Privacy Policy
Last updated 22 July 2026
1. Introduction and scope
This policy explains how Dawwama (dawwama.com) handles information when you visit this website. It covers this website only. Dawwama publishes exchange-rate and precious-metal reference numbers for Iraq; it is an information site. We do not sell currency, gold or any other asset, we do not execute transactions, and we do not offer financial advice.
Dawwama is a static publication. There are no user accounts, no login, no comment system, no newsletter sign-up and no contact form. There is nothing on this site for you to fill in, and consequently no personal data for you to submit to us.
2. Summary — what we do and do not collect
In plain terms:
- We do not ask you for any personal information. No accounts, no forms, no sign-ups.
- We do not use analytics. There is no Google Analytics or comparable visitor-tracking product on this site.
- We do not sell or share your personal information.
- Our hosting and security provider records standard technical logs — the ordinary record every web server keeps in order to serve a page and resist attack (see section 4).
3. Who we are and how to contact us
This website is operated under the name Dawwama. For any privacy question, or to exercise the rights described in sections 10 and 11, write to us at [email protected]. This address is the contact point for all data-protection matters.
4. Information we collect
We do not collect information from you directly. However, like every website, serving a page requires our infrastructure to process certain technical data automatically. This consists of:
- Server and network logs — your IP address, the date and time of the request, the page or file requested, the HTTP status returned, your browser's user-agent string, and the referring page where your browser sends one.
- Security telemetry generated by our content-delivery and security provider in order to distinguish automated abuse from genuine visitors.
This data is processed to deliver the site, keep it available, and defend it against attack. It is not used to build a profile of you and is not combined with any other source.
5. Cookies and similar technologies
Dawwama sets no cookies of its own for tracking or analytics. The site is static: the rates you see were computed before your visit, so nothing needs to be remembered about you between page loads.
The only cookies used on this site are the strictly necessary security cookies set by Cloudflare, our content-delivery and security provider — for example a bot-management cookie whose sole purpose is to tell human visitors from automated traffic and protect the site. These are not tracking cookies and are not used to profile you.
Because the site sets no non-essential cookies, it shows no cookie-consent notice — there is nothing that requires your consent. You can block or delete cookies in your browser settings at any time. Blocking them will not affect your ability to read the rates.
6. Content delivery and security (Cloudflare)
This site is delivered through Cloudflare, which provides content delivery, DNS, TLS encryption and protection against denial-of-service and other attacks. To perform these functions, Cloudflare processes the connection data described in section 4 on our behalf, acting as our service provider. Cloudflare operates a global network, so requests are handled by the location best able to serve them.
7. How we use information, and our legal bases
| Purpose | Data | Legal basis (GDPR/UK GDPR) |
|---|---|---|
| Delivering the pages you request | Connection and request data (section 4) | Legitimate interests — operating a website that people ask to see |
| Keeping the site available and secure; preventing abuse and attack | Connection data, security telemetry | Legitimate interests — protecting the service and its readers |
| Diagnosing faults and errors | Server logs | Legitimate interests — maintaining a working service |
| Meeting legal obligations where they apply | The minimum necessary | Legal obligation |
8. Sharing, recipients and international transfers
We do not sell or share your personal information. The recipients of data described in this policy are: Cloudflare, our content-delivery and security provider; and our hosting provider, on whose server the site runs and whose systems handle the same connection data. Both act on our behalf and under contract.
Because that provider operates internationally, connection data may be processed outside your country, including in the United States. Such transfers rely on the safeguards permitted by applicable data-protection law, including the European Commission's Standard Contractual Clauses.
9. Data retention
Technical logs are kept only as long as needed for security, abuse prevention and fault diagnosis — ordinarily a short rolling window measured in days or weeks — and are then deleted or overwritten. We keep no database of visitors, because we collect none.
10. Your data-protection rights
Depending on where you live, you may have the right to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form.
To exercise any of these rights, write to [email protected]. Please note an honest practical limit: because we hold no accounts and no identifying records, we usually cannot connect a raw IP address in a short-lived security log to a particular person. Where we genuinely cannot identify you from the data we hold, we may be unable to action a request — we will always explain the position rather than ignore you. If you are in the EEA or the UK you also have the right to complain to your national data-protection authority.
11. California privacy rights (CCPA/CPRA)
If you are a California resident: we do not sell or share your personal information. We do not knowingly collect the categories of sensitive personal information defined by California law. You have the right to know what personal information is collected, to request deletion or correction, and not to be discriminated against for exercising those rights. We also honour the Global Privacy Control (GPC) browser signal. Requests go to the address in section 3.
12. Children
This site publishes financial reference information and is not directed at children. We do not knowingly collect personal information from children.
13. Changes to this policy
If this policy changes, we will publish the revised version here and update the date shown at the top of the page. Material changes will be reflected here before they take effect.
14. Contact
Questions about this policy or about privacy generally: [email protected].
Dawwama publishes measured reference rates for information only. Nothing on this site is an offer to buy or sell any currency, metal or other asset, and nothing on it is financial advice.