Privacy Policy
Last updated: November 2026
1. Introduction and Website Operator
This Privacy Policy explains how O&O Business Solutions ("we", "us") collects, uses, and protects information submitted through this website (oo-business.com). O&O Business Solutions is an unregistered business operating from Iraq. It does not have a company registration number or a published business address.
2. Personal Information We Collect
We only collect personal information that you choose to submit through our contact/enquiry form: your name, company name (optional), email address, phone number (optional), the type of enquiry, and your message.
3. How Information Is Collected
Information is collected only when you voluntarily submit our contact form. We do not use tracking scripts, advertising pixels, or analytics software on this website.
4. Purposes of Processing
We use the information you submit solely to respond to your enquiry and to discuss the business need you've described. We do not use it for marketing, profiling, or any automated decision-making.
5. Legal Basis and Applicable Law
This policy is not drafted with reference to a specific jurisdiction's data protection law, since O&O Business Solutions is unregistered and no particular legal regime has been confirmed as applicable. We process your information on the basis that you have voluntarily provided it to us for the purpose of receiving a reply.
6. Cookies and Spam Protection
This website does not use advertising or tracking cookies. Our contact form uses Cloudflare Turnstile, a spam-prevention service, which may set a small amount of technical data (such as a cookie or local browser storage) solely to verify you are not an automated bot. This data is controlled by Cloudflare, not by us, and is not used for tracking or advertising.
7. Contact Form and Enquiry Handling
When you submit the contact form, your message is sent by email to our enquiry address. We do not store your submission in any database — it exists only as an email.
8. Third-Party Service Providers
We use the following third-party services to operate this website and process enquiries: Cloudflare (website hosting, security, spam protection, and a rate-limiting rule that approximately limits rapid repeated submissions from the same network location), and Resend (used only to deliver the enquiry email to us — your email address is used as a reply-to address, never as the sender). These providers may process data on infrastructure located outside Iraq.
9. Data Storage, Security and Retention
We do not maintain a database of contact form submissions. Your enquiry exists as an email, retained for approximately 12 months after our last meaningful interaction with you, after which it is deleted. This retention period is our own operational practice, not a legal requirement. This website enforces HTTPS (including HSTS) and uses a security policy (Content Security Policy) to restrict what scripts can run on it.
10. International Data Transfers
Because we use global infrastructure providers (Cloudflare and Resend), your information may be processed on servers located outside Iraq.
11. Your Choices
You may contact us at any time to ask what information we hold about you, to correct it, or to request its deletion, using the contact details in Section 13.
12. Children's Privacy
This website is intended for business audiences and is not directed at children. We do not knowingly collect personal information from children.
13. Contact for Privacy Enquiries
For any question about this policy or your information, contact us at [email protected].
14. Policy Updates
We may update this policy as our practices change. This page will show the most current version; please check back periodically.