Privacy Policy

How the Arab Iron & Steel Union collects, uses and protects your data.

Last updated: September 23, 2026

The Arab Iron and Steel Union ("AISU", "the Union", "we") respects your privacy. This policy explains what personal data we collect through the AISU website and mobile application (together, "the Platform"), why we collect it, and the choices you have.

1. Who we are

The Arab Iron and Steel Union is an Arab non-profit organisation founded in 1972 to develop the iron and steel industry in the Arab region.

2. Data we collect

Data you give us

  • Account registration: name, official email address, phone number, company name, business activity, country and password (stored only in encrypted/hashed form).
  • Subscription requests: the package you request and the bank-transfer details or receipt you submit as proof of payment.
  • Forms: information you enter in the contact form, event and training registration forms, training feedback forms and expert registration forms.
  • Consent records: the date and time you accepted these policies.

Data collected automatically

  • Usage data: pages visited, links clicked, device and browser type, approximate location derived from your IP address, and referring pages, collected through analytics tools (Google Analytics, Google Tag Manager and Microsoft Clarity).
  • Session data: cookies and similar technologies that keep you signed in and remember your language preference.
  • Mobile app data: a device identifier and push-notification token, used to deliver notifications you have enabled.

We do not intentionally collect sensitive personal data, and the Platform is not directed at children under 16.

3. How we use your data

We use your data to:

  1. Create and manage your account and verify that it belongs to a genuine organisation.
  2. Process subscription requests, confirm bank-transfer payments and give you access to the content your package includes.
  3. Answer your enquiries and manage your registration for events and training programmes.
  4. Send service messages — verification codes, subscription approvals, renewal reminders and expiry notices — by email and push notification.
  5. Send newsletters and announcements where you have chosen to receive them.
  6. Understand how the Platform is used so we can improve it, and keep it secure and prevent misuse.
  7. Comply with our legal obligations.

We may delete accounts that appear fake or that belong to an unidentifiable organisation.

4. Sharing your data

We do not sell your personal data. We share it only with:

  • Service providers that host and operate the Platform on our behalf, such as cloud hosting and file storage (Amazon Web Services), email delivery, push notifications (Google Firebase), analytics (Google, Microsoft) and our website chat assistant. They may use your data only to provide their service to us.
  • Authorities, where required by law or to protect the rights and safety of the Union, our users or others.

Some of these providers process data outside your country. Where they do, we rely on their contractual and security commitments to protect it.

5. Cookies

We use essential cookies to keep you signed in and to remember your preferences, and analytics cookies to measure how the Platform is used. You can block or delete cookies in your browser settings; if you block essential cookies, some features, such as signing in, will not work.

6. How long we keep data

We keep account data while your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution needs. Form submissions and correspondence are kept for as long as needed to handle your request. Analytics data is kept in aggregated or pseudonymised form.

7. Security

We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, private file storage with time-limited access links, and role-based access for our staff. No system is completely secure, so please keep your password confidential and tell us straight away if you suspect unauthorised use of your account.

8. Your rights

Subject to applicable law, you can ask to:

  • access the personal data we hold about you;
  • correct inaccurate data (you can update most profile details yourself from your account page);
  • delete your account and data;
  • object to or withdraw consent to marketing messages at any time.

To exercise these rights, email us at relex@solbarab.org. We may need to verify your identity before acting on a request.

9. Third-party links

The Platform links to external websites, such as partner and member company sites. We are not responsible for their content or privacy practices.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page shows when it last changed. If the changes are significant, we will tell you through the Platform or by email.

11. Contact us

Questions about this policy or your data: relex@solbarab.org