Privacy policy

Scope of this policy

This policy explains how Almotakamila Flexible Packaging uses data associated with its customer portal at app.motakamila.iq. For privacy enquiries, contact it.manager@motakamila.net or it.officer@motakamila.net.

Data we handle

Account data: name, email, company, role, permissions and authentication information required to sign in.

Company and contact data: company name, logo, contact numbers and addresses entered in the service.

Transaction data: products, specifications, quantities, quotation requests, quotation revisions, orders, delivery addresses and progress statuses.

Attachments: product images, design files and documents uploaded by authorised users.

Approval and activity records: user identity, email, action time, approval text and associated quotation revision, plus the portal policy version and date and time of acceptance.

When WhatsApp connected to the service is used: contact numbers, incoming message contents, message identifiers, and sending and delivery statuses. Service providers may also record technical data such as IP addresses and operational errors.

Purposes of use

We use data to manage accounts and permissions, display each company's products, prepare quotations, fulfil orders and deliveries, record approvals, respond to enquiries and privacy requests, protect the service and diagnose faults. When WhatsApp notifications are enabled, contact data is used to send relevant service updates in accordance with communication preferences and required consents.

Data access and service providers

Authorised company staff access data needed for their tasks, and customer access is restricted by company and permissions. The portal uses GoDaddy for website hosting and Supabase for authentication, database and file storage, and Meta/WhatsApp when the WhatsApp channel is used. These providers process data necessary to deliver their services, and processing or hosting may occur outside Iraq. Necessary delivery information may be shared with the delivery provider, or data disclosed to meet an applicable legal obligation.

Retention and protection

We retain data as needed to operate accounts, fulfil and follow up transactions, resolve disputes and meet applicable obligations. Deleting an account does not necessarily delete order and approval records associated with ongoing or completed transactions. Data that can be deleted or anonymised is reviewed when a request is received. Backups may remain until replaced through the backup cycle.

The service uses authentication, permission and file-access controls. No storage or transmission method guarantees absolute protection. Protect your login details and do not share your account.

Sessions and your rights

The portal uses technical mechanisms necessary for sign-in and interface operation. The browser may cache application files. You may contact us to request access to, correction or deletion of your data, or ask about its use. We verify the requester's identity and authority before taking action.

See the data deletion instructions for the request procedure and exceptions. To stop service WhatsApp notifications, contact the management email and state your associated number.

Updates

This policy may be updated to explain changes to the service or data processing. The latest update date is shown at the top of the page, and material changes are communicated through an appropriate channel when necessary.