Privacy policy

Last updated: 17 September 2026

Who we are

Simplify9 is a software design and consultancy firm with offices in Amman, Jordan and Dubai, United Arab Emirates. For information collected through this website, our recruitment process, and our direct commercial relationships, Simplify9 acts as the data controller.

Where we process data on behalf of a client as part of a delivered service, we act as a processor and that processing is governed by the agreement and data processing terms signed with that client, not by this policy.

Information we collect

• Information you give us: your name, work email, company, phone number, and the content of any message when you submit a form, book a meeting, or subscribe to our writing.
• Recruitment information: your CV, work history, education, portfolio or repository links, and interview notes when you apply for a role or join our internship program.
• Information collected automatically: IP address, browser and device type, pages viewed, time on page, referring source, and an approximate city-level location derived from your IP address.
• Client project data: data processed inside systems we build or operate for a client, accessed only as needed to deliver, support, or secure that system.

How we use information

• Respond to enquiries, prepare proposals, and schedule meetings.
• Deliver, support, secure, and improve the services a client has engaged us for.
• Assess job and internship applications and communicate with candidates.
• Send updates, articles, and event invitations where you asked to receive them.
• Understand how the site is used so we can improve its content and structure.
• Meet legal, tax, accounting, and information security obligations.

Legal bases for processing

Where data protection law requires a legal basis, we rely on one of the following: performance of a contract with you or your organisation; our legitimate interests in running and improving a business, balanced against your rights; your consent, which you may withdraw at any time; and compliance with a legal obligation.

Cookies and analytics

We use a small number of cookies and similar technologies, grouped into three purposes:

• Strictly necessary: keep the site secure, remember your cookie choice, and allow core pages to function. These cannot be switched off.
• Analytics: aggregated measurement of page views, referrers, and navigation paths so we can see what is useful. Data is aggregated and not used to identify you.
• Preference: remember settings such as language or a dismissed notice.

We do not use advertising, retargeting, or cross-site tracking cookies, and we do not sell audience data. You can accept or decline non-essential cookies using the banner shown on your first visit, and change that choice at any time using the Cookie settings link in the footer of every page.

When we share information

• Service providers acting on our instructions under contract: cloud hosting, email, CRM, applicant tracking, analytics, and support tooling.
• Professional advisers such as auditors, accountants, and lawyers, where required for their work.
• Public authorities, where disclosure is required by law or necessary to protect rights and safety.
• A successor entity, in the event of a merger, acquisition, or reorganisation, subject to this policy.

We do not sell personal data, and we do not share it with third parties for their own marketing.

International transfers

Your information may be processed in Jordan, the United Arab Emirates, the European Union, or the United States, depending on where we and our providers operate. Where information leaves its country of origin, we rely on appropriate safeguards, including standard contractual clauses and provider commitments on security and confidentiality.

How long we keep information

• Enquiries and meeting requests: 24 months from the last contact.
• Recruitment records: 12 months after a decision, unless you agree to be kept on file for longer.
• Contract, invoice, and tax records: for the period required by applicable law.
• Analytics: aggregated and stripped of identifiers within 14 months.

How we protect information

We apply encryption in transit and at rest, least-privilege access with multi-factor authentication, centralised logging and monitoring, secure development and code review practice, and periodic access reviews. Our teams work to the same DevSecOps standards we advise clients on.

No system can be guaranteed perfectly secure. If a breach affects your information and the law requires notification, we will inform you and the relevant regulator without undue delay.

Your rights and choices

• Ask what personal data we hold about you and receive a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information where there is no longer a lawful reason to keep it.
• Object to, or ask us to restrict, processing based on legitimate interests.
• Withdraw consent for marketing at any time, including through the unsubscribe link in every email.
• Complain to your local data protection authority.

Send requests to [email protected]. We respond within 30 days and may ask for information to verify your identity.

Children

This website and our services are directed at businesses and professionals. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We update this policy when our practices or the law change. The current version and its date always appear at the top of this page. Where a change materially affects how we use your information, we will make that clear on the site before it takes effect.