Privacy & Cookie Policy

PRIVACY POLICY AND COOKIE NOTICE

Last updated: 29 July 2026

1. ABOUT THIS POLICY

This Privacy Policy explains how Sitemap Computers WLL (“Sitemap Computers”, “we”, “us” or “our”) collects, uses, stores, shares and protects information when you:

• visit https://www.sitemap.qa or another website operated by us;
• contact us, request a quotation or purchase our services; or
• use Sitemap Hosting Manager, including its website, Android application, iOS application and related services (collectively, the “Application”).

Sitemap Hosting Manager is a restricted business application used by authorised personnel to manage clients, providers, hosting accounts, domains, email, SSL certificates, maintenance agreements and other services. It is not intended for children or for general consumer use.

By using our websites or the Application, you acknowledge the practices described in this Policy.

2. WHO IS RESPONSIBLE FOR YOUR INFORMATION

The organisation responsible for the processing described in this Policy is:

Sitemap Computers WLL
Website: https://www.sitemap.qa
Email: [email protected]

Questions, privacy requests and account or data-deletion requests may be sent to the email address above.

3. INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with us and which features you use.

3.1 Website and enquiry information

We may collect:

• your name, company name, email address and telephone number;
• information included in an enquiry, quotation request, order, support request or other communication;
• technical information such as IP address, browser type, device type, operating system, pages viewed, referring page and approximate location derived from an IP address; and
• cookie identifiers, preferences and website usage information.

3.2 Sitemap Hosting Manager account information

The Application may process:

• the authorised user’s name, email address, user ID, role and account status;
• authentication and security information, including a securely hashed login password, two-factor authentication status and remembered-device information;
• login date and time, IP address, device or system information, and country inferred from an IP address;
• audit-trail records describing logins and actions performed within the Application; and
• notification preferences and a device identifier or push-notification token.

Users cannot create their own Application accounts. Accounts are created and managed by an authorised administrator for personnel or enterprise access.

3.3 Business information managed through the Application

Authorised users may enter and manage business records relating to clients, providers and supplied services, including:

• client and provider names and contact details;
• domain names, service names, plans, dates, billing cycles, renewal status and notes;
• invoice amounts, costs, profit calculations, currency and other business records;
• hosting, domain, email, control-panel and provider account information;
• URLs, usernames, passwords and other service credentials supplied for authorised business administration;
• website monitoring results, domain and network lookup results, reminders and notification history; and
• records of changes, renewals, transfers, exports and other administrative actions.

The organisation entering this information is responsible for ensuring that it is authorised to provide and manage it through the Application.

3.4 Information from third-party services

We may receive limited delivery, diagnostic or security information from service providers that support the Application, including email delivery providers, hosting providers, Firebase Cloud Messaging and other infrastructure providers.

4. HOW WE USE INFORMATION

We may use information to:

• provide, operate, maintain and secure our websites and the Application;
• authenticate users, enforce role-based access and support two-factor authentication;
• manage clients, providers, services, renewals, reports, reminders and website monitoring;
• send operational email, login alerts, renewal reminders, website-status alerts and push notifications;
• respond to enquiries, provide quotations, supply services and offer customer support;
• maintain audit trails, investigate errors, prevent unauthorised use and protect our systems;
• generate business reports, forecasts and administrative exports;
• understand website usage and improve our services;
• comply with contractual, accounting, security and legal obligations; and
• establish, exercise or defend legal claims.

We do not sell personal information.

5. LEGAL AND BUSINESS GROUNDS FOR PROCESSING

Depending on the circumstances, we process information because it is necessary to:

• provide a requested service or perform a contract;
• operate our business and protect our legitimate business and security interests;
• comply with a legal or regulatory obligation; or
• act with consent where consent is required, including for non-essential cookies.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect processing already carried out lawfully.

6. WHEN INFORMATION MAY BE SHARED

We may disclose information only as reasonably necessary to:

• hosting, infrastructure, security, backup and technical-support providers;
• Microsoft 365 or another configured SMTP provider for operational email delivery;
• Google Firebase Cloud Messaging for device push notifications;
• analytics, cookie or communications providers used on our public websites;
• professional advisers, insurers, auditors and contractors subject to appropriate confidentiality duties;
• a purchaser, successor or adviser involved in a proposed business reorganisation, merger or transfer; or
• public authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, safety and security.

Service providers are permitted to process information only for the services they provide to us or as otherwise allowed by law. Some service providers may process information in countries outside Qatar. Where this occurs, we take reasonable steps to use appropriate contractual, organisational and security safeguards.

