Privacy notice

Who we are and what this covers

Wejdaan is being set up in Iraq by Hussein Abdulnabi, its founder, ahead of the incorporation of a company that will carry it on. Until then he is responsible for the information described here.

Today this site does four things: it takes applications from mental health practitioners, keeps a waiting list for people who want to use Wejdaan when it opens, passes on messages sent through the contact form, and measures how the site is used. This notice covers those four.

A full privacy policy for people using Wejdaan for therapy will be published before that service opens.

Why we may use it

We use an application because you asked us to consider you, which means taking steps you requested before any agreement between us. We keep your place on the waiting list and answer your contact message because you asked us to, and you can withdraw that at any time.

We set the analytics cookie only if you allow it; without it, we count visits, and how far people get through the application form, because we have a legitimate interest in knowing how the site is used, using a value that changes every day and is never linked to your name or contact details.

We keep the internet address you used for about two hours, and send error reports to Sentry, because we have a legitimate interest in protecting the site from abuse and keeping it working.

Practitioner applications

When you apply, we collect what you enter in the form — your name, email, WhatsApp number, gender, country and city, profession, short bio, licence or registration number and the country that issued it, your degrees, licences and certifications (title, institution and year), the positions you list, specialisations, languages, approaches, experience, availability, fee and anything you write to us — together with the identity document and credential files you upload.

We also record when you confirmed the form, the tag on the link that brought you to it if there was one, whose referral link you used if a colleague sent you one (and, if someone applies through yours, that you referred them), and the notes our reviewers make, and we keep the internet address you applied from for about two hours to stop abuse.

When you submit, your name, email, WhatsApp number, location and experience are emailed to our team's inbox so that we can start the review.

We use all of it only to assess your application, to verify your credentials, including by contacting the universities, syndicates, ministries and other bodies named in your documents, and to contact you about your application by email or WhatsApp. Access is limited to the Wejdaan team that reviews applications.

You do not have to apply, but we cannot assess an application without the information and documents the form asks for. No decision about you is made by automated means.

While you fill in the form, what you have entered and the documents you have finished uploading are kept in this browser for up to a day, so that nothing is lost if the page closes; they are removed when you submit or choose “Start over”.

If you enter your email and leave before submitting, we keep that email, and your name in Arabic if you typed it, for up to 30 days after you last used the form, because we have a legitimate interest in helping an applicant who stopped partway: we may contact you once to help you finish. Submitting removes it, and you can ask us to delete it sooner.

How long we keep an application

Files you upload but never submit are deleted automatically once they are more than 24 hours old, at the next nightly clean-up. An application waiting for review is kept until it is reviewed.

If it is not approved, the application and every document in it are deleted 90 days after the decision. A record of the decision, with the reviewer's reason and notes, stays in our internal audit log, and the email that told our team about your application stays in our inbox; ask us and we will delete it.

If it is approved, it becomes your practitioner account, and the Practitioner Agreement you accept during onboarding governs how that information is kept from then on.

The waiting list

If you join the waiting list, we keep the email address or phone number you give us, your language, and which part of the page you joined from, and we keep the internet address you joined from for about two hours to stop abuse.

We use it only to tell you when Wejdaan opens to you. We do not use it for marketing and we do not share it. We keep it until you leave the list. To leave, email support@wejdaan.com and we will remove you.

The contact form

A message sent through the contact form — your name, email, topic and message — is delivered by email to our team's inbox so that we can reply. It is not stored in our database. Our email provider keeps a copy as part of delivering it, we briefly keep the internet address it was sent from to stop abuse, and we keep the message only as long as we need it to deal with what you asked.

Analytics

We use PostHog, an analytics service, to count visits and see which pages and links people use. It records the pages you visit and the links and buttons you click; it does not record what you type into forms.

On your first visit we ask whether it may set a cookie. If you allow it, PostHog keeps an identifier in a cookie and in your browser's storage for up to a year, so that repeat visits from the same browser count once. The cookie is set for all of wejdaan.com, so if you later sign in to the Wejdaan app in the same browser, your visits here may be linked to your account.

If you decline, we store only a note of your choice in your browser: PostHog counts the visit with a value it works out on its own servers, which changes every day and does not follow you from one day to the next. You can change your answer at any time from “Cookie settings” at the foot of the page.

On the application page it works differently: it sets no cookie, stores nothing in your browser and does not record which links or buttons you click.

Along with the usual details of a visit — the page address and the tag on the link that brought you there, the page you came from, and your browser, type of device, screen size and time zone — it counts when the page is opened, which parts of the form you start filling in, and whether a submission goes through — and, if it does not, what kind of problem stopped it and in which part of the form. It never records what you enter or upload. PostHog processes its data in the European Union.

Who else handles it

We do not sell your information and we do not share it with advertisers. It is handled for us by the providers that run the service, only so far as they need it to do that: Railway hosts the site and stores our database and uploaded files, on servers in the European Union; Resend delivers our email; our email provider hosts our team's inbox; WhatsApp, run by Meta, carries the messages we exchange with applicants; PostHog provides analytics; and Sentry receives reports of errors on the site and of content the browser blocked, with cookies, login details and web-address parameters removed from error reports before they are sent.

Railway, Resend, PostHog and Sentry are companies based in the United States; where they handle your information outside the European Union, they do so under the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

To verify your credentials we contact the institutions named in your documents, most of which are in Iraq, a country the European Commission has not recognised as offering an adequate level of data protection; we do this only as a step needed to assess the application you asked us to consider. Ask us and we will send you a copy of the safeguards we rely on. We may also disclose information where the law requires it.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it or delete it — including withdrawing an application — ask us to limit how we use it, or ask to receive it in a portable format. You can object at any time to our use of your information where we rely on our legitimate interests. Where we rely on your consent, you can withdraw it at any time.

Email support@wejdaan.com or write to us through the contact form. We will answer within one month, and keep only what the law requires us to keep.

You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).