Last updated: 21 October 2026
This notice explains how Consult One for Information Technology handles personal data in the Consult One platform, in line with the Jordanian Personal Data Protection Law No. 24 of 2023. For the business records a company keeps about its own customers, suppliers and employees, the company is the controller and we act as its processor.
Account data (name, email, phone, company name, country, tax registration); usage and security data (sign-in times, IP address, device and browser, audit logs); billing data (plan, invoices, payment references; card details are handled by the payment provider and we keep only a token, card brand, last four digits and expiry); and the business data you enter (customers, invoices, journals, employees, payroll, attendance and uploaded documents).
To create and secure your account, provide the modules you subscribe to, keep each company's books separate, bill your subscription, send service emails (verification, receipts, renewal reminders), meet legal and tax obligations, prevent fraud and abuse, and improve reliability. We do not sell personal data and do not use your business data for advertising.
We share data only with providers needed to run the service (hosting, encrypted backups, email delivery, payment gateways, and tax-authority or e-invoicing systems you choose to connect), with your accountant or team members you invite, and with authorities where the law requires it.
Data is stored on secured servers and encrypted backups. Some providers may process data outside Jordan; where they do, we use providers that apply appropriate safeguards.
Account and business data are kept while your account is active and for 30 days after it ends so you can export them, then deleted, except records we must keep longer by law (for example tax and accounting records, generally for at least the period required by Jordanian tax law). Encrypted backups expire on their rotation schedule.
We use encryption in transit, encrypted backups, role-based access, per-company data separation, tamper-evident accounting records and audit logs. No system is perfectly secure; we will notify affected customers and the competent authority of a personal-data breach as the law requires.
You can ask to access, correct or delete your personal data, object to or restrict processing, withdraw consent, and receive your data in a portable format, subject to legal retention duties. Employees and customers of a company using the platform should first contact that company.
We use only cookies needed to keep you signed in, remember your language and protect forms. We do not use advertising cookies.
Privacy requests and questions: [email protected]. We will post any change to this notice on this page with a new date.