Privacy Policy

1. Who we are

Al-Badyea United is a manpower recruitment and employment agency licensed by the Iraqi Ministry of Labor and Social Affairs (License №35), founded in 2008 and headquartered in Basra, Iraq.

• Address: Minnawi Basha, Cairo Street, near the Minawi Basha Hotel, Basra, Iraq
• Email: ceo@albadyeaunited.com
• Phone / WhatsApp: +964 773 050 0003 / +971 50 651 6099

For the purposes of EU/UK data protection law, Al-Badyea United is the data controller of personal data you submit through this website.

2. What personal data we collect

We only collect data you actively submit, plus a minimal amount of technical data needed to operate the site:

• Contact form submissions: name, email, phone number, the content of your message, and any documents you choose to attach.
• Direct correspondence: emails or messages you send us via WhatsApp, Instagram, phone, or email.
• Analytics data (only after your consent): anonymised IP address, browser type, pages viewed, referring URL, approximate location (country/city level).
• Server logs (technical): IP address, request URL, timestamp — kept for up to 30 days for security and abuse prevention.

3. How we use your data

• Respond to your inquiries about manpower, work permits, visas or partnership opportunities.
• Provide quotes, documentation and contracts when you become a client.
• Improve our website and services using anonymised analytics (only with your consent).
• Comply with our legal obligations under Iraqi labor law and applicable regulations.
• Protect the security of our website (rate limiting, abuse detection).

4. Legal basis for processing

• Consent: for analytics cookies, marketing emails (when applicable), and any optional data.
• Contract: when we process your data to deliver services you have requested.
• Legitimate interest: for basic website security and limited operational logs.
• Legal obligation: for record-keeping required by Iraqi labor law and the Ministry of Labor and Social Affairs.

5. Who we share data with

We do not sell your personal data. We share data only with the following limited categories of recipients:

• Hosting provider: HostGator (United States), which stores the website and its database.
• Google Analytics: for anonymised website analytics, only after your consent. IP addresses are anonymised before processing.
• Iraqi Ministry of Labor and Social Affairs / Ministry of Interior: when required for processing work permits, residence visas, social-security filings or other legally mandated submissions on behalf of clients.
• Third-country recruitment partners: when sourcing candidates from one of our 11 source countries, limited to data strictly needed for vetting and visa processing.
• Public authorities: only when required by Iraqi law or a valid legal request.

6. International data transfers

Because Al-Badyea United operates in Iraq while the website is hosted in the United States and uses Google Analytics, your personal data may be transferred outside your country of residence. We rely on standard contractual clauses or equivalent safeguards where required, and we minimise the personal data exposed to such transfers.

7. How long we keep your data

• Contact form messages: kept while we have an active conversation, then archived for up to 24 months for follow-up; deleted on request.
• Client records: kept for the duration of the engagement plus the period required by Iraqi labor law (typically 5 years).
• Analytics data: retained at the Google Analytics default of 14 months, then automatically purged.
• Server logs: up to 30 days.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate data;
• Ask us to delete your data ("right to erasure");
• Object to processing or ask us to restrict it;
• Receive a copy of your data in a portable format;
• Withdraw consent at any time, with effect for the future;
• Lodge a complaint with a competent supervisory authority.

To exercise any of these rights, write to ceo@albadyeaunited.com. We respond within 30 days.

9. Cookies

This website uses a small number of cookies. The full list, what each one does, and how to control them is described in our Cookie Policy.

10. Children

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

11. Security

The website is served exclusively over HTTPS with HSTS, runs a Web Application Firewall, enforces a strict Content Security Policy and protects the admin area with two-factor authentication. We review security configuration regularly.

12. Changes to this policy

If we make material changes we will update the "Last updated" date at the top and, where appropriate, notify you by email or via a notice on the website.

13. Contact

Questions about this policy or your data: ceo@albadyeaunited.com.