Who we are
Our official website, https://irq-gate.iq, is operated by Iraq Gate for Internet Services LLC (in Arabic: شركة بوابة العراق لخدمات الانترنت محدودة المسؤولية), trading as Iraq Gate (“Iraq Gate”, “we”, “us”), Baghdad – Rabee St. 633-29, B29, Second Floor, P.O. Box 88066 IQ – Baghdad, Iraq. We are responsible for the personal data described in this policy.
For any privacy question or request, email info@irq-gate.iq.
In short
- We collect what you send us through the contact form, support tickets or email, and use it to answer you and to provide the support or services you ask about.
- The website uses essential cookies and, only if you allow it, Google Analytics to understand how the website is used. It does not use advertising or social-media tracking. Details: Cookie Policy.
- We do not sell your personal data.
- We keep contact inquiries for 12 months and support tickets for 24 months after they are closed, unless a record has to be kept longer under a documented hold.
What we collect
Contact form
Your name, email address and message, the type of inquiry, and optionally your company and phone number. We also record the language of the form you used.
Support tickets
Your name, email address, the category, subject and description of the issue, any replies you add later, and optionally your company and phone number. We create a ticket reference and a private tracking link for you. We store only a fingerprint (cryptographic hash) of the secret part of that link, not the link itself.
Collected automatically with a form
When you submit a form, we store the date and time, a keyed hash of your IP address (not the address itself) and the first 250 characters of your browser’s user-agent string. We use these to detect and investigate spam and abuse.
When you browse the website
Like any website, our hosting server and Cloudflare, which delivers and protects the website, receive technical data with each request, such as your IP address, the page requested, the referring page, and your browser and device type. This data is used to deliver the website, protect it against attacks and fix faults, and it is recorded in server logs. We also use essential cookies, described in the Cookie Policy.
Website analytics (only with your consent)
If you allow analytics cookies, Google Analytics records how you use the website:
- the pages you view, without anything after a “?” in their address;
- the website you came from, reduced to its main address;
- your country and region (not your city);
- your browser, device type and language;
- how long pages are open and how far they are scrolled;
- whether a contact inquiry was saved, or a phone or email link was clicked.
This is linked to a random identifier in a cookie, not to your name or contact details. We never send Google Analytics anything you type into our forms. See the Cookie Policy.
Emails
If you email us, we receive your address and whatever you include in the message.
What we do not use
The website does not use advertising tools, social-media pixels or plugins, embedded maps or videos from other sites, or fonts from external font services. It uses Google Analytics only with your consent, as described above, and not for advertising.
How we use it
- To answer your inquiry and, if you ask for one, to prepare a proposal or quotation.
- To handle support tickets, including emailing you a confirmation with your private tracking link and notifying you when our team replies.
- To run and protect the website, for example by limiting repeated submissions, detecting automated spam and investigating misuse.
- To understand and improve the website (only with your consent to analytics), using aggregated statistics about which pages are visited and whether visitors contact us.
- To keep a record of our communication with you, so that our team can follow up consistently.
- To meet legal obligations and, where necessary, to establish, exercise or defend legal claims.
We do not use your form details to send you marketing, and we do not make automated decisions about you.
Who receives it
- Our staff who handle inquiries and support. Access to the admin system is limited to authorised accounts.
- GoDaddy, our website hosting provider, which provides the server on which the website and its database run. The hosting server is located in Europe.
- Cloudflare, which provides the domain name (DNS) service for our website and delivers and protects it (content delivery and security). Visits to the website pass through Cloudflare’s network, so Cloudflare processes request data such as IP addresses.
- Google, whose Google Workspace service we use for our business email (it sends, receives and stores our email, including form notifications, ticket confirmations and support emails), and, only if you allow analytics cookies, whose Google Analytics service provides our website statistics.
- Authorities or advisers, where the law requires it or where it is necessary to establish, exercise or defend legal claims.
