Privacy Policy

Who we are

This policy is published by Professional Step Ltd for Project Management ("PSC", "we"), a project management consultancy based in Baghdad, Iraq. It covers this website, www.psc-iq.com, and PSCPro, our private project management platform at pro.psc-iq.com.

Questions about this policy or about your information can be sent to info@psc-iq.com.

In short

• We collect only what you send us through a form, or what is needed to run PSCPro for the companies we work with.
• This website uses no analytics, no advertising and no tracking cookies, and loads no third-party scripts.
• We do not sell personal information, and we do not use it for advertising.
• When a client company connects its Google Drive to PSCPro, PSCPro can reach only the files it creates itself, nothing else on that drive.

Information you give us on this website

We collect personal information on this website only when you choose to send it:

• Contact form: your name, company, email address, phone number, area of interest and message. It is saved in our enquiries register and an email alert is sent to our team so we can reply.
• Training course registration: your name, phone number, email address, the course and the intake you chose. We send you a confirmation email.
• Newsletter: your email address and preferred language, and optionally your name and topics of interest. We send a confirmation email first, and nothing else is sent unless you confirm.

Our newsletter

For each newsletter we record when it was sent to you, and the first time it was opened and a link in it was clicked. Opening is detected by a small image in the email, and clicks pass briefly through our own website before reaching the page you chose. We use this only to see whether the newsletter is useful, never to build a profile of you.

Every newsletter contains a link that unsubscribes you in one click. When you unsubscribe we keep your address marked as unsubscribed, so we do not email you again by mistake. If an email to you cannot be delivered, the address is marked as bounced and we stop sending to it.

Cookies and technical information

• This website sets one cookie for visitors, psc-lang, which remembers whether you chose English or Arabic. It lasts one year and contains nothing else.
• Our own staff receive a sign-in cookie when they log in to the website’s control panel. Visitors never receive it.
• To stop a form being submitted over and over by machines, our server keeps the sending IP address in memory for a short time. It is not saved with your submission.
• Our server may keep standard technical logs for security and to fix faults.
• The fonts and images on this website are served from our own server, so viewing a page does not send your details to anyone else.

News headlines from other publishers

The Insights page shows recent headlines from public news sources. Each one links to the publisher’s own website, and when you follow a link that publisher’s privacy policy applies, not ours.

PSCPro, our private platform

PSCPro is used by PSC’s staff and by the client companies we work with under contract. It is not open to the public: every account is created by PSC’s administrator, and there is no public sign-up.

Depending on what a company uses it for, PSCPro may hold:

• user accounts: name, email address, phone number and photo;
• project records: documents, drawings, correspondence, reports and site photos;
• HR records for a company’s staff, including salaries, passport and national ID numbers, dates of birth and next of kin;
• attendance from fingerprint terminals: the enrolment number and the time of each punch only, never a fingerprint image or template, which stays on the terminal;
• payroll and accounting records.

How PSCPro handles that information

This information is used only to provide PSCPro to the company concerned and to deliver our services under our agreement with them. Access is limited by role and by company: a client company’s records are visible to that company’s own authorised users and to the PSC staff who serve it, and never to another client.

Where a client company stores its documents on its own Google Drive, those documents are kept on that company’s drive rather than on our server.

Google user data

A client company can connect its own Google Drive account to PSCPro so that its project documents are stored on its drive. This is what PSCPro does with the Google data involved:

• Access requested: PSCPro asks for one permission only, https://www.googleapis.com/auth/drive.file. It allows PSCPro to create files and folders and to open the files it created. It cannot see, list, open or change any other file in that Google account.
• What PSCPro creates: a folder named PSCPro, with a folder for the company and one for each project inside it, sorted by module, document type and year, and the documents the company’s own users upload into it.
• What PSCPro stores: the access token Google issues for the connection, encrypted on our server, and the email address of the connected account where Google provides it, so the company can see which account is connected. PSCPro never sees or stores the Google password.
• How it is used: only to save the company’s uploaded documents and to open them again for that company’s authorised users. It is not used for advertising, not sold, not used to train artificial intelligence models, and not shared with anyone else, except where the law requires it.
• Disconnecting: the company can disconnect at any time, in PSCPro or in the permissions page of its Google account. The stored token is then deleted and PSCPro can no longer reach the drive. The files stay on the company’s drive and remain theirs.
• PSCPro does not currently offer signing in with a Google account. Users sign in with the account PSC’s administrator created for them.

Limited Use

PSCPro’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

We do not sell personal information. We share it only where it is needed to run our services:

• our hosting provider, whose server runs this website and PSCPro;
• Google Workspace, which delivers the emails this website and PSCPro send;
• a client company’s own Google Drive, when that company has connected it;
• authorities, where the law requires us to.

Where information is kept, and how it is protected

This website and PSCPro run on a server we rent from our hosting provider. Connections are encrypted with HTTPS, passwords are stored only in hashed form, and secrets such as connection tokens are encrypted. Access to PSCPro is controlled by user role and company.

How long we keep it

• Enquiries and course registrations: for as long as we need them to deal with your request and for our ordinary business records.
• Newsletter: until you unsubscribe. After that only the address and its unsubscribed status are kept, so you are not emailed again.
• PSCPro: for as long as our agreement with the company concerned requires, and as the law requires for records such as payroll.

Your choices

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it, by writing to info@psc-iq.com. You can unsubscribe from the newsletter at any time using the link in any issue. If your information is held in PSCPro by the company you work for, that company manages it, and we will pass your request on to them.

Children

This website and PSCPro are intended for businesses and their staff, not for children.

Changes to this policy

If we change this policy we will update it on this page and change the date at the top.