Privacy Policy

Last updated: 6 September 2026 Qarar Group for Law and Legal Consultancy ("Qarar", "we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what data we collect when you use the Qarar Iraq platform (the website and the mobile application), why we collect it, how we keep and share it, and the rights you have over it. 1. Data we collect - Account data: your phone number, your name, your email address if you choose to add one, a secondary phone number if you add one, and your preferred language. - Request data: the answers you give in service forms, the service and path you choose, the appointments you request, and the documents you upload (such as identity documents, contracts and court decisions). - Payment data: the amount, status and reference of each transaction with the payment provider. We never see or store your card details; they are entered directly with the Qi Card gateway or the Aqsati service. - Communication data: messages you send through the contact form, and the WhatsApp messages linked to your account (verification codes, notifications, payment links). - Technical data: your device's internet address, device and browser type, usage logs, and a device identifier for push notifications if you enable them. 2. Why we use your data - To create your account and verify your identity at every sign-in. - To receive your requests, route them to the appropriate consultant or lawyer, and follow them through to completion. - To set fees, take payments, and issue fee quotations and receipts. - To send you notifications about your requests, appointments and payments over WhatsApp or inside the application. - To meet our legal and professional obligations, prevent fraud and misuse, and keep the platform secure. - To improve the platform through aggregated usage statistics that do not identify you. 3. Legal basis We process your data to perform the service you requested, to comply with our legal obligations as a law firm, in our legitimate interest of running a secure platform, and with your consent where consent is required (such as optional notifications). 4. Who we share your data with We do not sell your personal data. We share it only with: - The consultants and lawyers on our team assigned to your request, to the extent needed to handle it. - Payment providers (Qi Card, Aqsati) to complete your transactions. - Meta's WhatsApp platform, to deliver verification codes and notifications to your number. - Hosting and infrastructure providers who process data on our behalf and on our instructions. - Courts and public authorities where the law requires it, or where representing you before them, on your instruction, requires it. 5. Storage and security Your data is stored on secured servers. Access is limited to authorised staff under defined permissions, and every action taken on your requests is written to an audit log. We use encryption in transit and reasonable safeguards to reduce the risk of unauthorised access, noting that no method of transmission or storage is entirely secure. 6. Retention We keep your account data for as long as your account exists. Case files, documents and financial records are kept after a file is closed for the period required by Iraqi law and by the rules of the legal profession, and are then deleted or anonymised. Verification codes are deleted as soon as they expire. 7. Your rights You may view and correct your personal data from your profile page, request a copy of it, object to or restrict a particular use, and delete your account from the application's settings. On deletion your identifying details are removed and your phone number is released; only the records the law requires us to keep remain. To exercise any of these rights, contact us through the details published on the platform. 8. Cookies and local storage The platform uses local storage in your browser and in the application to keep your sign-in session, your preferred language and unsent form drafts. We do not use advertising cookies and we do not track you across other sites. Cloudflare Turnstile is used to check that a request comes from a person and not an automated program. 9. Children The platform is intended for adults. We do not knowingly collect data from anyone under eighteen, and we delete it if we learn we have. 10. Changes to this policy We may update this policy from time to time; the date of the latest update appears at the top of this page. We will tell you through the platform when we make material changes. 11. Contact For any question or request about your personal data, please reach us through the contact details published on the Qarar Iraq platform.