Where data is processed. Our website hosting server is located in Europe. This describes where the hosting server is; it does not mean that all processing stays in Europe. Email, content delivery, security services, backups and other processing may take place in other countries, including countries outside Europe, depending on the provider. Google Analytics data is processed by Google, including in the United States. We share only what is needed for each purpose.
How long we keep it
| Data | Kept for |
|---|---|
| Contact inquiries, with our internal notes and notification records | 12 months after the inquiry is closed |
| Support tickets, with messages, replies, internal notes, history and notification records | 24 months after the ticket is closed |
| Inquiries and tickets that are still open | While they remain open. If a closed record is reopened, its retention period starts again when it is closed. |
| Copies of form notifications and of our correspondence with you in our business mailbox | The same period as the related inquiry or ticket |
| Session data (see Cookie Policy) | Up to 2 hours after your last activity |
| Anti-abuse counters (keyed hashes, not your details) | Up to 24 hours |
| Application error logs | 14 days |
| Web server access logs (IP address, page requested, browser) | Up to 90 days, for security and troubleshooting |
| Google Analytics data (only with consent), kept and deleted by Google under our property settings | Event data: 14 months. Data linked to the random identifier: 14 months after your most recent visit. Aggregated reports may be kept longer. |
How deletion works. The periods above are our retention policy. Session data and anti-abuse counters expire automatically, and application error logs, web server access logs and routine backups are deleted automatically when their period ends. Contact inquiries, support tickets and the copies in our mailbox are not yet deleted automatically: we review them regularly and delete those whose period has ended.
Documented holds. If a record or log is needed for a contract, an actual or expected dispute, a security incident or a legal obligation, we may keep it longer under a documented hold. A hold records the reason, who placed it and when. The record is released once the reason no longer applies.
Backups. We keep protected routine daily backups to recover from faults. They are kept for 14 days and then replaced automatically, so a record that has been deleted may remain in them for up to 14 days.
Other protected archives. Separately, we may keep a small number of protected archives outside this 14-day cycle: a short-term copy made just before an update so that the update can be reversed, archives of systems we have retired, and copies kept as evidence of a security incident. Each is kept only while its documented reason applies and is then deleted. We do not use backups or archives for any other purpose, and if we ever restore one, we delete again any records that had already been deleted.
Security
We use reasonable technical and organisational measures to protect personal data. These include encrypted connections (HTTPS), restricting access to authorised staff, strong passwords and limits on sign-in attempts for our admin accounts, private ticket links that we store only as fingerprints, and limits on repeated form submissions. No website or email system can be guaranteed to be completely secure, so please do not send passwords or other highly sensitive information through the forms.
Your requests
You can ask us to give you a copy of the personal data we hold about you, to correct it, or to delete it. Email info@irq-gate.iq and, if possible, include the inquiry or ticket reference. We aim to respond within 30 days.
- Before acting on a request, we will verify your identity, for example by replying to the email address that you used with us.
- We may need to keep some data, or decline part of a request, where we have to keep it for a contract, a dispute or a legal obligation. If so, we will tell you, unless we are not allowed to.
- You may also have other rights under the laws that apply to you.
Because Google Analytics data is linked only to a random cookie identifier, we usually cannot find it from your name or email address. You can stop it at any time with “Cookie settings”, which also deletes its cookies.
You can change your cookie choices at any time using “Cookie settings” at the bottom of every page.
Children
This website is intended for businesses and organisations and is not directed at children. Please do not submit personal data about children through it.
Changes to this policy
We may update this policy, for example when we add a service or change how we handle data. The date at the top of this page shows when it last changed. If we make important changes, we will make them clear on this page.
Contact
Iraq Gate for Internet Services LLC (Iraq Gate), Baghdad – Rabee St. 633-29, B29, Second Floor, P.O. Box 88066 IQ – Baghdad, Iraq. Website: https://irq-gate.iq. Email: info@irq-gate.iq. Phone: +964 780 929 5546.