Legal · Data protection
Privacy Policy
What we collect, why we collect it, how long we keep it, and how to make us stop. Written to be read, not to be survived.
1. Who we are
TatbeeqSoft is a software, web and mobile development studio serving clients across North America, Europe and the Gulf. This policy covers tatbeeqsoft.com and the forms on it.
For data protection purposes, the controller of the personal data described here is:
- Registered entity: add registered company name
- Postal address: add full postal address
- Email: tatbeeqsoft1990@gmail.com
If you are in the EEA or the UK and believe we should have appointed a representative under Article 27 GDPR, contact us at the address above and we will tell you who it is.
2. What we collect, and why
Four things, and nothing else. We do not buy personal data about you from data brokers, and we do not build advertising profiles.
a. Website visit statistics
Only if you agree via the banner. If you decline, or if your browser sends a Global Privacy Control or Do Not Track signal, no visit record is created at all — the request is never sent. When you do agree, we record:
- the page you viewed, and the page that referred you to it;
- your IP address, and the approximate country and city derived from it;
- your browser's user-agent string;
- a pseudonymous visitor identifier — a salted, one-way hash of your IP and user agent, used only to tell a repeat visit from a first visit. It cannot be reversed back to you;
- the date and time.
We also run Google Analytics 4 on the same basis, and it is not loaded until you accept. Until then the Google Analytics script is never fetched at all, so Google receives nothing — not even the cookieless measurement ping that Google's own Consent Mode would otherwise still send. If you decline, it is never loaded for the whole visit. Advertising, ad personalisation and ad user data stay switched off permanently, not just until you choose.
We use all of this to understand which pages are useful and which markets our visitors come from. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time — see section 9.
b. Showing prices in your currency
On the pricing page we convert our published USD prices into a currency likely to be familiar to you. To pick one, your IP address is resolved to a country. This runs whether or not you accepted statistics, because it is what makes the page readable — no record of the visit is created and nothing is stored against you. Legal basis: our legitimate interest in presenting prices you can understand (Art. 6(1)(f) GDPR).
c. Project enquiries
If you submit the enquiry form, we receive your name, company, email address, country, budget range, your message, and the IP address the form was sent from. We use it to reply to you and to prepare a quote. Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR).
d. Job applications
If you apply through our careers page, we receive your name, email address, phone number, the role you applied for, any portfolio or LinkedIn link, your written summary, your CV file, and the IP address the application was sent from. We use all of this only to assess your application. Legal basis: steps taken at your request prior to entering a contract, and our legitimate interest in recruiting (Art. 6(1)(b) and (f) GDPR).
We deliberately do not ask for your gender, age, nationality, marital status or photograph. None of it tells us whether you can do the job, and not collecting it is the cleanest way to keep it out of the hiring decision.
3. Cookies and local storage
We set no advertising cookies. Everything below is either necessary for the site to work or waits for your consent:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
ts_lang | Local storage | Remembers whether you chose English, German or Arabic | Until you clear it |
ts_consent | Local storage | Remembers your answer to the privacy banner, so we stop asking | 12 months |
ts_currency | Local storage | Remembers which currency you chose to view prices in | Until you clear it |
_ga, _ga_* | Cookie (Google) | Google Analytics. Only set if you accept — declining means they are never written | Up to 24 months |
ts_remember | Cookie | Keeps our own staff signed in to the admin panel. Never set for site visitors | 90 days |
PHPSESSID | Cookie | Admin panel session. Never set for site visitors | Session |
The ts_ entries are local storage, not cookies — they stay in your browser and are never transmitted to us.
4. Who else receives your data
We do not sell personal data and we do not share it for anyone else's marketing. Data reaches these third parties as an unavoidable part of running the site:
- Google Analytics 4 (Google Ireland Limited) — only after you accept. It receives your IP address, the pages you view and a randomly generated identifier. We do not enable Google Signals, advertising features or data sharing with other Google products.
- Geolocation — to show an approximate country and city, and to pick the currency prices are displayed in. Where our network provider supplies the country with the request itself, no lookup is made and your address is never sent anywhere. Otherwise it is resolved by ip-api.com. Either way the result is cached against a one-way hash, so the same address is not looked up repeatedly and the cache never holds the address itself.
- open.er-api.com — supplies exchange rates. Called by our server on a daily schedule, never by your browser, so this service receives nothing about you.
- No font CDN. Our typefaces are served from our own domain, so loading a page does not reveal your IP address to a font provider.
- Our web host and email provider — they process enquiries and applications on our behalf under contract.
Links to WhatsApp, LinkedIn and Instagram are ordinary links. Nothing is sent to those companies unless you click through, at which point their own privacy policies apply.
We may also disclose data where we are legally required to, or to establish or defend legal claims.
5. International transfers
We operate across North America, Europe and the Gulf, so personal data may be processed outside your own country, including outside the EEA and the UK. Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, together with additional safeguards where they are needed. Ask us and we will tell you which applies to your data.
Google Analytics involves a transfer to the United States, but only once you have accepted it. Google LLC is certified under the EU–US Data Privacy Framework and its UK extension, which is the basis that transfer relies on.
6. How long we keep it
| What | Kept for |
|---|---|
| IP addresses in visit statistics | Erased automatically after 30 days. The anonymous visit record — page, country, city, date — is kept as long-term statistics |
| Google Analytics data | Held by Google under our account's retention setting, confirm the GA4 retention window you selected |
| IP addresses attached to enquiries and job applications | Erased automatically after 180 days |
| Project enquiries | 24 months from your last contact with us, then deleted |
| Job applications and CVs | 12 months from the decision, unless you ask us to keep you on file for longer |
| Signed contracts and invoices | As long as tax and company law require |
7. Marketing and outreach
We only email you about our services if you asked us to, if you contacted us first, or where sending it is permitted by the law of your country for business-to-business contact. Every marketing email we send identifies us, gives our postal address, and carries a working one-click unsubscribe. Unsubscribing is honoured immediately and permanently.
We do not send unsolicited WhatsApp or SMS messages. We message you on WhatsApp only if you started the conversation with us.
Our website statistics are never used to identify an individual visitor and contact them.
8. Security
The site is served over HTTPS. Admin access is password-protected, sessions are rotated on each use, and CVs are stored outside the public web root so they cannot be downloaded by guessing a URL. No system is perfectly secure, but we keep what we collect small precisely so there is less to lose.
9. Your rights
If you are in the EEA or the UK
Under the GDPR and UK GDPR you have the right to:
- access the personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive it in a portable, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, without affecting anything done before you withdrew it.
To withdraw consent for visit statistics, use the Privacy choices link — it is in the footer of every page. To exercise any other right, email tatbeeqsoft1990@gmail.com. We answer within one month and it costs you nothing.
You also have the right to complain to your national data protection authority. In Germany that is the supervisory authority of your federal state; in the UK it is the Information Commissioner's Office.
If you are in California or another US state with a privacy law
You have the right to know what personal information we collect and why, to request a copy of it, to have it deleted, to have it corrected, and not to be discriminated against for exercising any of those rights.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We honour the Global Privacy Control signal automatically — if your browser sends it, we record no visit statistics and never show you the banner.
10. Children
This site is aimed at businesses and is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.
11. Changes to this policy
If we change how we handle personal data, we will update this page and move the date at the top. Where a change materially affects you, we will ask for your consent again rather than relying on the old answer.
12. Contact
Questions, requests, or complaints about anything on this page go to tatbeeqsoft1990@gmail.com. A person reads them.