Privacy policy

This website is operated by Jaddaf Company ("Jaddaf", "we", "us"), a licensed pharmaceutical scientific bureau with its head office at The Boulevard, 40 M Street, Erbil, Kurdistan Region of Iraq, and an office in Hayy Al-Jami'a, Karkh, Baghdad.

We are responsible for the personal information collected through this website. If you have a question about this policy or about your information, write to us at [email protected].

We only collect information that you choose to give us, in three situations.

When you send an enquiry. Through the contact form we collect your name, work email address, company, the subject of your enquiry and your message.

When you apply for a job. Through the careers form we collect the information needed to assess your application. This includes your name, phone number, email address, gender, date of birth, education, work experience, skills, preferred locations, availability, whether you hold a driving licence or have a car, and, if you provide them, a LinkedIn profile, a photograph and your CV. We also generate a tracking code so you can check the status of your application, and we record interview arrangements and status changes as your application progresses.

When you contact us directly. If you email us or message us on WhatsApp, we receive whatever you send, along with your email address or phone number.

We do not use advertising trackers or third-party analytics on this website, and we do not collect payment information.

Your answers are saved as you fill in the application form. Each time you move to the next step, and shortly after you stop typing, the answers you have entered so far are sent to our recruitment system, together with the step you have reached and whether you are using a phone or a computer. A copy is also kept in your browser so you can carry on later on the same device. Your photo and CV are never sent until you press “Send application”.

We do this for two reasons: so that our recruitment team can contact you if you stop part-way and help you finish, and so that we can see which parts of the form are hard to complete and improve them. The form tells you this before you start. If you would rather we did not contact you, or you want your unfinished application deleted, email [email protected].

Job page views. When you open a job page we count one view of that job per day. To avoid counting you twice we combine your network address, your browser type and a random number stored in your browser into a one-way code. We store only that code, never your network address, and we cannot use it to identify you. The total number of views is shown publicly on each job.

• To reply to your enquiry and, where you ask us to, to discuss registering or distributing your products.
• To assess job applications, arrange interviews, tell you the outcome and, if you are hired, begin employment.
• To send you emails that relate to your enquiry or application, such as confirmations and interview invitations.
• To keep the website secure and to meet our legal and regulatory obligations.

We do not sell your information, and we do not use it to send marketing messages unless you have asked to receive them.

Your information is seen only by the Jaddaf staff who need it: our commercial and regulatory teams for enquiries, and our recruitment team and the relevant managers for job applications.

We use a small number of service providers to run the website. They process data on our behalf and may not use it for their own purposes:

• Cloudflare hosts the website and stores form submissions and uploaded files.
• Resend delivers the emails we send about enquiries and applications.
• Google Firebase handles sign-in for Jaddaf staff using our internal tools.

If you contact us through WhatsApp, your messages are also handled by WhatsApp under its own privacy policy.

We will disclose information to authorities only where Iraqi law or a lawful request from a competent authority requires it.

Our service providers operate data centres in several countries, so your information may be stored or processed outside Iraq. We choose providers that apply recognised security standards and contractual safeguards to the data they hold for us.

• Enquiries are kept for up to three years after our last contact with you, unless they lead to a business relationship, in which case they form part of that relationship's records.
• Job applications that do not lead to employment are kept for up to two years, so we can consider you for other suitable roles. You can ask us to delete yours sooner.
• Applications from people we hire become part of their employment file.
• Unfinished applications (answers saved before an application is sent) are deleted automatically 90 days after your last change. When you send your application, the saved copy is removed and only the application itself is kept.
• Job view counts are kept as anonymous totals for as long as the job is listed.

You can ask us at any time to:

• tell you what information we hold about you and give you a copy;
• correct information that is wrong or out of date;
• delete your information, or withdraw a job application;
• stop using your information for a particular purpose.

Email [email protected] with your request. We may ask you to confirm your identity, and we will reply within 30 days. If we cannot meet a request, for example because the law requires us to keep certain records, we will explain why.

The public website does not set advertising or analytics cookies. It stores a few things in your browser: whether you chose the light or dark theme; a random number used only to count job views once a day; and, while you are filling in a job application, your answers so far, so you can finish later. The saved answers are removed when you send the application, and after 30 days in any case. Jaddaf staff who sign in to our internal tools also have their session stored in the browser.

You can clear this storage through your browser settings at any time; the site will still work.

Information is sent to us over an encrypted connection, and access to submissions and uploaded files is limited to authorised staff who sign in to our internal tools. No system is completely secure, so please do not send us information we have not asked for, such as identity documents, until we request them.

We will update this page when our practices change and show the date of the latest version at the top. If a change significantly affects how we use information you have already given us, we will tell you by email.

For any question about this policy or your information, email [email protected] or write to Jaddaf Company, The Boulevard, 40 M Street, Erbil, Iraq. You can also use our contact form.