Privacy & Personal Data Protection Policy

Last Updated: August 2026

Statutory Privacy & Data Protection Commitment:

HEPTA Egypt is dedicated to safeguarding your personal data in strict compliance with the Egyptian Personal Data Protection Law No. 151 of 2020. This policy sets out the legitimate basis on which we collect, store, encrypt, process, and protect your information, alongside your statutory rights under Egyptian jurisdiction.

Article 1: Categories of Personal Data Collected

We strictly limit data collection to what is necessary for fulfilling sales contracts and order deliveries:

Identity & Contact Information: Full name, Egyptian mobile phone number, email address, and physical shipping address across Egyptian governorates.
Payment & Invoicing Information: Payment method selected, invoice transaction reference. (All card transactions are processed through Paymob with PCI-DSS Level 1 compliance; no sensitive CVV or complete payment card credentials are ever stored on our servers).
Technical & Session Data: IP addresses, cookie identifiers, and browser parameters to prevent cyber attacks, detect fraud, and optimize loading performance.

Article 2: Lawful Basis of Processing (Article 3 of Law 151/2020)

Data processing is conducted strictly on legitimate grounds:

Execution and fulfillment of apparel purchase orders and parcel delivery.
Customer communication via SMS and email regarding parcel tracking numbers and delivery coordination.
Compliance with Egyptian tax laws and statutory financial auditing requirements.
Prevention of fraudulent transactions, bot abuse, and cybersecurity threats.

Article 3: Third-Party Disclosures & Sub-Processors

HEPTA strictly prohibits the sale or commercial licensing of your personal data to third-party marketers. We only share the minimum required operational data with licensed entities bound by strict confidentiality agreements:

Licensed Domestic Logistics Carriers: To fulfill courier deliveries and process COD collections.
Certified Payment Gateways (Paymob): For encrypted electronic payment authorizations.
Egyptian Judicial & Regulatory Authorities: Exclusively upon receipt of a binding judicial subpoena or statutory legal mandate.

Article 4: Your Statutory Rights under Egyptian Law No. 151/2020

As a data subject, you hold comprehensive legal rights:

Right of Access: Obtain confirmation and copies of your processed personal data.
Right of Rectification: Request correction or completion of inaccurate information.
Right of Erasure ("Right to be Forgotten"): Request complete deletion of your data when the contractual or statutory purpose has concluded.
Right of Objection: Unconditionally opt-out of marketing communications at any time.

To exercise your statutory rights, email our Data Protection Officer at: support@hepta-eg.com

Article 5: Security Standards & Data Retention

We employ industry-leading 256-bit TLS/SSL encryption and firewall barriers to prevent unauthorized data access. Commercial transaction records and fiscal invoices are retained for the statutory period mandated by Egyptian Tax Law (5 years) to support regulatory compliance and official accounting audits.

CART