[NEEDS CONFIRMATION — this draft names the trackers we actually install and the processors we actually use. It must be reviewed against Egypt’s Personal Data Protection Law (Law 151 of 2020) and updated with the registered entity details before launch.]

What we collect

When you order: your name, mobile number, an optional second mobile number, delivery address including the nearest landmark, email address, what you bought, and the order total. We need all of it to deliver a parcel and collect payment for it.

When you make an account: the same, plus a password we never see in readable form.

When you browse: pages viewed, products viewed, and what you put in your basket. This is used to make the shop work and to understand which pieces people look at.

When you write to us: whatever is in your message.

Why we hold it

To take and deliver orders, to call you and confirm them, to handle returns and repairs, to send order emails, and — if you have asked for them — to send occasional emails about new pieces. We do not sell personal data to anyone.

Who else sees it

Our courier gets your name, address, landmark and mobile, because that is what delivering a parcel requires.

Our email provider processes order emails on our behalf.

Analytics and advertising. We do not run any at present. There is no Google Analytics, no Meta pixel and no TikTok pixel on this site, and no advertising cookies are set. The only cookies we use are the ones the shop cannot work without — they remember your basket and keep you signed in. If that changes we will say so here before it does.

How long we keep it

Order records for seven years, because tax rules require it. Marketing consent until you withdraw it. Support messages for two years.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, or withdraw consent to marketing. Write to privacy@myelega.com and we will answer within thirty days. We may ask you to confirm your identity first — usually by replying from the email address on the order.

Deleting an order record is not always possible while a legal obligation to keep it still applies. If that is the case we will tell you which record and why.

Security

The site runs over HTTPS. Passwords are stored hashed. Administrative access is limited to the people who need it. No system is perfect, and if a breach ever affects your data we will tell you.

Children

The shop is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

If this policy changes materially we will say so on this page and date the change.