Privacy Policy

This Privacy Policy outlines how Basrah Fish Farm (“we”, “our”, “us”) collects, uses, discloses, and protects your personal information when you visit our website at www.basrahfishfarm.com (“Website”).

By accessing our Website, you agree to the terms of this Privacy Policy.

1. Who We Are
Basrah Fish Farm is a fish farming enterprise based in Basrah, Iraq. For the purposes of applicable data protection legislation, we are the “data controller” of your personal data.

2. Information We Collect
We may collect the following categories of personal data:

Identity Information – Name
Contact Information – Email address
Technical Data – IP address, browser type, device information
Usage Data – Information about how you use our Website
Marketing and Communications Data – Preferences in receiving marketing from us

We do not collect or process any special categories of personal data (e.g., health, biometric, or political information) unless explicitly required and with consent.

3. How We Collect Your Data
We collect your personal data through:

Direct interactions (e.g., contact forms, email correspondence)
Automated technologies (e.g., cookies, server logs)
Third-party services (e.g., analytics providers, payment processors)

4. Lawful Basis for Processing
We process your personal data only when we have a lawful basis including:

Consent – Where you have given us clear permission to process your data (e.g., newsletter sign-up)

Contractual necessity – To respond to inquiries
Legal obligation – Where required by applicable law
Legitimate interest – For business development, service improvement, fraud prevention

5. How We Use Your Information
We may use your personal data for the following purposes:

To respond to inquiries or requests
To fulfil and manage orders or service agreements
To improve our Website and services
To communicate with you regarding changes, updates, or marketing (with consent)
To comply with legal obligations or defend legal claims

We will not sell or rent your personal data to third parties.

6. Data Sharing and Transfers
We may share your data with:

Trusted third-party service providers (e.g., website hosting, payment gateways)
Government or regulatory bodies where required by law

7. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymised.

8. Your Rights
You have the following rights:

Right to access your data
Right to rectify inaccurate or incomplete data
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time (where consent was the lawful basis)

To exercise any of these rights, please contact us here.

9. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, misuse, alteration, or unauthorised access.

10. Contact Us
For questions or concerns about this Privacy Policy, or to exercise your data rights, please contact us via our contact form here.