Privacy Policy
Terhal Privacy Policy
Information we collect
We collect information you provide directly and information needed to operate the store:
• Name, email, phone number.
• Billing and shipping addresses.
• Order details and order history.
• Payment transaction data (processed by Paymob; we do not store full card numbers).
• Messages you send us (support requests, returns).
How we use your information
We use your data to:
• Process orders and payments.
• Arrange shipping and delivery.
• Send order confirmations, shipping updates, and support replies.
• Maintain order records for legal, tax, and accounting purposes.
• Send marketing only if you opt in.
Payments
We use Paymob to process online payments. Paymob receives payment details and transaction data to authorize and settle payments. Terhal never stores full card numbers or CVV codes on our servers. For details about Paymob’s handling of payment data, see Paymob’s privacy information and developer docs.
Legal basis and Egypt compliance
If you are an Egyptian resident, we process personal data in line with Egypt’s Personal Data Protection Law No. 151 of 2020 (PDPL). This means we rely on lawful grounds such as: your consent, performance of the sales contract (order processing), legal obligations, or our legitimate interests where appropriate. The PDPL grants data subjects specific rights and sets rules for processing and breach reporting.
Sharing & third parties
We share personal information only with parties required to operate the store:
• Paymob and other payment processors.
• Shopify (store hosting and order infrastructure).
• Shipping carriers and fulfillment partners to deliver your order.
• Service providers for customer support, fraud prevention, and accounting.
We will disclose information when required by law or to protect our rights.
International transfers
Some of our service providers (including payment processors) may process or store data outside Egypt. We use contractual and technical measures to protect your information during transfer and storage.
Data retention
We retain personal data as long as necessary to: complete your orders, meet legal and tax requirements, and resolve disputes. If you request deletion, we will remove your data unless we must keep it for legal or regulatory reasons.
Your rights (Egypt / PDPL)
Under the PDPL you may:
• Request access to the personal data we hold about you.
• Request correction or completion of inaccurate data.
• Request deletion or restriction of processing.
• Withdraw consent where processing is based on consent.
• Request data portability where applicable.
To exercise these rights contact us using the details below. The PDPL requires controllers and processors to enable and respond to such requests within the statutory timeframes.
Data breach notification
In the event of a personal data breach we will follow PDPL obligations, including notifying the Personal Data Protection Center and, where required, informing affected individuals within the required timeframes (PDPL includes reporting and notification obligations). Some guidance and local practice require timely reporting (for example within 72 hours when applicable).
Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. No system is completely secure; if you suspect misuse of your data, contact us immediately.
Minors
Our site is not intended for individuals under 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal information, contact us to request deletion.
Changes to this policy
We may update this policy to reflect legal or operational changes. We will publish the revised date at the top of the policy.
Contact
For privacy requests, questions, or complaints:
Email: kaayyaan21@gmail.com
Address: Cairo, Egypt
If you remain unsatisfied after contacting us you may lodge a complaint with Egypt’s Personal Data Protection Center in accordance with PDPL procedures.