Baghdad - Erbil - HelsinkiSaturday to Thursday 9:00 am to 5:00 pminfo@iraqcert.com
Last Updated: June 2026

Privacy Policy

As a premier ISO certification and compliance auditing firm in Iraq, IraqCert recognizes that absolute confidentiality is the cornerstone of our industry. This Privacy Policy outlines our strict protocols for collecting, safeguarding, and utilizing your corporate and personal data.

1. Information We Collect

To execute our rigorous certification and compliance services, we collect professional contact details (names, corporate emails, phone numbers), business registration documentation, operational procedures, and any proprietary data strictly required for ISO gap analysis, audits, and Approved Vendor List (AVL) registrations.

2. How We Use Your Information

Your data is utilized exclusively for professional purposes: facilitating ISO certification audits, submitting pre-qualification documents to Iraqi state-owned entities and International Oil Companies (IOCs), managing your account, and fulfilling our legal and regulatory compliance obligations.

3. Information Sharing & Disclosure

IraqCert operates under strict Non-Disclosure Agreements (NDAs). We do not sell or rent your data. Information is only shared with accredited international certification bodies, official Iraqi regulatory authorities, or IOC procurement portals when explicitly required to secure your requested certifications or vendor approvals.

4. Data Security Protocols

We deploy industry-standard encryption, secure localized servers, and stringent access controls to prevent unauthorized access, alteration, or disclosure of your sensitive corporate information. Only authorized auditors assigned to your specific file are granted access to your operational data.

5. Data Retention

Audit reports, compliance documentation, and certification records are securely retained only for the duration mandated by international ISO accreditation standards and Iraqi federal law, after which they are permanently and securely destroyed.

6. Your Corporate Rights

As our client, you retain the right to request access to the data we hold, demand corrections to inaccurate records, or request the deletion of your data, provided such deletion does not violate the legal retention policies set forth by global accreditation bodies.

Contacting Our Data Protection Team

For inquiries regarding our privacy practices or to exercise your data rights, please contact our HQ at info@iraqcert.com.

info@iraqcert.com