Privacy Policy

Insaan Global ("Insaan Global," "we," "us," or "our") is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy explains how we collect, use, store, share, and protect information in connection with our business process outsourcing (BPO) services, our website at www.insaanglobal.com, and all associated platforms, tools, and communications.

This Policy applies to:

• Visitors to our website and digital properties
• Prospective clients and business contacts who engage with us
• Clients and their authorized users who access our services
• Job applicants and candidates who apply through our careers portal
• Employees, contractors, and operational staff
• Third-party data subjects whose personal information is processed as part of our service delivery

By accessing our website, using our services, or submitting information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

Insaan Global is a business process outsourcing company with operations across North America and the Middle East. Our primary delivery hub is located at:

For the purposes of applicable data protection law, Insaan Global acts as a data controller with respect to personal data collected through our website, marketing activities, and employment processes. In the context of service delivery on behalf of clients, Insaan Global may act as a data processor, processing personal data on the instructions of our clients who act as data controllers.

We collect personal data in several categories depending on how you interact with us:

We collect personal data through the following means:

• Directly from you — when you contact us, complete a form, submit a job application, or enter into a service agreement
• Automatically — through cookies, web analytics tools, and server logs when you visit our website
• From clients — when clients share data with us to enable service delivery
• From third parties — such as LinkedIn or professional directories, in the context of business development or recruitment
• Through operational systems — when our teams interact with client platforms, CRM systems, telephony tools, or communication channels in the course of service delivery

We use personal data for the following purposes:

Where data protection law requires us to identify a legal basis for processing personal data, we rely on the following:

• Contract — processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legal obligation — processing is necessary to comply with applicable law, including Jordanian Labour Law, Social Security Law, and tax regulations
• Legitimate interests — processing is necessary for our legitimate business interests, such as improving our services, maintaining security, and pursuing business development, where these interests are not overridden by your rights
• Consent — where we rely on consent, such as for certain marketing communications, you may withdraw consent at any time by contacting us at hr@insaanglobal.com

We do not sell personal data and do not use personal data for automated decision-making that produces legal or similarly significant effects without human review.

We do not sell, rent, or trade personal data. We share personal data only in the following circumstances:

Insaan Global operates across North America and the Middle East, and personal data may be transferred between these regions as part of our operations. When personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Contractual protections between Insaan Global entities and their subprocessors
• Data Processing Agreements with clients that specify transfer restrictions and protections
• Implementation of appropriate technical and organizational security measures

Where personal data originating from the European Economic Area or the United Kingdom is involved, we implement appropriate transfer mechanisms in accordance with applicable data protection law, including the use of Standard Contractual Clauses where required.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention principles are:

• Website visitor data: up to 26 months via analytics tools, subject to cookie consent settings
• Client and prospect data: for the duration of the business relationship, plus up to 7 years for legal and financial record-keeping purposes
• Job applicant data: 6 months from the conclusion of the recruitment process for unsuccessful applicants, or longer if the applicant consents to being considered for future roles
• Employee data: for the duration of employment plus the period required by Jordanian Labour Law and tax regulations (generally 7–10 years)
• Data processed on behalf of clients: as specified in the applicable data processing agreement and deleted or returned upon contract termination

Upon expiry of the applicable retention period, data is securely deleted or anonymized in accordance with our data disposal procedures.

Depending on your location and the applicable law, you may have the following rights with respect to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restriction of processing — to request that we limit how we use your data in certain circumstances
• Right to data portability — to receive your personal data in a structured, machine-readable format in certain circumstances
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — with a relevant supervisory authority if you believe your data protection rights have been violated

To exercise any of these rights, please contact us at hr@insaanglobal.com. We will respond to verified requests within 30 days. We may need to verify your identity before processing certain requests.

Note that some rights are subject to limitations — for example, we may need to retain certain data to comply with legal obligations even where a deletion request is made.

Our website uses cookies and similar tracking technologies to operate, analyze, and improve our digital properties. Cookies are small text files placed on your device by your browser when you visit our site.

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest where appropriate
• Role-based access controls and principle of least privilege access
• Multi-factor authentication on systems handling sensitive data
• Regular security assessments and vulnerability management
• Staff training on data protection and security practices
• Incident response procedures with defined notification timelines
• Physical security controls at operational facilities
• Continuous monitoring via the NAS-AI operational intelligence platform

While we take security seriously and implement robust protections, no system is completely immune from risk. We encourage you to use strong passwords, protect your access credentials, and notify us immediately if you suspect unauthorized access to any account or data associated with our services.

Our website and services are directed to business professionals and organizations, not to individuals under the age of 18. We do not knowingly collect, use, or disclose personal data from children. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete that information as quickly as possible.

If you believe we may have collected information from a child, please contact us at hr@insaanglobal.com.

Our website may contain links to third-party websites, platforms, or services that are not operated by Insaan Global. This Privacy Policy does not apply to those third-party properties. We encourage you to review the privacy policies of any third-party sites you visit. Insaan Global has no responsibility or liability for the content, privacy practices, or data handling of third-party websites.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify affected parties by email or through our website.

Your continued use of our website or services after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. We encourage you to review this Policy periodically.

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us: