PRIVACY POLICY
Last updated: 28 October 2026
Altawfiq Contracting & Manufacturing uses the information you send through this website to answer enquiries, prepare quotations, follow up on requests and review career applications. Contact info@al-tawfiq-contracting.com about your information.
Forms collect your name, phone number, email if provided, service, request type, details and preferred contact method. Project budgets and attachments are optional. Career applications collect an email address, desired role or field, experience summary and PDF CV, plus city and years of experience if provided. Operational information includes your reference, timestamps, request status and internal follow-up notes.
Information is used to understand your requirements, communicate, prepare quotations and handle feedback. Career details and CVs are used to review experience and contact applicants about suitable opportunities; they are not published on the website. We do not sell contact information or automatically add you to marketing lists. Do not send passwords, payment card details or sensitive documents not needed for your project.
Requests are stored in a database and attachments in file storage that is not publicly accessible. The management dashboard and attachment downloads are restricted to authorized administrative accounts. The hosted site uses HTTPS, and infrastructure is provided by the hosting provider.
Supplier registration collects company and contact details and product or service proposals. Passwords are stored as salted password hashes, never readable plaintext. A necessary Secure HttpOnly session cookie lasts up to 8 hours and is revoked at sign-out. Only the supplier and authorized administrators can access its proposals. Registration is not supplier approval. Automated email verification and password-reset emails are not configured; contact the company for account support.
When the Zoho connection is enabled, operational notifications to the company mailbox contain only the request type, reference and administration link. CVs and personal contact details are not included in these notices. Full request details and attachments remain in the protected dashboard.
The site validates inputs and limits request frequency. A temporary non-public key may be derived from the connection address to apply this limit. Expired rate-limit keys are removed while processing requests and are not displayed to visitors.
Information is kept for as long as needed to handle the request and related relationship, or review the career application and suitable opportunities. You may request access, correction or deletion by contacting the official email with your reference and contact details. Appropriate verification may be requested before action is taken.
Opening WhatsApp, your email app or a phone call takes you to the service you choose, which has its own policies. No third-party analytics or advertising tools are enabled in the current version. This policy should be reviewed before adding tools that collect additional data.
