Privacy Policy

InfiniTech operates infinitech.az and is the operator of the personal data described below. You can reach us at Fuzuli kucesi 37, Baku AZ1014, Azerbaijan, or by email at info@infinitech.az.

What we collect

When you submit the contact form we collect your name, company (optional), email address, phone number, the reason for your enquiry and your message. There is no other form on this site, and we do not ask for personal data anywhere else.

Our web server also records standard request logs - IP address, date and time, the page requested, the referring page and your browser's user-agent string. These exist to keep the service running securely and to investigate faults and abuse.

We do not use advertising or analytics trackers, we do not build visitor profiles, and we do not collect special categories of personal data.

Why we process it

• To read and respond to the enquiry you sent us.
• Where you go on to engage us, to deliver and administer that work.
• To keep the site secure and available, including rate-limiting the contact form and retaining server logs to investigate incidents.
• To meet accounting, tax and record-keeping obligations under Azerbaijani law.

We process contact-form data on the basis of your submission of the form, and security logging on the basis of our legitimate operational need to run the service safely, consistent with the Law of the Republic of Azerbaijan on Personal Data.

Who we share it with

We do not sell your personal data and we do not share it for third-party marketing. We disclose it only to service providers who host or operate this site on our behalf and are bound to process it solely on our instructions, or where required by Azerbaijani law or a lawful request from a competent authority.

Our infrastructure is hosted outside Azerbaijan. Where personal data is transferred abroad, the protections described below continue to apply.

How long we keep it

• Contact enquiries - for as long as needed to answer you; if you become a client, for the engagement plus the period required by Azerbaijani tax and accounting law.
• Server request logs - a short operational period, then overwritten.
• System backups - 30 days on a rolling schedule, then deleted.

You may ask us to delete your enquiry sooner.

How we protect it

We operate an information-security approach aligned to ISO/IEC 27001:2022. The measures below are in place today:

• Encryption in transit - the whole site is served over HTTPS with a publicly trusted certificate; HTTP is redirected and HSTS is enforced.
• Network segregation - the database and the content-management API are not reachable from the internet; only the reverse proxy accepts public traffic.
• Access restriction - the administrative interface is reachable only from approved office and VPN address ranges.
• Least privilege - application services run as unprivileged, non-root system users.
• Secure configuration - a Content-Security-Policy and hardening response headers are applied to every response.
• Protection against abuse - the contact form is rate-limited per source address, and the client address cannot be forged.
• Backup - the database and uploaded media are backed up nightly, with integrity checksums recorded and verified.
• Logging and monitoring - server and application events are logged to support incident investigation.
• Change management - changes are version-controlled, reviewed and tested before release.

No system is perfectly secure. If a breach affects your personal data we will act on it and notify affected individuals and the competent authority where the law requires.

Your rights

Under the Law of the Republic of Azerbaijan on Personal Data you may ask us to:

• confirm whether we hold personal data about you, and obtain a copy;
• correct data that is inaccurate or incomplete;
• delete data we no longer have grounds to keep;
• stop or restrict a particular use of your data.

Write to info@infinitech.az. We will respond within the period the law allows, and may ask you to confirm your identity first. If you are not satisfied with our response you may contact the competent Azerbaijani supervisory authority.

Changes to this policy

If we change how we handle personal data - for example if we introduce website analytics - we will update this page and its last-updated date before the change takes effect.