Privacy Statement

Privacy policy details

Who this policy covers, and who we are

This policy applies to personal data collected through sarrif.com. We are a privately held firm, operating Sarrif Consulting and Sarrif Trading. We conduct business and work with clients and individuals in several countries in the Middle East. For the purposes of this policy, and to the extent each law applies to our activities, we are the data controller under both Jordan's Personal Data Protection Law No. 24 of 2023 and the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

What personal data we collect

We may collect personal data in two ways. First, directly from you, when you use the form on our Contact page: your name, email address, the subject you select, and the message you write. Second, automatically, in the way that is standard for any website: our hosting provider's servers log basic technical information, such as IP address, browser type, and the date and time of a request, as part of running the site. sarrif.com does not use cookies, analytics scripts, or advertising trackers, and does not maintain a database of visitor accounts or profiles; the contact form's contents are simply emailed to us and are not otherwise stored on the site.

This site loads one third-party resource: the Montserrat typeface, served from Google's font servers. Loading it necessarily shares your IP address with Google as a normal part of that request, in the same way it would with any website that uses a font delivered this way.

How we use your data, and on what legal basis

We use the information submitted through the contact form only to respond to your enquiry, whether about the matter you raise. We rely on your consent, given by submitting the form, and, where relevant, on our legitimate interest in responding to enquiries directed to us and operating our website securely. We do not use this data for advertising, profiling, or automated decision-making, and we do not sell personal data to anyone.

Who we share it with

We use Zoho for email hosting, so a message you send through the contact form is delivered to and stored in our Zoho mailbox in order for us to read and reply to it. Our website hosting provider processes standard server logs as described above. Google, as noted, receives your IP address when the site's typeface loads. None of these providers are given your data for their own independent use; each processes it only to provide the service we rely on. Because these providers operate infrastructure outside Jordan and the UAE, your data may be processed in other countries as a normal part of using these services; we choose established providers and expect them to maintain appropriate safeguards for personal data they process on our behalf.

How long we keep it

We keep contact form submissions for as long as reasonably necessary to address your enquiry and for a limited period afterward for our own record-keeping, then delete or archive them. We do not keep personal data indefinitely or for purposes unrelated to why it was submitted.

Your rights

Depending on which law applies to you, you generally have the right to ask us: what personal data we hold about you and why; to correct data that is inaccurate or incomplete; to have your data deleted; to restrict or object to how we use it; and, where applicable, to receive a copy of it in a portable format. Jordan's law also gives you the right to be notified if a breach affecting your data is likely to cause you harm, and to pursue civil remedies for a violation of the law; the UAE's law gives you a corresponding right to object to decisions based solely on automated processing that would significantly affect you. To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you may also have the right to complain to the relevant data protection authority in Jordan or the UAE.

Security

We take reasonable technical and organizational measures to protect the personal data we hold, including sending contact form mail over an authenticated, encrypted connection rather than an open one. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to keep your data appropriately protected against loss, misuse, or unauthorized access.

Children's privacy

This website is intended for businesses and individuals seeking our services, not for children. We do not knowingly collect personal data from children, and if we learn that we have, we will delete it.

Changes to this policy

We may update this policy from time to time, for example if our practices change or the law requires it. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review it occasionally if you have an ongoing relationship with Sarrif.

Contact us

For any question about this policy or to exercise your rights, email info@sarrif.com, or write to sarrif.com at P.O. Box 5133, Amman, 11183, Jordan.