Effective 27 September 2026. This notice explains how Ztechify handles information through its website and business services.
Operator and contact. Ztechify is operated by Zakarya Dara Abdulkhaleq, trading as Ztechify, Erbil, Iraq. Privacy enquiries: [email protected].
What we handle. A website enquiry supplies the name, email, subject and message the sender enters. The public form sends those details to our email mailbox after Google reCAPTCHA v3 verification; it does not save them in a website enquiry table. Client engagements may involve contact details, project files, invoices, payments and service communications. The private dashboard stores authorized user, client, project, invoice, payment and security/audit records. Shop and office systems hold their own customers' data.
Why we use it. We use information to answer enquiries and replies, deliver agreed work, send invoices and service messages, protect systems and maintain necessary business records. We do not describe newsletters or promotional emails as a current practice. If that changes, we will review the notice and any required permissions first.
Website choices. Essential security and session features operate without an optional choice. Google Analytics loads only when a visitor opts into Analytics; Tawk.to live chat loads only when a visitor opts into Live chat. Rejecting an optional tool prevents its script loading on a fresh visit. Choices are saved in local browser storage and can be changed through the site's Privacy choices control. Once a provider has set a cookie, withdrawing a choice may require reloading and the browser or provider may retain an existing cookie until it expires or is cleared. The contact form calls Google reCAPTCHA v3 when submitted to reduce spam. The form links to Google's privacy information and terms.
Analytics. Google Analytics may process visit events, device/browser and approximate-location information only after a visitor opts in. The account owner confirmed on 27 September 2026 that user and event retention are set to two months, Google Signals and user-provided data collection are off, and no Google Ads account is linked. Google's retention controls do not erase all aggregate standard reports. We do not use Analytics for advertising campaigns.
Chat and outside links. Tawk.to handles live-chat messages after the visitor enables it. Tawk keeps transcripts in the account until they are deleted there. We are preparing a recurring review to remove chats older than 12 months except when needed for an active project or dispute; this is not yet an operating automatic deletion period. Opening a WhatsApp or social link takes the visitor to that provider, which handles information under its own notice.
Client-system access. Ztechify does not routinely inspect a shop's or office's customer records. A client-authorized support login, platform administrator, hosting account, database-owner credential or backup may nevertheless technically allow access. We use privileged access only when authorized and reasonably required for support, maintenance or security, limit access to what is needed, and record material access where practicable. Each client agreement should identify hosting and access responsibilities and any separate processing terms needed.
Providers. Namecheap/cPanel hosts our website, dashboard and email. Cloudflare provides DNS and website traffic services. Google provides Analytics and reCAPTCHA; Tawk.to provides live chat. Vercel hosts the Waslakam and real-estate systems. Those systems use PostgreSQL with Neon-related production configuration; the real-estate system is configured to keep encrypted backups in private Vercel Blob storage. We are continuing to verify exact storage locations and backup results. Opening WhatsApp or social links involves those separate providers. This list describes identified services and may change as our services change.
Retention. We keep enquiries, client files and financial records while needed for the service relationship, accounting, security, an active agreement, a dispute or applicable legal obligations. We have not yet implemented a verified automatic deletion schedule for the mailbox, dashboard, chats or backups, so we do not claim that these records are deleted after a fixed number of months or years. We are defining and testing record-specific review and deletion procedures; copies may remain in provider backups for a further period. You can contact us about a record at any time.
Security and requests. Dashboard access is restricted by role and multifactor authentication; we use reasonable technical safeguards, but cannot guarantee absolute security. To ask about or request access, correction or deletion of information, email [email protected]. We may verify identity and may need to keep information required for an active agreement, dispute or law.
Changes. We will update this page when our practices materially change and display the effective date of the updated notice.