We, CardSelling, are a digital platform and service provider registered at Shoresh Street in Erbil, Kurdistan, Iraq, hereinafter referred to as CardSelling. At CardSelling, we value your privacy and strive to protect your personal information in compliance with the applicable laws of Iraq.

This Privacy Policy explains our practices and principles for collecting, using, and safeguarding your personal information. By accessing and using CardSelling’s platform (website, application, or mobile site), you expressly consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with this policy, please do not use CardSelling.

Definitions

• CardSelling, “we”, “our platform”, “us” refers to the CardSelling platform and services.
• You, “your” refers to any person, customer, user, agent, merchant, dealer, or visitor accessing CardSelling’s products or services.
• Personal Information means any data that identifies you directly or indirectly, including but not limited to: your name, address, gender, date of birth, contact details, ID/passport details, occupation, and your transaction history with CardSelling.

General Principles

• CardSelling will maintain strict confidentiality of your information.
• We will not sell, rent, or share your personal data to third parties, except as outlined in this Privacy Policy.
• We may share anonymized or aggregated data for analytics, security, or service enhancement.

Collection of Information

We may collect information from you directly or indirectly through:

• Account creation, transaction records, order processing, or service requests.
• Communication with us via email, phone, SMS, in-app chat, or social media.
• Device information (IP, cookies, identifiers, location data).
• Regulatory or financial authorities where required by law.

Use of Personal Information

• Account creation, identity verification, and transaction processing.
• Customer support and dispute resolution.
• Compliance with legal and regulatory obligations (including anti-fraud and AML requirements).
• Marketing communications and promotional offers (with your consent).
• Enhancing, personalizing, and improving CardSelling’s services.
• Security monitoring, fraud detection, and risk management.

Disclosure of Information

We may disclose your personal data to:

• Regulatory and supervisory authorities, including the Central Bank of Iraq, where applicable.
• Service providers, business partners, contractors, and agents supporting CardSelling operations.
• Legal advisors, auditors, or debt collection agencies when necessary.
• Government agencies, courts, or law enforcement, as required by law.

Marketing

With your consent, CardSelling may use your data to provide information on offers, promotions, or new services. You can opt out at any time through in-app settings or by contacting us directly.

Security of Information

We apply strict physical, technical, and organizational measures to protect your personal information from unauthorized access, loss, misuse, or disclosure.

Data Retention

We retain your personal data only as long as required for service provision, compliance with legal requirements, or dispute resolution. Anonymized data may be stored indefinitely.

Your Rights

• Access and review your personal data.
• Request corrections or updates to your information.
• Withdraw consent for marketing or specific uses of your data.
• Request deletion of your personal data, subject to legal obligations.

You may contact us for such requests via:

Website: www.cardselling.org
Email: info@cardselling.org
Phone: +964662205050

Consent

By using CardSelling, you consent to the collection, processing, and disclosure of your personal information in accordance with this Privacy Policy.

Amendments

CardSelling reserves the right to update this Privacy Policy at any time. Updates will be posted on our website and app, and continued use of CardSelling services indicates acceptance of the updated terms.

Right to Lodge Complaint

If your concern is not resolved through our channels, you have the right to lodge a complaint with the relevant data protection authority in Iraq.