Privacy Policy

Last updated: 7 October 2026

This Privacy Policy explains how SP-APPS ("we", "us") collects, uses, shares and protects your personal data when you visit https://sp-apps.com or contact us. We wrote it to meet the transparency requirements of the EU General Data Protection Regulation (GDPR, Articles 13 and 14) and the UK GDPR. It also covers the Jordanian Personal Data Protection Law and the California Consumer Privacy Act (CCPA / CPRA).

1. Who is responsible for your data

The data controller is SP-APPS, Al-Dalahma Complex, Khalda-Dabouq, King Abdullah II Street, Amman, Jordan, PO Box 925946, Code 11190.

For any question about your personal data, email us at info@sp-apps.com.

2. Personal data we collect, why, and our legal basis

Contact form

  • Data we collect: Name, phone number, email address (optional), subject and message.
  • Why we use it: To answer your question.
  • Legal basis (GDPR): Steps you asked for before a contract (Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)).

Get a Quote form

  • Data we collect: Name, phone number, email address, company, website, the services you are interested in, subject and message.
  • Why we use it: To prepare and send you a proposal and estimate.
  • Legal basis (GDPR): Steps you asked for before a contract (Art. 6(1)(b)).

SP-Geo contact form

  • Data we collect: Name, email address, company, subject and message.
  • Why we use it: To answer questions about our SP-Geo APIs.
  • Legal basis (GDPR): Steps you asked for before a contract (Art. 6(1)(b)).

Job applications

  • Data we collect: Name, email address, phone number, CV / resume, and your answers to the job questions.
  • Why we use it: To assess your application and contact you about the role.
  • Legal basis (GDPR): Steps you asked for before an employment contract (Art. 6(1)(b)).

Emails and calls

  • Data we collect: Your contact details and what you tell us.
  • Why we use it: To reply and to provide our services.
  • Legal basis (GDPR): Contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)).

Technical data

  • Data we collect: IP address, browser, device, pages requested and the time of the request, in server and security logs.
  • Why we use it: To run the site, keep it secure and block bots and abuse.
  • Legal basis (GDPR): Legitimate interest in a secure website (Art. 6(1)(f)).

Analytics cookies

  • Data we collect: Pages visited, time on site, referring page, device and approximate location.
  • Why we use it: To understand how the site is used and improve it.
  • Legal basis (GDPR): Your consent (Art. 6(1)(a)). See our Cookie Policy.

Fields marked as required in our forms are needed to answer your request. If you do not provide them, we cannot reply. All other fields are optional.

We do not ask for special categories of personal data (such as health, religion or political opinions). Please do not include them in your messages or CV.

We do not use your personal data for automated decision-making or profiling that has legal or similarly significant effects on you.

3. Who we share your data with

We do not sell your personal data, and we do not share it for advertising. We share it only with service providers (processors) who help us run the website, under contracts that require them to protect it:

  • Hosting provider: stores the website, its database and uploaded files.
  • Cloudflare: delivers the website securely and protects our forms from bots (Cloudflare Turnstile).
  • Google: Google Analytics, only if you accept analytics cookies.
  • Email provider: delivers form notifications to our team and our replies to you.
  • Clutch: shows client reviews on the site. Clutch receives technical data when its widget loads.

We can also disclose personal data when the law requires it, or to protect our rights, our users or the public.

4. International transfers

SP-APPS is based in Jordan. The European Commission has not issued an adequacy decision for Jordan. When you send us a form or an email from the EEA, the UK or Switzerland, we transfer your data to Jordan because this is necessary to answer the request you made (Article 49(1)(b) GDPR).

Our service providers can process data in other countries, including the United States. These transfers rely on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

5. How long we keep your data

  • Contact, quote and SP-Geo enquiries: up to 2 years after our last contact with you. If you become a client, we keep project data for as long as the contract and our legal obligations require.
  • Job applications: up to 12 months after the hiring process for the role ends, unless you agree that we keep them longer for future roles.
  • Analytics data: up to 14 months, then Google deletes it automatically.
  • Server and security logs: up to 90 days.

When the retention period ends, we delete or anonymise your data.

6. How we protect your data

We use technical and organisational measures to protect your personal data. These include HTTPS encryption for all traffic, bot and abuse protection on our forms, access to the admin panel only for authorised staff with individual accounts, and regular software updates. No online system is completely secure. If a personal data breach puts your rights at risk, we will inform the competent authority and, where required, you.

7. Your rights under the GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to:

  • Access your personal data and get a copy of it (Article 15).
  • Rectify data that is wrong or incomplete (Article 16).
  • Erase your data, the "right to be forgotten" (Article 17).
  • Restrict how we process your data (Article 18).
  • Data portability: receive your data in a structured, machine-readable format (Article 20).
  • Object to processing based on our legitimate interests (Article 21).
  • Withdraw your consent at any time, for example with the "Cookie Settings" link in the footer. This does not affect processing done before you withdrew it.
  • Lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you think a breach happened.

We reply to every request within one month. If a request is complex, we can extend this by two more months, and we will tell you why.

8. How to delete your data

To ask us to delete your personal data, send an email to info@sp-apps.com with the subject "Data deletion request". Include:

  • Your full name.
  • The email address or phone number you used when you contacted us.
  • Which data you want us to delete, or "all my data".

We can ask you for more information to confirm your identity, so that we never delete or disclose someone else's data. We then delete your data from our website database, uploaded files and mailboxes, and we ask our service providers to delete it too. We confirm by email when the deletion is complete, within one month of your request.

We can keep some data when the law requires it (for example, invoices for tax purposes), or when we need it to establish, exercise or defend a legal claim. If this applies, we tell you which data we keep and why.

You can use the same email address for all your other rights, such as access, correction or portability.

9. California residents (CCPA / CPRA)

If you are a California resident, you have the right to know which personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We honor the Global Privacy Control (GPC) signal. We will not discriminate against you for using these rights. To make a request, email info@sp-apps.com. We reply within 45 days.

10. Children

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you think a child has sent us personal data, email us and we will delete it.

11. Changes to this policy

We can update this Privacy Policy when our services or the law change. We post every change on this page and update the date at the top. If a change is significant, we show a notice on the website.

12. Contact us

For any question about this policy or your personal data, email info@sp-apps.com or write to SP-APPS, Al-Dalahma Complex, Khalda-Dabouq, King Abdullah II Street, Amman, Jordan, PO Box 925946, Code 11190.