthly payment. | Some questions may be required for validation. |
| Religious and product-preference data | Importance of avoiding riba, preference for Sharia-compliant financing, desired trust signals and product features. | Some questions may be required for validation. |
| Open-text responses | Concerns, obstacles, comments and feature suggestions written by the respondent. | Optional. |
| Optional contact data | Email address and phone number if the respondent asks to be contacted and gives consent. | Optional and consent-based. |
| Technical and source data | Submission timestamp, survey version, campaign source or UTM tags, and basic security logs if enabled in the live version. | Used for integrity and analytics. |
4. Why the data is used and legal basis
Personal data should only be processed for clear and limited purposes. For this survey, the intended purposes are:
- to understand whether there is demand for a riba-free home-financing alternative in Sweden;
- to assess affordability ranges, readiness, barriers and trust requirements;
- to design a possible first version of the service;
- to prepare aggregated, non-identifying insights for product validation and investor discussions;
- to contact respondents only where they have asked to be contacted and have provided contact details.
Lawful basis
The survey response is collected on the basis of the respondent's voluntary participation and, where appropriate, the project's legitimate interest in conducting early-stage product research. Optional contact details are processed on the basis of consent.
Respondents can refuse to provide contact details and can still complete the survey unless a particular answer is needed for the survey logic. Consent for contact can be withdrawn at any time.
5. Sensitive context and research safeguards
The survey may ask about religious-finance preferences, income ranges and household circumstances. These answers can feel sensitive even when collected as ranges rather than exact values.
Amana Home applies the following safeguards:
- collect only what is necessary for the stated research purpose;
- avoid collecting national identity numbers, bank account details, credit files, exact income documents or property documents at survey stage;
- separate contact details from research analysis where practical;
- use aggregated or de-identified data for reporting wherever possible;
- limit access to raw responses to Karim DW only.
6. Storage, security and service providers
Survey responses are submitted through an encrypted connection to a Supabase Edge Function and stored in Supabase Postgres. The Supabase project is hosted in the North EU (Stockholm) region.
The public website is hosted by Vercel. Cloudflare Turnstile is used to reduce spam and automated abuse. These providers may process limited technical data needed to deliver the website, protect the form and store submitted responses.
Where service providers process personal data on behalf of Amana Home, appropriate data processing terms should apply. If a provider transfers data outside the EU/EEA, appropriate safeguards should be used, such as EU Standard Contractual Clauses where applicable.
7. How long data is kept
Amana Home keeps data only as long as needed for the research purpose:
- Survey responses: up to 24 months after collection, unless deletion is requested earlier.
- Optional contact details: until the respondent withdraws consent, the contact purpose is complete, or 24 months have passed - whichever happens first.
- Aggregated/de-identified research outputs: may be kept longer because they should no longer identify individual respondents.
- Security logs: only as long as reasonably necessary for security, troubleshooting and abuse prevention.
8. Your data protection rights
Depending on the situation and legal basis, respondents may have the right to:
- receive information about how their personal data is used;
- request access to their personal data;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent for optional contact at any time;
- lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).
9. Contact and complaints
To ask questions, withdraw contact consent, or exercise data protection rights, contact: amanah.home26@gmail.com.
Respondents in Sweden can also contact or complain to IMY. More information is available from IMY's data subject rights guidance.
For general GDPR information, see the IMY GDPR guidance for organisations and the European Commission data protection portal.