Privacy policy.

This Privacy Policy explains how Code IT ("we", "us", "our") — an FFC Group company based in Doha, Qatar — collects, uses, discloses, and protects personal information when you visit codeqatar.com or engage our services. We are committed to processing personal data in accordance with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Information we collect

We collect the minimum information necessary to respond to your enquiries and deliver contracted services.

• Information you provide directly: name, company, email address, telephone number, and any message content you submit via our contact form, chatbot, booking page, or email.
• Technical information automatically collected: IP address, browser type, device type, referring URL, pages visited, and timestamps. This information is collected via standard server logs and privacy-respecting analytics.
• Client engagement data: if you become a client, we collect contract-level information required to deliver services — including authorized contacts, system inventories, and support ticket history.

2. How we use your information

We use personal information only for the following purposes:

• Responding to enquiries and quotation requests submitted through our website or direct channels.
• Scheduling and conducting meetings, consultations, and assessments.
• Delivering contracted services, including project management, ongoing support, and incident response.
• Sending operational communications relevant to an active engagement (e.g. support updates, maintenance notices).
• Complying with legal, regulatory, and contractual obligations under Qatari law.
• Improving our website and understanding aggregate usage patterns.

We do not sell, rent, or trade your personal information. We do not use your data for advertising targeting.

3. Lawful basis for processing

Where Qatar's Personal Data Privacy Protection Law or the GDPR applies, we rely on the following lawful bases: (a) your consent when you submit a form or enquiry; (b) the performance of a contract where you are a client; (c) our legitimate interests in operating and improving our business, where not overridden by your rights; and (d) legal obligation where processing is required by Qatari or applicable law.

4. Information sharing and disclosure

We share personal information only in the following limited circumstances:

• Authorized service partners: vendor partners (such as Microsoft, Oracle, Sophos, Veeam, Ivanti) where necessary to deliver contracted services. All partners are bound by equivalent confidentiality obligations.
• Professional advisors: accountants, auditors, and legal counsel under confidentiality agreements.
• Law enforcement and regulators: where required to comply with Qatari law, valid legal process, or protect rights, safety, or property.
• Corporate transactions: in connection with a merger, acquisition, or reorganization within the FFC Group; you will be notified of any such transfer.

5. International data transfers

Code IT is headquartered in Qatar. Some of our service partners operate globally, which may mean personal data is transferred outside Qatar. Where transfers occur, we rely on contractual safeguards and industry-standard security practices to protect the information.

6. Cookies and analytics

Our website uses a minimal number of first-party cookies strictly for site functionality. We do not use cross-site tracking cookies, advertising pixels, or social media trackers. Aggregate analytics are collected via privacy-respecting tools that do not build individual user profiles.

7. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy:

• Enquiry data: up to 24 months from last contact, unless an engagement is established.
• Contractual records: duration of the engagement plus the statutory retention period required under Qatari law.
• Technical server logs: 90 days.

8. Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit and at rest, and periodic security reviews. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Deletion — request erasure, subject to legal retention obligations.
• Objection — object to certain processing, including for legitimate interest purposes.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time without affecting past processing.
• Complaint — lodge a complaint with the relevant Qatari data protection authority.

To exercise any right, contact privacy@codeqatar.com. We will respond within a reasonable period consistent with applicable law.

10. Children's privacy

Our services are directed at business customers. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us personal information, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will indicate when the most recent revision occurred. Material changes will be communicated through a prominent notice on our website.

12. Contact

Code IT (an FFC Group company)
Office #9, Building #330, Street #230, Zone #40
Doha, Qatar
Email: privacy@codeqatar.com
Phone: +974 4466 6254