Legal

Privacy Policy

Last updated: March 2026

1. Who We Are

Penta Group for Engineering & General Contracting (“Penta Group”, “we”, “us”, or “our”) is an engineering and contracting company headquartered in Baghdad, Iraq. We are the data controller for personal data collected through this website.

For privacy-related enquiries, contact us at: info@pentagroupco.com

2. Data We Collect

We may collect the following categories of personal data:

  • Contact data: name, email address, phone number, and company name submitted via our contact or careers forms.
  • Usage data: IP address, browser type, pages visited, and time spent on pages, collected automatically when you use our website.
  • Communications data: the content of messages or enquiries you send us.

We do not collect sensitive personal data (e.g. health, financial, or biometric data) through this website.

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

  • Responding to enquiries — to respond to contact form submissions (legal basis: legitimate interests / performance of a contract).
  • Recruitment — to process job applications and assess candidates (legal basis: legitimate interests / steps prior to entering a contract).
  • Website analytics — to understand how visitors use our website and improve it (legal basis: legitimate interests).
  • Legal compliance — to comply with applicable laws and regulations (legal basis: legal obligation).

We will not use your data for automated decision-making or profiling.

4. How We Share Your Data

We do not sell or rent your personal data. We may share it with:

  • Service providers acting as data processors on our behalf (e.g. website hosting, email delivery) who are contractually required to protect your data.
  • Regulatory or legal authorities where required by law.

Any transfers of personal data outside the European Economic Area (EEA) will be conducted under appropriate safeguards, such as standard contractual clauses approved by the European Commission.

5. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

  • Contact form data: up to 2 years from last interaction.
  • Job application data: up to 12 months from the date of application, unless you are offered a position.
  • Website analytics data: up to 26 months.

After the retention period, data is securely deleted or anonymised.

6. Cookies

Our website may use cookies and similar tracking technologies to enhance your experience and analyse traffic. These may include strictly necessary cookies (required for the site to function) and analytics cookies (used to understand usage patterns).

You can control cookie settings through your browser. Disabling certain cookies may affect website functionality.

7. Your Rights

Under applicable data protection law (including the UK GDPR and EU GDPR where applicable), you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”) in certain circumstances.
  • Restrict our processing of your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@pentagroupco.com. We will respond within 30 days. You also have the right to lodge a complaint with a relevant supervisory authority.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. However, no internet transmission is completely secure and we cannot guarantee absolute security.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or how we handle your data, please contact us at: info@pentagroupco.com