Privacy Policy

1. Introduction

This Privacy Policy explains how your personal information is collected, used, stored and protected when you use the Taj Al-Basra mobile app and the other digital services Taj Al-Basra provides to its residents and staff (together, the "Service").

The Service is provided by the community management of Taj Al-Basra (the "Community Management", "we" or "us"). It runs on HiBayt, a community management system developed by HiBayt, a company registered in Iraq with its principal office in Baghdad. HiBayt supplies and hosts the software; it does not manage the community and does not decide what is done with your data.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Who This Policy Applies To

This Privacy Policy applies to everyone who uses the Service at Taj Al-Basra, including:

• Residents: owners, tenants and household members who use the app to access community services, submit requests and communicate with the Community Management.
• Staff: field staff and operational team members of the Community Management who use the staff app and the management panel to carry out the tasks assigned to them.

3. Information We Collect

The information collected depends on how you use the Service and the role you hold in the community.

3.1. Resident Information

When a resident account is created, either by the Community Management or through an invitation from another resident, the following information may be collected:

• Full name
• Phone number
• Email address (optional)
• Residential unit details (building, unit number, community)

This information is provided and managed by the Community Management. It is used only to connect residents with Taj Al-Basra and to give them access to its services through the app.

3.2. Staff Information

When the Community Management creates a staff account, the following information may be collected:

• Full name
• Phone number
• Email address
• Location data (collected only during attendance check-in)
• Position and HR-related details, as entered by the Community Management

Staff HR details, including position and other employment-related information, belong entirely to the Community Management and are used only to run the community's operations.

3.3. Content You Submit

Residents and staff may submit content such as tickets, comments, posts and photos. This content goes to, and is managed by, the Community Management. HiBayt does not access, review or use it.

4. How Your Information Is Used

The Community Management uses the information collected only to provide and maintain the Service, specifically to:

• Create and manage user accounts.
• Connect residents and staff to Taj Al-Basra.
• Enable communication between residents, staff and the Community Management.
• Run operational features such as attendance tracking, task management and service requests.
• Send important notifications about the community and your account.

Your personal information is not used for marketing, advertising, profiling, or any purpose unrelated to the Service. HiBayt processes it only to make the system work, on the Community Management's instructions.

5. Who Manages Your Data

All community data, including resident information, staff details, unit data and the content you submit, belongs to and is managed by the Community Management of Taj Al-Basra. It decides what is collected, who in its team can see it, and how long it is kept.

HiBayt acts only as the technology provider and data processor, not as the owner of the data. HiBayt does not access, review or use the data of Taj Al-Basra for its own purposes. The data of Taj Al-Basra is kept separate from every other community on the system and is accessible only to the people the Community Management authorizes.

6. Data Sharing

Neither the Community Management nor HiBayt sells, rents, trades or shares your personal information with third parties. Your data stays private and is accessible only within Taj Al-Basra, as managed by the Community Management.

Information may be disclosed only if required by law or in response to a valid legal request from a governmental authority.

7. Third-Party Services

To run the Service reliably and securely, HiBayt uses trusted third-party providers for essential functions such as cloud hosting, push notifications and infrastructure. These providers are carefully selected and are bound by their own privacy and security standards.

They process data only as necessary to operate the system. Personal data is not shared with them for their own independent use.

8. Data Storage and Security

Your data is stored securely on the cloud infrastructure HiBayt operates for the Community Management. Industry-standard security measures, including encryption, access controls and regular security assessments, protect it from unauthorized access, alteration, disclosure or destruction.

While every reasonable precaution is taken, no method of electronic storage or transmission is 100% secure, and absolute security cannot be guaranteed.

9. Location Data

Location data is collected only from staff, and only when they check in for attendance through the staff app. It is not collected continuously or in the background, is used only to verify attendance, and is accessible only to the Community Management.

Location data is never collected from residents.

10. Children's Privacy

The Service is designed for the residents and staff of Taj Al-Basra. It is not intended for children under 13 without the supervision and consent of a parent or guardian, and personal information is not knowingly collected from children under 13. If you believe a child has provided personal information, please contact the Community Management so it can take appropriate action.

11. Your Rights

You have the right to:

• Access your data: ask what personal data is held about you.
• Correct your data: ask for inaccurate information to be updated or corrected.
• Request deletion: ask for your personal data to be deleted.

Because your account is created and managed by the Community Management, these requests are carried out by the Community Management of Taj Al-Basra. You can make them through the Community Management, or write to HiBayt at the addresses below, which passes them on and assists in carrying them out.

12. Data Retention

Your personal data is kept for as long as your account is active and Taj Al-Basra continues to use the Service. When Taj Al-Basra stops using HiBayt, the data is retained or deleted as agreed between the Community Management and HiBayt.

13. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in practices or applicable laws. When it changes, the effective date at the top of this page is updated. We encourage you to review it periodically.

Your continued use of the Service after a change means you accept the updated policy.

14. Contact Us

For any question, concern or request about this Privacy Policy or how your data is handled, write to:

• General enquiries info@hibayt.com
• Support support@hibayt.com