Legal information

This policy explains what personal information Diri Al-Nassir collects through this website, why we collect it, and how we use and protect it. It applies to diri-alnassir.iq and every form published on it.

Information you provide

• Contact and assessment requests (Contact us): your name, organisation, email address, phone number, enquiry type, site location and description of requirements.
• Job applications (Careers): your full name, email address, phone number, nationality, the position applied for, experience, qualifications, motivation statement, any additional information you add and the CV you upload.
• Grievances (Grievance mechanism): complainant details are optional and you may submit without giving your name. We collect the subject, the date and location of the incident, its description, whether it was reported before and any supporting documents you choose to attach. Grievances are submitted securely through the website to the company and handled confidentially.
• Supplier registration: the supplier registration form is hosted on the external KoboToolbox platform; information entered there is also subject to that platform's terms and privacy policy.
• Email, phone and WhatsApp: when you contact us directly we receive whatever information you include. WhatsApp messages are also subject to WhatsApp's own privacy policy.

How we use your information

• To respond to your enquiry and prepare the security assessment or proposal you request.
• To assess job applications, contact candidates and carry out recruitment screening and vetting.
• To log, investigate and resolve grievances, and to meet our obligations to ICoCA and under our certified management systems.
• To register and evaluate suppliers.
• To comply with Iraqi law and lawful requests from competent authorities.

We do not sell or rent your personal information, and we do not use it for marketing unrelated to your request.

Information collected automatically

This website does not use analytics, advertising cookies or any other tracking tools. It stores the language you choose in your browser (local storage) so pages display in that language on later visits. Our hosting provider may keep standard server logs (such as IP address, browser type and pages requested) for operation and security. Fonts are loaded from Google (Google Fonts) and icons from jsDelivr, and the office maps on our About and Contact pages are embedded from Google Maps; these services receive your IP address as part of delivering them, and the embedded maps are also subject to Google's own privacy policy.

Sharing of information

Access to your information is limited to the staff who handle your request. We share it only with service providers that host our website, forms and email on our behalf, when required by law or by competent authorities, or with your consent.

Retention

We keep personal information only for as long as necessary for the purpose for which it was collected, or as long as required by law or by the record-keeping requirements of our certified management systems, and then delete it securely.

Grievance reports and any attachments submitted through the website are stored securely on the company's server, are accessible only to the staff who handle grievances, and are kept in line with the retention period set out in our Grievance Policy.

Your rights

You may ask to access, correct or delete the personal information we hold about you, and withdraw your consent at any time. Write to info@diri-alnassir.iq, or for job applications to hr@diri-alnassir.iq.

By using this website you agree to the following terms. If you do not agree, please do not use the site.

1. Nature of content. Content is provided for general information about the company and its services. It is not an offer, a quotation or a contractual commitment; our services are provided only under a written agreement.
2. Licence and certificates. Copies of our licence and certificates are published for verification; each is valid as stated on the document. They may not be altered, reused or used to imply any affiliation with the company.
3. Intellectual property. The company name, crest and logo, photographs, text and website design belong to Diri Al-Nassir and may not be copied or used without prior written permission.
4. Acceptable use. You may not use the site for any unlawful purpose, attempt unauthorised access to its systems, or submit false information or harmful files through its forms.
5. External links. The site links to external services such as KoboToolbox, LinkedIn and WhatsApp. We are not responsible for their content or practices.
6. Disclaimer. We take reasonable care to keep information accurate and current but do not warrant that it is free of errors. To the extent permitted by law, we accept no liability for loss arising from reliance on the content of this website.
7. Governing law. These terms are governed by the laws of the Republic of Iraq.
8. Changes. We may update this page from time to time; the “Last updated” date shows the latest revision.

Confidentiality is one of our core values, alongside integrity, excellence and client focus. We apply the following principles to the information of our clients, employees and everyone we work with:

• Our Code of Conduct requires all employees and contractors to safeguard sensitive client and company information; breach of confidentiality or falsification of records is prohibited conduct.
• Operational and security information relating to client sites and movements is shared strictly on a need-to-know basis.
• Documents and records are managed within our management systems certified to ISO 18788, ANSI/ASIS PSC.1 and ISO 9001, which require documented information to be controlled and protected.
• This website is served over an encrypted (HTTPS) connection.
• We respect the privacy and dignity of individuals in all field operations, and cooperate with competent authorities in accordance with the law.

If you believe information about you has been used without authorisation, tell us immediately at info@diri-alnassir.iq.

Anyone — employees, clients, contractors or members of the community — can raise a grievance or report conduct that breaches the law, our Code of Conduct or human-rights principles. Grievances are handled confidentially and impartially, and may be submitted anonymously.

Anyone who reports a concern in good faith is protected from retaliation. Retaliation in any form — including dismissal, demotion or harassment — is strictly prohibited. Confidentiality is maintained wherever possible, except where disclosure is required by law or by an investigation.