Privacy Policy

Jumla Iraq is a business-to-business wholesale marketplace that connects buyers and suppliers in Iraq, available at www.jumla-iq.com and through the Jumla Iraq Android application.

We are the data controller for the information described below. For any privacy question, or to exercise any right in this policy, contact info@jumla-iq.com.

Account information: your name, email address, phone number, password (stored only as a secure hash by our authentication provider), and the language you use.

Business information: company name, business type, address and location, licence or registration documents you upload for verification, and the documents you choose to publish on your public profile.

Marketplace content: product listings, prices, images and attachments you upload, requests for quotation, and your responses to them.

Chat messages: the messages you exchange with other users through the platform, and any files or photographs you attach to them. These are visible to the other participant in that conversation and are stored so the conversation can be delivered and reviewed. Jumla Iraq staff and administrators can access conversations for support, dispute resolution and moderation.

Technical and usage data: IP address, device type, operating system, browser or app version, pages you view, and error logs. From your IP address we derive an approximate location — country, and sometimes city — for traffic analytics; we never collect your device’s precise location. When you enable notifications, we store the identifier our notification provider issues to that device so we can deliver messages to it.

Cookies and session data: we use the cookies required to keep you signed in and to protect your session. We do not use advertising cookies to track you across other websites.

To provide the service: creating your account, publishing your listings, delivering your messages, and connecting buyers with suppliers.

To verify accounts and prevent fraud, abuse, spam and fake registrations.

To operate support and dispute resolution, including reviewing conversations when one is reported.

To send service messages: verification emails, password reset, quotation and message notifications.

To improve the platform: understanding which features are used and fixing errors.

To meet legal, tax and accounting obligations.

Business visibility: information you choose to publish on your company profile — company name, business category, business phone number and business email — may be featured, promoted or shared through our business directories, advertising campaigns, partner platforms and promotional channels. Your password, identity documents, verification records and financial information are never used for promotion.

Other companies and organizations — this is a business-to-business marketplace, so the party on the other side of a transaction is a company: your public company profile, your listings, and the messages and files you send to a particular supplier or buyer are visible to them. Your business name, business email address, business phone number and business address are published on your supplier profile and can be seen by any visitor. That is how a marketplace works.

Our service providers, who process data on our behalf and are bound by contract: Supabase (database, file storage, authentication, real-time messaging), Vercel (website hosting and traffic analytics), and Google (app distribution through Google Play, and notification delivery for the Android app).

Authorities: where we are legally required to disclose information, or where it is necessary to investigate fraud, abuse or a threat to safety.

We do not sell your personal information, and we do not share your password, identity documents or financial information for advertising.

Account and business information: while your account is active, and for as long as needed after a deletion request to meet legal, tax and accounting obligations.

Chat messages and attachments: for as long as the conversation exists on the platform, because both participants rely on that record, and for a period afterwards for dispute resolution and abuse investigations.

Verification documents: for as long as your account is active and afterwards if we are required to retain proof of verification.

Technical logs: for a limited period, then deleted or aggregated.

You can access and update most of your information directly from your account settings, and correct anything that is inaccurate.

You can request deletion of your account and personal data from the page jumla-iq.com/delete-account, from inside your account settings, or by emailing info@jumla-iq.com from the address on the account. We verify the request before acting on it, and we aim to complete it within 7 working days.

Some records may be retained after deletion where we are required to keep them — for example invoices, payment records and the audit trail of administrative actions — and message content may be retained after a deletion request where a dispute or a legal obligation requires it. We will tell you if that applies to your request.

Where you have enabled notifications, you can turn them off at any time in your device settings.

Data is transmitted over encrypted connections (HTTPS/TLS) and stored with access controls: database row-level security restricts each party to their own conversations, uploaded files are held in private storage and served through expiring links, and administrative access is restricted to named staff accounts and recorded in an audit log.

No system is perfectly secure. If you believe your account has been compromised, contact info@jumla-iq.com immediately.

Jumla Iraq is a business platform intended for companies and professionals. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

Our service providers operate data centres outside Iraq. By using Jumla Iraq you understand that your information may be processed in those countries, under the contractual protections we have in place with those providers.

If we change this policy we will update the date at the top of this page, and where the change is significant we will notify you in the platform or by email.