Introduction
This Privacy Policy explains how BarmajTek collects, uses, stores, and protects personal data when you use barmajtek.com and related marketing pages. We aim to collect only what is needed to run the site and respond to business requests — not to build expansive marketing profiles without clear consent.
By using the site or submitting a form, you acknowledge that you have read this Privacy Policy. If you do not agree, please stop submitting personal data through forms and contact us only through public channels when needed.
Scope
This policy covers barmajtek.com, contact/demo/project/partner forms, newsletter signup, and related legal pages. It does not fully describe data processing inside logged-in SaaS products such as Clinic Tek; that processing is governed by service agreements and product-specific documentation.
We may update this Privacy Policy when measurement tools or legal requirements change. The last updated date appears at the top of the page. Continued use after an update constitutes acceptance of the new version unless additional consent is legally required.
What we collect
When you complete contact, demo, start-project, or partner forms, we collect name, email, phone, organization name, and the message or brief you send. Newsletter signup collects only your email, and you may unsubscribe anytime via the link in each message.
We may process basic technical data such as approximate IP address and browser type for security and operations. Analytics tools such as Google Analytics and Microsoft Clarity load only after explicit analytics consent. Session replay is not initialized on contact, demo, start-project, or partner-application pages. Allowed browser events contain no full page URL, query string, or form text, and this release does not enable a Website server-side analytics event store.
We do not intentionally solicit sensitive data through marketing forms. If you voluntarily include detailed medical or financial information in a free-text message, we process it only as needed to reply, then delete or minimize retention according to purpose.
How we use your data
We use your data to answer inquiries, schedule demos you requested, prepare project proposals, evaluate partner applications, and send the newsletter if you subscribed. We may use aggregated, non-identifying data to improve site content and conversion paths.
We do not sell personal data. We may share limited data with necessary infrastructure providers (hosting, email, abuse protection) under confidentiality and processing commitments, only as required to deliver the service.
YouTube API Services and Google data
The internal BarmajTek Social Publisher uses the YouTube Data API and YouTube Analytics API only for BarmajTek’s owned @BarmajTek account and channel. It uploads team-approved media, manages titles, descriptions, visibility, and eligible thumbnails, and reads channel, video, processing, and performance data. The client has no external users, cannot manage third-party channels, and does not sell or transfer Google user data.
Authorization uses Google OAuth 2.0 with scopes limited to upload, channel-read, and analytics operations needed for this workflow. BarmajTek never collects the Google account password. Our YouTube data use follows the YouTube API Services Terms, Developer Policies, and Google Privacy Policy, and the account owner can review or revoke access at any time.
Google data retention, revocation, and deletion
OAuth credentials are kept in a private secret store available only to authorized operators. We retain channel and video identifiers, publication receipts, processing state, and public metrics only as needed to prevent duplicate uploads, operate scheduling, and assess content. Public or derived YouTube metrics are not retained for more than 36 months, and operational records are reviewed periodically for minimization.
The Google account owner may revoke BarmajTek Social Publisher from Google Account permissions or request revocation and deletion through the contact channel on barmajtek.com. After verification, we stop new API requests, delete access and refresh tokens promptly, and remove stored Google data not required for legal or security purposes within 30 days. Backup copies expire through the normal retention cycle.
Legal basis and retention
We rely on performing your request (contract or pre-contract steps), legitimate interests in running a secure useful site, and consent where required for marketing measurement or newsletters. BarmajTek retains form data for as long as needed to respond and follow up commercially, then deletes or anonymizes it unless law requires longer retention.
You control access, correction, and deletion requests within legal limits. Email us via the address on the contact page to request a copy, correction, or deletion of your marketing contact data. We will fulfill verified requests within a reasonable time.
Cookies and security
We use necessary storage for consent state and bounded campaign attribution sent with a form you request. Analytics and marketing are denied by default. You can change either category or withdraw consent at any time through Cookie settings in the footer. Analytics withdrawal stops future capture and removes optional Website identifiers, campaign attribution, and cookies that Website code can remove from your device.
We apply reasonable technical and organizational measures against unauthorized access, but no internet transmission is perfectly secure. If you believe a breach involving your data occurred on our site, tell us immediately so we can investigate and notify when required.
Contact
For Privacy Policy questions or data-rights requests, contact BarmajTek using the email shown on the contact page at barmajtek.com. We aim to reply within reasonable Jordan business days.