SME SARL ("we," "our," "us") operates sme-lb.com and its online application form. This policy explains what personal information we collect, how we use it, and your rights regarding that information. If you have questions, contact us at info@sme-lb.com.

1. Information We Collect

Contact inquiries: your full name, phone number(s), email address if provided, and the contents of your message.
Account information: if you become an SME subscriber, we collect the information needed to provision your service: legal name, address, ID number where required by Lebanese law, phone, email, and service-related technical identifiers (MAC address, IP address, uptime logs).
Payment method: if you opt into auto-debit, card data is collected directly by our PCI-compliant payment gateway. We store only the gateway-issued token, the last four digits of the card, the card brand, and the expiry month/year — never the full card number or CVV.
Technical data: when you interact with our website, we log your IP address and browser user-agent for security, abuse prevention, and aggregate analytics — including on our online application form, where we also record the page you landed on (standard campaign tags and, where a link carried them, the plan and connection type you chose — never anything you typed) and the site that referred you.
Cookies and browser storage: the table below lists everything this website stores in your browser. We do not use advertising cookies anywhere, and Google’s advertising and cross-device features are switched off.

Cookies & browser storage

Name	Purpose	Lifetime	Category
`SMEPORTAL`	Sign-in session and form security (CSRF) on this site and the customer portal	Browser session	Strictly necessary
`SMEAPP`	Keeps your progress through the online application form	Browser session	Strictly necessary
`_ga`, `_ga_*`	Google Analytics measurement — never set for visitors in the EU/EEA, UK or Switzerland (see below)	Up to 2 years	Measurement
`_GRECAPTCHA`	Google reCAPTCHA — filters automated spam on our forms	6 months	Strictly necessary
`sme_theme`	Remembers your light/dark theme choice (browser storage, not a cookie — never sent to any server)	Until you clear it	Preference
`sme_analytics_consent`	Records an analytics opt-out so we keep honouring it (browser storage, not a cookie)	Until you clear it	Preference
Portal-only stores	Customer-portal features (chat drafts, offline upload queue, notification flags) — only after you sign in	Cleared on sync or tab close	Strictly necessary

Visitors in the EU/EEA, UK and Switzerland: Google Analytics never sets a cookie for you and stores nothing on your device. Google applies this based on its own determination of your location, so it does not depend on anything our servers detect. Measurement for these regions runs entirely cookielessly — anonymous, aggregate pings only.
Everyone else: measurement cookies are set by default. If you prefer not to be measured, switch on “Do Not Track” or “Global Privacy Control” in your browser — we honour both for Google Analytics, which will not load at all — or block cookies for this site in your browser settings. You can also email us (Section 6) to object.

2. How We Use Your Information

To respond to your contact inquiries.
To provide, maintain, and bill for your internet or IPTV service.
To detect, investigate, and prevent fraud and abuse.
To comply with legal obligations, including lawful requests from Lebanese authorities.
To send you service-related notifications (billing, outages, maintenance) — we do not send marketing email without consent.

3. Third Parties

We share information only with service providers who help us deliver our services:

Payment gateway — processes and tokenizes card data.
Email provider (Hostinger) — handles outbound email (password resets, billing notifications, contact-form relays).
Google reCAPTCHA — helps us filter automated spam submissions on the contact form. Google's Privacy Policy applies to this data.
Google Analytics — aggregate website measurement (which pages are visited, on what kind of device). Google Analytics 4 does not store IP addresses: your IP is used by Google only to derive an approximate location and is then discarded. Advertising and cross-device features are switched off, and we deliberately rebuild the page addresses we report from a short list of standard campaign tags, so details you type into a form — such as a landline number — are never sent. Our legal basis is our legitimate interest in understanding aggregate site usage; for EU/EEA, UK and Swiss visitors no cookie or device storage is ever used for this (see Section 1). The data is processed by Google LLC in the United States under the EU–U.S. Data Privacy Framework and standard contractual clauses, and Google retains it for at most 14 months. To object, enable Do Not Track or Global Privacy Control (we honour both for Google Analytics) or contact us (Section 6). Google's Privacy Policy applies to this data.
IP geolocation provider (ipwho.is) — when you open our online application form, your IP address is sent to ipwho.is to identify the network/ISP it belongs to and its approximate country and city, so we can see which networks our visitors come from. The result is cached for 30 days and no other data about you is sent. This lookup is not affected by the Do Not Track or Global Privacy Control settings.

We do not sell your personal information to anyone.

4. Data Retention

Contact inquiries are retained for 24 months, then deleted. Account records are retained for the duration of your service with us plus the minimum period required by Lebanese tax and telecom regulations (typically 10 years). Payment tokens are deleted within 30 days of account closure. Google Analytics measurement data is retained by Google for at most 14 months.

5. Security

We store data on encrypted file systems, restrict access to a small number of authorized staff, and require strong authentication (Argon2id-hashed passwords, session timeouts, IP-restricted admin access) across all internal systems. No online system is perfectly secure, but we follow industry-standard practices and are continually improving our posture.

6. Your Rights

You may request a copy of the personal data we hold about you, corrections to inaccurate data, or deletion of your data (subject to our legal retention obligations). To exercise these rights, contact info@sme-lb.com. We will respond within 30 days.

7. Children

Our services are not directed to children under 18 and we do not knowingly collect data from minors.

8. Changes

We may update this policy from time to time. Material changes will be announced on this page at least 14 days before they take effect.

9. Contact

SME SARL
Baabda — Furn El Chebbak, Mega Mall, 6th Floor
Email: info@sme-lb.com

Privacy Policy