7. DATA SECURITY

We use reasonable administrative, technical and organisational safeguards designed to protect information against loss, misuse, unauthorised access, disclosure, alteration and destruction. These safeguards include HTTPS encryption in transit, authentication controls, role-based access, password hashing for Application user accounts, audit logging, access restrictions, backups and security monitoring where appropriate.

No internet transmission or storage system is completely secure. Users must protect their passwords, two-factor authentication codes and devices, and must notify us promptly if they suspect unauthorised access.

8. DATA RETENTION

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining security and audit records, resolving disputes and satisfying contractual, accounting or legal requirements.

Retention periods vary according to the type of record. Application user accounts may be disabled when access is no longer required. Client, provider, service, renewal, financial and audit records may be retained after a user account is disabled when they remain necessary for business operations, customer commitments, security, fraud prevention, accounting, contractual or legal purposes. Backups may retain deleted information for a limited period until they are overwritten in the normal backup cycle.

9. YOUR PRIVACY CHOICES AND REQUESTS

Subject to applicable law and relevant exemptions, you may ask us to:

• provide information about personal data we hold about you;
• correct inaccurate or incomplete personal data;
• delete personal data;
• restrict or object to certain processing; or
• withdraw consent where processing is based on consent.

Send requests to [email protected]. We may ask for information needed to verify your identity and authority before acting on a request. We will respond within a reasonable period and in accordance with applicable requirements.

10. SITEMAP HOSTING MANAGER – ACCOUNT AND DATA DELETION

Sitemap Hosting Manager accounts are restricted enterprise accounts created by an authorised system administrator. Accounts cannot be created directly through the Application.

To request deletion of a Sitemap Hosting Manager user account and associated personal data, email [email protected] from the email address registered to the account using the subject:

“Sitemap Hosting Manager – Account Deletion Request”

Include the user’s name and registered email address. We may contact the requester to verify identity, authority and the scope of the request.

After verification, we will disable and delete the user login and associated personal information that is no longer required. We normally aim to process a valid request within 30 days.

Deletion of a user login does not automatically delete client, provider, service, invoice, audit or other business records belonging to Sitemap Computers WLL or its customers. We may retain information required for legitimate operational, contractual, accounting, security, fraud-prevention, audit or legal purposes. Retained information will remain access-restricted and will be deleted or anonymised when the applicable retention requirement expires.

11. PUSH NOTIFICATIONS AND EMAIL

If an authorised user enables push notifications, the Application registers a device push token through Firebase Cloud Messaging. This token is used to deliver selected operational alerts, such as renewal, website-status and team-activity notifications. Notification categories may be managed inside the Application or through the device’s settings.

We may use Microsoft 365 or another configured SMTP provider to send service reminders, login alerts, security messages and other operational email. Recipients may contact [email protected] regarding an email or their communication preferences. Essential account or security messages may still be sent where necessary to operate and protect the service.

12. COOKIES AND SIMILAR TECHNOLOGIES

A cookie is a small text file stored on a browser or device. Our public websites may use cookies and similar technologies to operate securely, remember preferences, understand website usage and, where enabled, support marketing.

Cookie categories may include:

• Strictly necessary cookies: required for security, forms, session management and requested website functions.
• Analytics and performance cookies: help us understand visitor numbers, page usage and website performance.
• Functionality cookies: remember choices and improve convenience or personalisation.
• Advertising or targeting cookies: may be used, with any consent required by applicable law, to measure campaigns or provide more relevant advertising.

Non-essential cookies should be used only in accordance with the choices presented through our cookie controls where such controls are required. You can also block or delete cookies using browser settings, although doing so may affect some website functions.

Third-party tools used on our websites may set their own cookies or process technical information. Depending on the tools currently enabled, these providers may include Google Analytics, Google Tag Manager or website communications services. Their processing is governed by their respective privacy terms. The current cookie banner or preference centre should be consulted for the most up-to-date list of active cookies and providers.

13. CHILDREN

Our services and the Application are intended for businesses and authorised users aged 18 or over. They are not directed to children, and we do not knowingly collect personal information from children through the Application.

14. EXTERNAL LINKS

Our websites and Application may contain links to third-party websites or services. We are not responsible for the privacy, security or content of third-party services. Review their policies before providing information to them.

15. CHANGES TO THIS POLICY

We may update this Policy to reflect changes to our services, technologies, providers or legal obligations. The revised version will be posted on this page with a new “Last updated” date. Material changes may also be communicated through the Application or another appropriate channel.

16. CONTACT US

For privacy questions, requests, complaints, or Sitemap Hosting Manager account and data-deletion requests, contact:

Sitemap Computers WLL
Email: [email protected]
Website: https://www.sitemap.qa