Privacy Policy

Madad Investment ("Madad," "we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website or contact us.

We may collect:

• Contact information (name, email, phone, company)

• Inquiry details you submit via forms

• Job applications sent through the careers form: your details, LinkedIn profile, message and CV files

• Your email address, if you subscribe to our news

• Technical data (IP address, device, browser, pages visited)

• Analytics data: page-view counts from Vercel Analytics on every visit, and Google Analytics data only if you accept it in the cookie notice (see section 5)

We use information to:

• Respond to inquiries and provide requested information

• Consider job applications

• Send our news to subscribers

• Improve website performance and user experience

• Maintain security and prevent fraud, including spam and automated abuse of our forms

• Comply with legal obligations

When you send the contact or careers form, your submission is emailed to our team; it is not stored on this website, and we do not send an automatic reply to the address you enter.

If you subscribe to our news in the website footer, your email address is added to our newsletter list straight away. We use it only to send MADAD news. Every newsletter includes a link to unsubscribe, and you can also ask us to remove you at any time. If you unsubscribed before, signing up again does not put you back on the list; contact us if you want to rejoin.

We process personal data based on consent, legitimate interests, contractual necessity, and/or legal obligations depending on context and jurisdiction.

We answer enquiries on the basis of our legitimate interest in responding to people who contact us, consider job applications as steps taken at your request before a possible employment contract, and send news to subscribers on the basis of the consent you give by subscribing, which you can withdraw at any time by unsubscribing.

Google Analytics is used only on the basis of your consent (Article 6(1)(a) GDPR), which you can withdraw at any time, as described in section 5. Vercel Analytics, which sets no cookies and identifies no one, rests on our legitimate interest in knowing how many people use the website and which pages help them (Article 6(1)(f) GDPR).

Google Analytics does not run on this website until you choose Accept in the cookie notice. If you choose Reject, or your browser sends a Global Privacy Control signal, it never loads, and the website works exactly the same. Vercel Analytics, described below, sets no cookies and is not part of that choice: it counts every visit.

Google Analytics 4 (Google Ireland Limited, with Google LLC as its processor) sets two cookies on this website: _ga, which tells one browser’s visits apart, and _ga_<ID>, which keeps the current session. Both expire after 13 months. Google Signals and all advertising features are switched off, so the data is not used for advertising or linked to a Google account, and Google Analytics does not store IP addresses.

Vercel Analytics (Vercel Inc.) sets no cookies and stores nothing on your device, which is why it runs without asking. It counts page views, with the page, the referring site, the approximate location and the type of device, operating system and browser, using a hash of the request that is discarded within 24 hours, so it cannot recognise you on a later day. We see only totals.

Both services may process this data in the United States. Google LLC and Vercel Inc. are certified under the EU–U.S. Data Privacy Framework, and both use standard contractual clauses where that framework does not apply.

Google Analytics runs only on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw it at any time: choose Cookie Settings at the foot of any page, or turn off Google Analytics on the Settings page. Google Analytics stops at once and its cookies are deleted. Withdrawing does not affect measurement that took place before. Vercel Analytics rests on our legitimate interest in knowing how many people use the website and which pages help them (Article 6(1)(f) GDPR); because it identifies no one and stores nothing on your device, it does not depend on the cookie notice.

Your choice is kept in your browser’s local storage for 12 months, after which we ask again. It is not a cookie and is never sent to us. Your language and display settings are kept the same way. These are strictly necessary for the website to work as you asked; our Cookie Policy lists each of them.

We may share information with:

• Service providers who process data for us under confidentiality obligations: Vercel Inc. (website hosting, and Vercel BotID, which checks form submissions for automated bots), Resend (delivers your enquiry or application to our team by email and keeps our newsletter list), and Upstash (short-lived counters that limit how often a form can be sent; they hold only a one-way hash of your IP address, or of your email address for newsletter signups, and expire within 24 hours)

• Vercel and Google as analytics providers: Vercel Analytics counts page views without cookies, and Google Analytics receives technical usage data only if you accept it (see section 5)

• Professional advisors (legal, audit) where necessary

• Authorities if required by law

We retain personal data only as long as necessary for the purposes described, unless a longer retention period is required by law. Analytics cookies and your analytics choice expire as described in section 5.

Job applications, including CVs, are kept for up to 12 months after we receive them and then deleted, unless you ask us to delete them sooner or we agree otherwise with you. Enquiries are kept as long as needed to respond and follow up. Newsletter subscribers stay on the list until they unsubscribe or ask us to remove them.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. You can also withdraw your consent to Google Analytics at any time, without affecting earlier processing (see section 5). Contact us at info@madadinvestment.com.

If data is transferred internationally, we use appropriate safeguards as required by applicable law. Our hosting, email and rate-limit providers (Vercel, Resend and Upstash) may process data outside your country, including in the United States, under such safeguards (for example standard contractual clauses). Transfers by our analytics providers are described in section 5.

We implement reasonable technical and organizational measures to protect personal information. However, no method of transmission or storage is fully secure.

For privacy-related questions, contact: info@madadinvestment.com

Address: Azaiba Heights, Muscat, Oman