Privacy Policy

This policy explains what personal data we collect from you when you use this website, why we collect it, who we share it with, how long we keep it, and the rights you have and how to use them. It is written in plain language and describes what actually happens on this website today.

1. Who we are, and who is responsible for your data

Sanabel AlKhair Foods is responsible for the personal data collected through this website. Our contact details appear on this page and on our Contact page, and you may use any of them for any matter concerning your personal data.

2. Scope of this policy

This policy applies to this website and to the orders and enquiries submitted through it. It does not apply to any third-party website, service or social-media page, each of which has its own policy.

3. What we collect, and where it comes from

Data you give us directly:

• Account data — first name, last name, email address, username and password. We do not store your password in readable form. WordPress stores a one-way cryptographic hash used to verify your password, and the original password cannot be recovered from that stored hash.
• Order and delivery data — name, billing address, delivery address, phone number, email address, order contents and value, and any notes you add to your order.
• Contact-form data — your name, email address, phone number, the text of your message, and the ticket number issued for it.
• Wholesale and quotation enquiry data — your business details, contact details and the quantities and pack formats you need.
• Newsletter email address — if you subscribe.

Payment-related data: we do not collect or store your card details on this website. When electronic payment is enabled, payment data will be handled directly by the payment provider, and we receive only what is needed to confirm the payment status.

Data collected automatically: when you visit the site, technical data needed to deliver and secure the service is recorded in the server logs, such as your IP address, browser and device type, the date and time of the visit and the pages requested. Cookies are also used, as described in section 6.

4. Why we use your data

We use your data to:

• fulfil your order — prepare it, deliver it, communicate with you about it and send order confirmation and status emails;
• manage your account — create it, sign you in, recover your password, save your addresses and show your past orders;
• answer your enquiries and complaints and follow them up through the ticket number;
• assess wholesale enquiries, prepare quotations and follow them up;
• meet legal and accounting obligations — issue invoices and required documents and keep the records the law requires;
• secure the site and prevent fraud — detect and deal with unauthorised access attempts and misuse;
• send the newsletter — if you subscribed, and on the basis of your consent alone (section 7).

5. Legal basis for processing

We process your data on the bases permitted by Egyptian law, depending on the situation:

• your consent — the basis for the newsletter and for any other optional processing; you can withdraw it at any time;
• what performing our contract with you requires — fulfilling your order and managing your account;
• what our legal obligations require — accounting and tax records and consumer-protection obligations;
• what is needed to protect the site and orders from fraud and misuse, to the extent the law permits.

If you withdraw consent for processing that relies on consent, we stop that processing. This does not affect processing carried out before the withdrawal, or anything we need in order to fulfil an existing order or to meet a legal obligation.

6. Cookies

Cookies are small files your browser stores so that parts of the website can work. This website currently uses only essential and functional cookies, namely:

• store cookies — to hold your cart contents and order session and to carry you through checkout;
• a language cookie — to remember whether you chose Arabic or English;
• login cookies — to keep your session open if you have an account;
• a wishlist cookie — to keep the products you save;
• contact-form and search cookies — to make the form and the search function work.

This website does not currently use any analytics, advertising or marketing-tracking cookies. If we add any non-essential cookie in future, we will ask for your consent before it runs, give you a clear way to manage your choice, and update this policy beforehand.

You can manage or delete cookies in your browser settings at any time. Please note that disabling essential cookies may stop the cart, sign-in or checkout from working.

7. Newsletter and electronic marketing

If you subscribe to our newsletter, we use your email address to send you updates about products and offers, on the basis of your consent alone. We do not currently use a third-party email-marketing platform, and we do not track whether you open or click our messages.

You can ask us to stop these messages at any time by contacting us, and we act on that request without condition and at no cost. We do not use an email address you gave us on an order or an enquiry to send you marketing messages without your consent.

