Introduction
Welcome to the Halabja Group website. Ensuring the privacy of our visitors is fundamental to our values. The subsequent Privacy & Policy details our commitment to safeguarding your privacy.
No Collection of Personal Information
We respect your privacy. Thus, while you browse through our site, rest assured that we do not track, collect, or store any personal information about our visitors.
No Use of Cookies
Our website does not employ cookies. There's no storage or tracking of your preferences or any other related data that cookies usually manage.
Third-Party Links
Although our site may have links directing to other websites, we do not control their content, policies, or practices. As these third-party websites have their own privacy policies, we advise you to review them should you choose to visit those sites.
Non-Usage of Personal Information
Given that we don’t collect personal information, there's no risk of it being used, traded, rented, or sold. Your privacy remains uncompromised at all times.
Changes to this Policy
Halabja Group reserves the right to modify this Privacy & Policy whenever necessary. Visitors are encouraged to review it periodically to stay informed.
Consent
By accessing our website, you acknowledge and consent to our Privacy & Policy.
Contact Us
Should you have any questions or concerns regarding this policy, please reach out to us through our specified communication channels.
Our commitment to the highest standards is mirrored in our approach to your privacy. At Halabja Group, we prioritize creating a trustworthy environment where our relationship with each visitor is valued and respected.
Last updated: April 20, 2026
Effective date: April 20, 2026
Halabja Group ("we", "our", or "us") operates the Garden City mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.
By using the App, you agree to the collection and use of information in accordance with this policy.
---
Company: Halabja Group
Address: Garden City Compound, Halabja, Kurdistan Region, Iraq
Contact: info@halabjagroup.com
Website: halabjagroup.com
---
Name and email address: Account login and identification
Password: Account authentication (stored as a secure hash — never in plain text)
Maintenance request details: Processing your maintenance and helpdesk tickets
Taxi request details: Fulfilling your taxi requests within the compound
Device location (GPS): Auto-filling your pickup location when you request a taxi. Location is only accessed when the app is open and only when you initiate a taxi request.
Device push notification token (FCM): Sending you push notifications about ticket replies, taxi updates, invoices, and compound announcements
Device platform (iOS / Android): Ensuring push notifications are delivered correctly
We do not collect your contacts, microphone, or camera roll beyond the specific image you choose to attach to a support ticket.
We do not track your location in the background.
We do not collect payment card details directly — payments are processed through a third-party payment gateway.
We do not sell your data to any third party.
We use the information we collect to:
Provide the App's core services — property management, invoices, maintenance requests, helpdesk support, taxi service, and the resident shop.
Send push notifications — to notify you about updates to your tickets, taxi requests, invoice status, and compound announcements. You can disable notifications at any time in your device Settings.
Improve the App — crash reports and error logs help us fix issues (no personally identifiable information is included in crash reports).
Communicate with you — to respond to support requests or send important service notices.
Your account data is stored on our secure server at erp.halabjagroup.com, operated by Halabja Group in the Kurdistan Region of Iraq.
All communication between the App and our server is encrypted using HTTPS/TLS.
Passwords are stored as cryptographic hashes and are never readable by our staff.
Push notification tokens are stored securely and used only to deliver notifications to your device.
We retain your data for as long as your resident account is active. When an account is closed, personal data is deleted within 90 days.
The App uses the following third-party services, each with its own privacy policy:
[TABLE — 3 columns: "Service" | "Purpose" | "Privacy Policy"]
Google Firebase (Cloud Messaging): Push notifications | firebase.google.com/support/privacy
Google Firebase (Crashlytics): Crash reporting | firebase.google.com/support/privacy
We do not share your personal information with these services beyond what is necessary to deliver their function.
The App requests access to your device's location only when you use the taxi feature and only while the App is open (foreground only). Location data is:
Used solely to fill in your current GPS coordinates as the taxi pickup point.
Sent to our server as part of your taxi request.
Not stored beyond the duration of the taxi request.
Never shared with advertising networks or data brokers.
You can deny location permission at any time in your device Settings. The taxi feature will still work — you will simply need to confirm your location manually.
We send push notifications to inform you about:
Replies to your helpdesk tickets
Updates to your taxi request (assigned driver, arrival, completion)
Invoice status changes
Compound announcements from Garden City management
You can opt out of notifications at any time in your device Settings → Notifications → Garden City.
The App is intended for adult residents of the Garden City compound. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
You have the right to:
Access — request a copy of the personal data we hold about you.
Correction — request that inaccurate data be corrected.
Deletion — request deletion of your account and associated personal data.
