Privacy Policy

Ghali Technologies Privacy Policy

Version 1.2 – Effective 24 October 2025

1. Who we are

Ghali Technologies LLC
Commercial Registry No.
Registered office: Homs, Syrian Arab Republic
Data-Protection Contact / DPO (Art. 10, Syrian Electronic Personal Data Law 12/2024): privacy@ghali.tech

This notice explains how we collect, use and protect personal information on https://ghali.tech (the “Site”). It covers visitors, commenters, customers and business partners. We do not knowingly collect data from persons under 18 years of age; please contact us if you believe a minor has provided data.

2. What data we collect and why

We gather only the information necessary to run our business, improve the Site and meet legal obligations.

  1. Contact data – such as name, e-mail address, phone number and organisation.
    Purpose: answering enquiries, issuing proposals and staying in touch.
    Legal basis: steps to enter a contract or your consent where applicable.
    Retention: up to 24 months after the conversation closes.
  2. Comment data – everything you post in a blog comment, plus (when enabled) your public Gravatar picture.
    Purpose: publishing your comment.
    Legal basis: your explicit consent (you choose to post).
    Retention: deleted on request.
  3. Device and usage data – IP address, browser type, pages visited, timestamps and security-related identifiers.
    Purpose: securing and improving the Site, detecting spam or fraud and compiling anonymous statistics.
    Legal basis: Ghali Tech’s legitimate interests in running a secure, reliable service.
    Retention: 30 days for raw logs and up to 24 months for aggregated indicators.
  4. Transactional data – invoices, payment confirmations and accounting records.
    Purpose: meeting tax and bookkeeping duties.
    Legal basis: legal obligation under Syrian tax law.
    Retention: 10 years.
  5. Newsletter data – e-mail address and engagement metrics (opens, clicks) if you subscribe.
    Purpose: sending marketing updates you requested.
    Legal basis: your consent (double opt-in).
    Retention: until you unsubscribe.

3. Cookies and similar technologies

When you first visit, a banner lets you accept, reject or customise non-essential cookies.

  • Essential cookies (for login sessions, load-balancing and content editing) are always active.
  • Analytics and marketing cookies are stored only if you choose “Accept”.
    A live, detailed cookie list is available through the banner link and updates whenever we add or remove plug-ins.

4. Embedded content

Articles may embed third-party media (e.g. YouTube videos, X/Twitter posts, GitHub code). Interacting with that content is the same as visiting the external site; those providers may set their own cookies or log your actions. Please review their individual privacy policies.

5. Your rights under Syrian Law 12/2024

You have the right to:

  1. Access the personal data we hold about you.
  2. Correct inaccurate or incomplete data.
  3. Erase data (“right to be forgotten”) where no lawful reason to keep it remains.
  4. Object to processing based on legitimate interests.
  5. Withdraw consent at any time for activities that rely on it (e.g. newsletters, analytics cookies).

Send any request to privacy@ghali.tech We will verify your identity and respond within 30 days.

6. Security measures

We employ a defence‑in‑depth strategy with technical and organisational safeguards that meet or exceed the requirements of Syrian Electronic Personal Data Law 12/2024 and internationally recognised standards such as ISO/IEC 27001 and the NIST Cybersecurity Framework. To avoid exposing attack vectors, we do not disclose operational details; however, our layered controls encompass encryption, strict access management, network protection, continuous monitoring, vetted third‑party vendors and a tested incident‑response plan. These controls are reviewed at least annually and whenever significant platform changes occur. If a breach arises that could seriously endanger users, we will notify the Syrian Data Protection Commission and the affected individuals within 72 hours.

7. Contact

For questions, concerns or to exercise any of your rights, e-mail privacy@ghali.tech