Privacy Policy

Who we are

BARYA Consulting Services (“BARYA”, “we”, “us”, or “our”) is a leadership and strategic management consulting firm headquartered in Kabul, Afghanistan. This Privacy Policy applies to information collected through our website (https://barya.af), marketing channels, and consulting and training engagements.

For the purposes of applicable data-protection law, BARYA is the controller of personal data described in this policy.

Information we collect

We collect only what we need to respond to you and run our services:

Information you provide

• Contact details — name, organization, phone number, email address.
• Project information — what you tell us about your goals and challenges in messages, callback forms, and proposals.
• Training enrolment — for participants in public or in-house programs: name, organization, email, attendance and certification records.
• Marketing preferences — your subscription status for newsletters or event invitations.

Information collected automatically

• Device and browser data — IP address, browser type, operating system, referring URL.
• Usage data — pages viewed, time on site, links clicked, aggregated through privacy-respecting analytics.
• Cookies — strictly necessary cookies for site functionality and, with your consent, analytics cookies.

How we use your information

We use the information we collect to:

• Respond to your enquiries, callback requests, and proposals.
• Deliver consulting engagements and training programs you have signed up for.
• Issue invoices, certificates, and project documentation.
• Send service-related notifications (schedule changes, completion certificates).
• With your consent, send occasional marketing — insights, training calendars, event invitations.
• Improve our website, services, and content based on aggregated usage data.
• Comply with legal, tax, and regulatory obligations in Afghanistan.

Legal basis & consent

We process personal information on the following legal grounds:

• Performance of a contract — to deliver consulting services and training engagements you have requested.
• Consent — for marketing emails, optional cookies, and any sensitive information you choose to share.
• Legitimate interests — to operate, secure, and improve our services in ways you would reasonably expect.
• Legal obligation — to meet record-keeping, tax, and regulatory requirements.

You may withdraw consent for marketing or optional cookies at any time — see Your rights & choices below.

When we share information

We share personal information only when needed to operate our services, and always under written agreements that protect your data:

• Service providers — we work with carefully vetted vendors for email delivery (Amazon SES), hosting, analytics, and customer messaging (WhatsApp Business). These providers act on our instructions only.
• Professional advisors — auditors, lawyers, and accountants, when reasonably required.
• Authorities — where required by Afghan law, court order, or other legal process.
• Business transfers — if BARYA is involved in a merger, acquisition, or sale of assets, with appropriate safeguards and notice to you.

How long we keep it

We keep personal information only as long as we need it:

• Enquiries & callbacks — up to 24 months after our last interaction.
• Client engagement records — for the duration of the engagement plus 7 years for tax and audit compliance.
• Training records — indefinitely for certification verification, unless you ask us to delete them.
• Marketing preferences — until you unsubscribe.
• Website analytics — aggregated data retained up to 26 months.

Security

We use reasonable administrative, technical, and physical safeguards to protect personal information from loss, misuse, and unauthorized access. These include encrypted transport (TLS), access controls based on the principle of least privilege, and regular reviews of our vendor practices. No system is perfectly secure, however, and we encourage you to use a strong, unique password for any account-protected services.

Your rights & choices

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — ask us to fix information that is inaccurate or incomplete.
• Delete — ask us to erase your personal data, subject to legal retention requirements.
• Object & restrict — object to or limit certain processing of your data.
• Withdraw consent — for marketing emails (use the unsubscribe link in any email) or optional cookies (via your browser settings).
• Portability — request a structured copy of data you provided to us.

To exercise any of these rights, email info@barya.af. We will respond within 30 days.

Children's privacy

Our website and services are intended for adults working in organizations. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The “Last updated” date at the top of this page tells you when it was last revised. For material changes we will give prominent notice on the website and, where appropriate, by email.

Contact us

Questions, requests, or complaints about this policy or how we handle your personal information? Reach us through any of the channels below.