Withdraw consent — disable push notifications or location access at any time in device Settings.
To exercise any of these rights, contact us at info@halabjagroup.com.We will respond within 30 days.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you through the App or by email.
Continued use of the App after changes are posted constitutes your acceptance of the revised policy.
If you have any questions about this Privacy Policy, please contact us:
Halabja Group
Garden City Compound, Halabja
Kurdistan Region, Iraq
Email: info@halabjagroup.com
Website: halabjagroup.com
Last updated: June 7, 2026
Effective date: June 7, 2026
Halabja Group ("we", "our", or "us") operates the Halabja Employee Portal mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.
By using the App, you agree to the collection and use of information in accordance with this policy.
Company: Halabja Group
Address: Garden City Compound, Halabja, Kurdistan Region, Iraq
Contact: info@halabjagroup.com
Website: halabjagroup.com
Name and email address: Account login and identification
Password: Account authentication (stored as a secure hash — never in plain text)
Employee ID and job information: Linking your account to your employee record in the HR system
Leave request details: Processing your leave and time-off requests
Overtime request details: Recording and approving overtime work
Profile information: Displaying your employee profile and contact details
Device location (GPS): Recording your location when you check in/out for attendance. Location is only accessed when you actively use the attendance feature.
Attendance timestamps: Recording when you check in and check out
Device push notification token (FCM): Sending you push notifications about leave approvals, overtime status, payslip availability, and company announcements
Device platform (iOS / Android): Ensuring push notifications are delivered correctly
We do not collect your contacts, microphone, camera, or photo library.
We do not track your location outside of active attendance check-in/check-out.
We do not collect payment card details — payroll is processed through the company's internal HR system.
We do not sell your data to any third party.
We use the information we collect to:
Provide the App's core services — attendance tracking, leave management, overtime requests, payslip access, and employee profile management.
Send push notifications — to notify you about leave request approvals/rejections, overtime status, new payslips, and company announcements. You can disable notifications at any time in your device Settings.
Improve the App — crash reports and error logs help us fix issues (no personally identifiable information is included in crash reports).
Communicate with you — to respond to support requests or send important HR notices.
Comply with employment regulations — maintaining accurate attendance and leave records as required by labor law.
Your employee data is stored on our secure server at erp.halabjagroup.com, operated by Halabja Group in the Kurdistan Region of Iraq.
All communication between the App and our server is encrypted using HTTPS/TLS.
Passwords are stored as cryptographic hashes and are never readable by our staff.
Push notification tokens are stored securely and used only to deliver notifications to your device.
The App uses the following third-party services, each with its own privacy policy:
Google Firebase (Cloud Messaging) | Push notifications | firebase.google.com/support/privacy [LINK → https://firebase.google.com/support/privacy]
Google Firebase (Crashlytics) | Crash reporting | firebase.google.com/support/privacy [LINK → https://firebase.google.com/support/privacy]
We do not share your personal information with these services beyond what is necessary to deliver their function.
The App requests access to your device's location only when you use the attendance check-in/check-out feature and only while the App is open (foreground only). Location data is:
Used to record the GPS coordinates of your attendance check-in and check-out.
Sent to our server as part of your attendance record.
Stored as part of your employment attendance history.
Never shared with advertising networks or data brokers.
Accessible only by authorized HR personnel.
You can deny location permission at any time in your device Settings. The attendance feature will still work, but your check-in/check-out will be recorded without location data.
We send push notifications to inform you about:
Approval or rejection of your leave requests
Approval or rejection of your overtime requests
New payslips available for viewing
Company announcements from Halabja Group management
You can opt out of notifications at any time in your device Settings → Notifications → Halabja Employee Portal.
The App is intended for employees of Halabja Group who are at least 18 years old. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.
You have the right to:
Access — request a copy of the personal data we hold about you.
Correction — request that inaccurate data be corrected.
Explanation — ask questions about how your data is used and stored.
Withdraw consent — disable push notifications or location access at any time in device Settings.
Please note that certain employment data (attendance records, leave history, payslips) must be retained for legal compliance and cannot be deleted while you are an active employee or during the legal retention period after employment ends.
To exercise any of these rights, contact us at info@halabjagroup.com or speak with the HR department. We will respond within 30 days.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you through the App or by email.
Continued use of the App after changes are posted constitutes your acceptance of the revised policy.
---
If you have any questions about this Privacy Policy, please contact us:
Halabja Group building
Chwarchra, Sulaimanyah
Kurdistan Region, Iraq
Email: info@halabjagroup.com