Privacy and personal information

Who is responsible

Keybridge is the public name of Keybridge LLC. Our main branch is in Erbil. This notice covers website visitors, business inquiries, applicants, clients and people whose information appears in client records.

We manage information for our own inquiries and business administration. When handling records on a client’s instructions, our responsibilities depend on the work and the agreed processing arrangements.

Information we receive

Information may come from you, your organisation or its authorised representatives.

• Inquiries: name, company, WhatsApp number, optional email, selected services, timing and answers about the proposed work.
• Applications: name, email, introduction and any professional links you provide through Careers.
• Client records: documents and instructions needed for the agreed service, including information about owners, employees, customers, suppliers or other contacts.
• Technical information: requests made by your browser when loading the website and its external resources.

Records used across our services

The documents needed depend on the engagement. These examples are not a request to send every category.

• Company registration: ownership information, identity evidence and company papers.
• Vendor registration: company credentials, personnel evidence and supporting records.
• ISO certification support: management-system documents, procedures and relevant personnel records.
• Tender preparation: technical submissions, commercial terms, pricing and supporting evidence.
• Corporate websites: approved content, account permissions and client-supplied materials.
• Bookkeeping and filing: transactions, invoices, financial records and relevant employee or supplier information.

Why we use information

We use information to answer inquiries, assess applications, prepare proposals, carry out agreed work and communicate with authorised contacts. We also need records of instructions, approvals, deliverables, payments and submissions.

Some records may be needed to meet legal obligations or establish, exercise or defend a legal claim. An engagement may require additional privacy information or processing terms suited to that work.

Who may receive it

Access arrangements are defined for each engagement. Much of our work is delivered in-house. When a service requires an outside contractor, they sign an NDA. Approved submissions may go to authorities, registries, vendor-list owners, certification bodies, buyers or other recipients identified for the work.

Website inquiries and Careers submissions pass through Web3Forms. Its published documentation states that submissions are processed in the United States and forwarded to the configured destination; technical logs may also contain personal information.

Communication and document providers may process information through the channels agreed for the engagement.

Website technology and browser storage

Google Analytics is disabled. This website does not set analytics cookies.

Your browser stores a language preference and temporary page-transition and session settings. The language preference remains until cleared or replaced. You can remove stored settings through your browser controls.

Pages request fonts from Google Fonts and libraries from jsDelivr. Requests to website hosting and external resource providers can include your IP address, browser information and the requested resource.

Messaging and AI links

Opening a prepared WhatsApp message passes its text to WhatsApp. External communication services process information under their own terms.

The website’s ChatGPT, Claude and Perplexity links pass a generic prompt to the selected provider. That prompt does not include your inquiry details or client documents. Anything you add there is handled by that provider.

Keybridge uses LLMs only with public or non-private information. We never upload internal, secure or private client documents to LLMs.

Where information is handled

Erbil is our main branch. Helsinki does not handle client work or client documents. Our CRM and internal systems are hosted locally; this does not mean every website or communication provider processes information in the same location.

The storage provider and any external access locations for confidential client files need confirmation for the engagement before those files are exchanged.

Retention and the end of an engagement

Our business email and file-storage setup and a fixed retention schedule are still being finalised. We do not currently specify a standard retention period for inquiries, applications or client files.

Before confidential documents are exchanged, written arrangements must address storage, access and return or deletion. Retention decisions need to distinguish client originals, working copies, final deliverables and records required by law, agreement or a legal claim. Backup handling must also be addressed before any deletion commitment is made.

Privacy requests

Contact info@keybridge.krd to ask about your information or request access, correction or deletion. Depending on applicable law and the processing involved, other rights may include restriction, objection, portability, withdrawal of consent and a complaint to the relevant supervisory authority.

We may need to verify your identity. Where we act on a client’s instructions, we may need to coordinate your request with that client. Applicable legal conditions and deadlines govern the response.

Contact and updates

Correspondence: Keybridge LLC, Empire Building, Empire Square 4, Erbil. Email: info@keybridge.krd.

We will update this notice when the described processing changes. See Security for confidential-document handling and Website terms for the scope of this website.