Privacy Policy
This privacy policy describes how we collect, use, process, and protect your personal information in accordance with the Egyptian Personal Data Protection Law (Law No. 151 of 2020) when you use our website and services.
1. Information We Collect
We collect information that you provide directly to us, such as when you create an account, make a purchase, or contact us for support. This includes your name, email address, mailing address, phone number, and payment information.
Sensitive Personal Data: We do not intentionally collect sensitive data (such as financial details, health status, or religious beliefs) unless explicitly required to complete a transaction, or where you provide express written consent. Data relating to children under 18 is strictly treated as sensitive personal data under Egyptian law.
2. Lawful Basis and How We Use Your Information
We process your personal data under the following legal bases: your explicit consent, contractual necessity (to fulfill your transactions), or to comply with local legal obligations. We use this information to:
- Process and fulfill your orders
- Send you order confirmations and updates
- Respond to your comments and questions
- Improve our website and services
- Send you direct marketing communications via electronic means (subject to your prior, explicit consent and licensing by the regulatory authorities)
3. Data Retention
We will not retain your personal data for a period longer than is necessary to achieve the specific purposes for which it was collected, or as required to meet our statutory record-keeping obligations under Egyptian law.
4. Information Sharing and Cross-Border Transfers
We do not sell, trade, or rent your personal information to third parties. We may share your information with service providers who assist us in operating our business under strict confidentiality agreements.
Cross-Border Data Transfers: Your personal data will not be transferred or stored outside the Arab Republic of Egypt unless the destination country offers an adequate level of protection, and we have obtained the necessary license or permit from the Egyptian Personal Data Protection Centre (PDPC), or where you have given explicit consent.
5. Data Security and Breach Notification
We implement strict technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
In the highly unlikely event of a data security breach that threatens your rights or privacy, we will report the incident to the Egyptian PDPC within 72 hours, and notify you within 3 business days of informing the authority, outlining the corrective steps being taken.
6. Your Statutory Rights
Under the Egyptian PDPL, you have specific rights regarding your data, which you can exercise at any time:
- Right to Access & Edit: Request a copy of your data or correct any inaccuracies.
- Right to Erasure: Request the deletion of your data when it is no longer needed.
- Right to Withdraw Consent: Reverse your prior consent regarding data processing or retention at any time.
- Right to Limit Processing: Restrict the use of your data to specific processing purposes.
- Right to Object: Object to processing for direct electronic marketing purposes.
You also have the right to lodge an official complaint regarding data handling with the Egyptian Personal Data Protection Centre (PDPC).
7. Cookies
We use essential cookies to keep our website functional. Non-essential cookies (such as analytics or marketing cookies) will only track your device with your prior, explicit opt-in consent, which you can modify or withdraw through your browser settings or our cookie preference banner.
8. Changes to This Policy
We may update this privacy policy periodically to remain aligned with regulatory mandates. We will notify you of any updates by revising the policy date on this page.
9. Contact Us & Data Protection Officer
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer (DPO) at dpo@autorun-eg.com or use our contact page.
