(Law No. 24 of 2023 – Hashemite Kingdom of Jordan)
Applies to: Users, customers, and data subjects located in the Hashemite Kingdom of Jordan
This Jordan PDPL Addendum (“Addendum”) supplements the NuMetric Privacy Policy and applies where personal data is processed in accordance with Jordan’s Personal Data Protection Law No. 24 of 2023 (“PDPL”).
In the event of any inconsistency, this Addendum shall prevail for Jordan-based data subjects.
In the event of any inconsistency, this Addendum shall prevail for Jordan-based data subjects.
1. Legal Basis for Processing
NuMetric processes personal data relating to Jordan-based data subjects on one or more of the following lawful bases:
Contractual necessity, to provide accounting, invoicing, payroll, inventory, reporting, and compliance services
Legal obligation, including tax, accounting, and regulatory compliance requirements
Explicit consent, where required for non-essential processing activities
Where explicit consent is relied upon, such consent is:
Freely given
Specific and purpose-limited
Clearly expressed
Withdrawable at any time, without affecting processing required by law or contract
2. Rights of Data Subjects Under Jordan PDPL
Data subjects located in the Hashemite Kingdom of Jordan have the right to:
Access their personal data
Request correction, update, or completion of inaccurate or incomplete data
Restrict processing to a specific scope
Withdraw previously given consent
Request deletion or anonymization of personal data, subject to legal and regulatory retention obligations
Object to automated processing or profiling where not legally required
Request transfer of their personal data to another controller, where technically feasible
Be informed of any serious personal data breach affecting their data
Requests may be submitted using the contact details provided in Section 8 of this Addendum.
3. Personal Data Breach Notification
In the event of a personal data breach that may result in serious harm to data subjects:
Affected data subjects will be notified within 72 hours of discovery
The relevant Jordanian authority will be notified within 96 hours, where required by law
NuMetric maintains internal procedures to detect, assess, and mitigate personal data security incidents.
4. Data Retention and Deletion
NuMetric retains personal data only for the period necessary to fulfill the purposes for which it was collected, including:
Statutory accounting, tax, audit, and regulatory obligations
Contractual and legal requirements
Upon expiration of the applicable retention period, personal data is securely deleted or anonymized unless further retention is required by law.
5. Sensitive Personal Data
Financial, accounting, and transactional data processed by NuMetric is treated as sensitive personal data under the Jordan PDPL and is protected using enhanced technical and organizational safeguards.
NuMetric does not intentionally process political, religious, biometric, genetic, or health-related personal data unless explicitly required by law or the agreed service scope.
6. Cross-Border Data Transfers and International Processing
NuMetric does not maintain data storage facilities, servers, or data processing infrastructure within the Hashemite Kingdom of Jordan.
All personal data relating to Jordan-based data subjects is processed and stored outside Jordan using secure cloud infrastructure operated by NuMetric or its contracted service providers.
Cross-border processing and transfers are conducted in compliance with the Jordan PDPL and are justified on one or more of the following legal bases:
Processing is necessary for the performance of a contract with the data subject
Processing is required to deliver accounting, financial, compliance, and regulatory services
Appropriate technical and organizational safeguards are implemented to protect personal data
Contractual protections apply to third-party processors
Explicit consent is obtained where required by law
Or another lawful exception under the Jordan PDPL applies
NuMetric applies uniform security, confidentiality, and access-control measures to personal data regardless of the country in which it is processed.
7. Data Protection Officer (DPO)
NuMetric has designated a Data Protection Officer / Data Monitor responsible for overseeing compliance with the Jordan PDPL and applicable data protection laws.
8. Contact Information and Requests
For Jordan PDPL-related inquiries, data subject rights requests, or personal data protection concerns, data subjects may contact:
Email: [email protected]
(or another official NuMetric compliance contact as designated)
NuMetric will respond in accordance with Jordan PDPL requirements and applicable regulations.
9. Relationship to the NuMetric Privacy Policy
This Addendum supplements and forms an integral part of the NuMetric Privacy Policy.
All other provisions of the Privacy Policy remain unchanged and continue to apply.