8. Analytics

We do not currently use any analytics tool on this website. If we do in future, we will describe it in this policy before it runs, and we will ask for your consent where the law requires it.

9. Social login

Signing in with a social-media account is not currently available on this website. If we enable it in future we will say so here, and the provider will share limited profile data with us — such as your name and email address — with your consent at the point of signing in. We would not have access to your password at that provider.

10. Reviews and wishlist

• Reviews — if you write a product review it may be published on the site with the name you choose and the date of the review. Your email address is not published. You can contact us to amend or remove your review.
• Wishlist — the products you choose are saved so you can find them later, and are linked to your account if you are signed in.

11. Who we share your data with

We do not sell or trade your personal data. We share it only as far as necessary, and with:

• delivery companies — your name, delivery address, phone number and the order details needed to deliver;
• payment providers — once electronic payment is enabled, and only as far as needed to process and confirm the payment;
• our hosting and IT service provider — which runs the server and holds the backups;
• our email service provider — to send account and order emails;
• official authorities — where we are required to do so by law, or to protect our rights or our customers’ safety.

We require every provider we work with to use the data only for the agreed purpose and to keep it confidential.

12. Processing or storage outside Egypt

Some data may be stored or processed on servers or systems belonging to the service providers we work with. We cannot state that all such processing takes place inside the Arab Republic of Egypt. Where any processing or storage takes place outside Egypt, we comply with the requirements the Egyptian Personal Data Protection Law and its Executive Regulations impose on transfers of data abroad, and we put the necessary arrangements in place before such a transfer.

13. How long we keep your data

We keep your data only for as long as the purpose it was collected for requires, and then delete it or make it no longer linkable to you, except where the law requires us to keep it longer:

• order and invoice data — for the period required by accounting, tax and consumer-protection obligations;
• account data — for as long as your account exists, and after it is closed for as long as is needed to settle any outstanding obligation;
• contact-form messages and wholesale enquiries — for as long as is needed to reply, follow up and record what was done;
• newsletter subscription — until you ask us to stop;
• server logs — for as long as is needed for security and operational purposes.

14. Data security

We take reasonable technical and organisational measures to protect your data, including encrypting the connection to the website, restricting access to those who need it for their work, keeping systems updated, and taking backups.

Even so, no method of transmitting or storing data is completely secure, and we cannot guarantee absolute security. If an incident affecting your personal data occurs, we will handle it in accordance with the obligations set out in the Egyptian Personal Data Protection Law and its Executive Regulations, including notifying the competent authority and notifying you where required.

For your part, we ask you to choose a strong password and not to share it with anyone.

15. Your rights, and how to use them

Under the Egyptian Personal Data Protection Law you have the right to:

• access the personal data we hold about you and know how we use it;
• correct any data that is inaccurate or incomplete;
• have your data erased, to the extent that this does not conflict with a legal obligation on us or with fulfilling an existing order;
• object to the processing of your data, or ask us to restrict it;
• withdraw your consent at any time in respect of processing that relies on consent.

You can exercise any of these rights by contacting us through our Contact page or using the contact details on this page. We may ask you to confirm your identity before we act, to protect your data against an illegitimate request. We respond as soon as possible and within the period the law requires.

You can also change much of your data yourself at any time from My Account.

16. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so that we can put it right. You are in every case entitled to complain to the Personal Data Protection Centre, the authority responsible for applying the Personal Data Protection Law in Egypt.

17. Children and external links

This website is not directed at anyone under eighteen years of age, and we do not knowingly collect their data. If we learn that we have collected a child’s data without the required legal basis, we will delete it.

The site may contain links to third-party websites or pages. We do not control their content or their policies and we are not responsible for how they process your data. Please review each one’s own privacy policy.

18. Updates to this policy, and contacting us

We may update this policy when our services, the systems we use, or the applicable laws change, and the date it was last updated is shown at the top of this page. If a change is significant we will make that clear on the website.

For any question or request about your personal data, contact us through our Contact page.