Start the brief
Home · Privacy policy
Privacy policy

Privacy policy

What Bond collects, why we hold it, how long we keep it and how to ask us to delete it.

Last updated: 22 August 2026 · Empire Building, Business Tower 4, Erbil

What we collect

There are three kinds of information on this list. Most of it arrives because you sent it to us.

This site has no login and no account to create. We never ask for payment card details or bank credentials through this website.

Why we use it

We do not use your information for advertising and we do not build profiles of visitors.

Where it is kept and for how long

Files sit in the business accounts we use for email, documents and messaging. Access needs a password and a second verification step. The partners keep the access list short.

When a retention period ends we delete the files or strip out the parts that identify a person.

Who sees it

Client information stays inside the team that runs your file. Beyond that, the list is short and it is driven by your instructions. Every member of the team is under a non-disclosure agreement.

Certification bodiesThey receive documents about your management system when you instruct us to book an audit.
Registration portalsThey receive the documents a registration requires, on your instruction. The KRG Approved Suppliers Center, the Ministry of Natural Resources vendor list, the Ministry of Planning platform and UNGM are the usual ones.
Service providersOur email, file storage and messaging providers hold the data as part of running those tools for us.
Nobody elseWe do not sell personal information. We do not pass it to anyone for marketing. We hand data to a government body outside your instructions only if the law obliges us to.

Analytics and cookies

This site sets no marketing cookies and carries no advertising trackers. There is no consent banner because there is nothing to consent to.

The pages load fonts from Google Fonts and script libraries from jsDelivr. Those requests reach the providers' servers and carry your IP address, the way any web page request does.

If we add an analytics tool later, we will name it on this page, say what it measures and say how long the data is kept, before it goes live.

Your rights

Write to info@bond.krd with the request and enough detail for us to find the record. We reply within 30 days.

If you are in the European Union or the United Kingdom, the GDPR gives you these rights, together with the right to receive your data in a portable form and the right to complain to your national data protection authority.

Changes to this policy

We update this page when the way we handle information changes. The date at the top of the page shows the last change. If a change affects work we are already doing for you, we tell you by email.

Contact

Bond, Empire Building, Business Tower 4, Erbil. Email info@bond.krd. Use the same address for any question about this policy or about a record we hold.

Last updated: 22 August 2026.