Privacy Policy

Last updated: 2026-10-08

1. Scope and data controller This policy applies to personal data collected by the office through its website, client registration form, communication channels and the internal work system used by its staff. It is issued pursuant to Personal Data Protection Law No. 151 of 2020 and its Executive Regulations. Data controller: Ahmed Ellaboudy Office for Accounting, Auditing and Financial & Tax Advisory. - Address: 376–378 El Geish Street, Queen Tower, 7th Floor, El Arbaeen District, Suez - Email: ahmedellaboudy@eg-ellaboudy.com - Telephone: 01090271104 – 01222234371 - Data protection officer: Ahmed Ellaboudy, office owner - Request reception hours: Sunday – Thursday, 9 am – 5 pm This policy does not apply to external websites reached through links on this website, such as WhatsApp, Facebook and LinkedIn; those platforms have their own privacy policies.
2. Data we collect We collect only the data necessary to provide the service and within the requirements of official entities with which we deal on the client’s behalf. - Browsing the public website: We do not request personal data. Hosting servers may record technical data such as IP addresses and browser types for operation and security. - Contact by telephone, email or WhatsApp: Your name, telephone number or email and the content of your enquiry, at your choice. - Client registration form — identity: Full name, national ID or passport number, nationality, sex, date and place of birth (name, identity number and nationality are mandatory). - Registration form — contact and address: Telephone, email, occupation, marital status and residential address (governorate and district are mandatory). - Registration form — sensitive data: Religion and images of national identity cards or birth certificates, depending on the service. - Registration form — mother’s details: Name, identity number and identity card image (optional and requested for certain procedures). - Client file within the system: Company and establishment details, tax registration, contracts and fees, documents and correspondence, accounting entries and financial transactions. - Office employees: Account and role information, and the system activity log for oversight and quality purposes. We do not request passwords or bank card details in any form. We do not intentionally collect data about children under fifteen except with explicit written consent from a guardian when a particular service requires it.
3. Processing purposes and legal bases We use data only for the following purposes and will not use it for another purpose without informing you and obtaining your consent where required. - Responding to enquiries and identifying the appropriate service — your consent, by initiating contact. - Opening your file, verifying and approving your details — your consent and steps towards entering into a contract. - Performing agreed accounting, tax and advisory services — performance of the contract or engagement with you. - Official procedures on your behalf (Tax Authority, social insurance, Digital Egypt platform, real estate registration, powers of attorney and company incorporation) — performance of the engagement and your explicit consent for sensitive data. - Issuing invoices, collecting payments and maintaining the office’s books — performance of the contract and the office’s tax and accounting obligations. - Fulfilling professional and legal obligations and responding to competent authorities — a legal obligation. - Monitoring work quality and protecting systems against unauthorized use — the office’s legitimate interest in protecting its clients’ data. We do not sell data, use it for direct electronic marketing, or make automated decisions affecting you without human review.
4. Sensitive data Religion is sensitive data under the law. We process it only with your explicit written consent and solely to complete official procedures that require it. - Why we request it: Procedures with social insurance, the Digital Egypt platform, real estate registration and powers of attorney require religion and mother’s details. - Your choice: You may select ‘Not specified’ for religion and leave mother’s details blank. The office may then request them later for a procedure that needs them, or it may be unable to complete that procedure. - Identity documents: We retain images because official entities require them. Within the system, the national ID number is masked except for its last four digits. - Access: Access is limited to the employee responsible for your file and the office owner. - Withdrawal of consent: You may withdraw consent to future processing at any time, without affecting processing that occurred before withdrawal.
5. Data sharing and transfers outside Egypt We share your data only with the following entities and only to the extent necessary: - Official entities required to perform your service, such as the Egyptian Tax Authority, the National Organization for Social Insurance, real estate registration offices, the General Authority for Investment and the Commercial Registry. - Judicial or supervisory authorities pursuant to a legally binding request. - Technical service providers used to operate the website and system and store documents and backups. They act as processors on the office’s behalf and may not use the data for their own purposes. Transfers outside Egypt: Servers hosting the website and system and the cloud storage service holding documents and backups may be outside the Arab Republic of Egypt. We therefore request your explicit consent to this transfer at registration, comply with the controls and permits prescribed by the Personal Data Protection Center, and select providers offering a level of protection no lower than that prescribed by Egyptian law.
6. Data protection and breach notification We apply technical and organizational measures appropriate to the sensitivity of our clients’ data and the office’s professional duty of confidentiality: - A closed internal system accessible only to authorized employees through personal accounts, with permissions specified for each department. - An encrypted connection (HTTPS) between your browser and the website. - Backups encrypted with a recovery passphrase held only by the office. - An audit trail of operations affecting data and approval requirements for amendment and deletion requests. - Employees’ commitment to professional confidentiality. In the event of a breach: We notify the Personal Data Protection Center within 72 hours of becoming aware of it, and affected data subjects within three working days, describing what happened and the measures taken.
7. Retention and secure deletion We retain data and documents throughout the relationship and for five years after the service ends, unless the law, a dispute or an ongoing procedure requires a longer period. - A registration request that has not been approved and has not resulted in an engagement: Deleted within a short period set by the office after review. - An existing client: Throughout the relationship. - After the relationship ends: Five years, followed by secure deletion or destruction. - Documents subject to an ongoing dispute or tax examination: Until it ends, after which the retention period is calculated. Deletion includes backups as they are rotated, and deletion is recorded in the audit trail.
8. Your rights and how to exercise them You may request at any time: 1) Information about the data we hold about you, access to it and a copy of it. 2) Correction or updating of inaccurate information. 3) Deletion of your data unless retention is legally required or necessary for an ongoing engagement. 4) Objection to particular processing or restriction of its scope. 5) Withdrawal of consent to future processing. 6) Information about any breach affecting your data. How to request: Email ahmedellaboudy@eg-ellaboudy.com or visit the office. We may ask for proof of identity before acting on your request. We respond within the period prescribed by the law and its regulations. Complaints: If you are dissatisfied with our response, you may lodge a complaint with the Personal Data Protection Center.
9. Cookies and policy updates The website uses only necessary cookies and local storage, such as saving your chosen language on your device and employees’ login sessions, and does not use advertising tracking cookies. The location map on the contact page is provided by Google and loads only when you click “Show map”; it is then subject to Google’s Privacy Policy. We may update this policy when our services or legal requirements change. The date of the latest update appears at the top of the page, and we request your consent again if an update changes the purposes for which your sensitive data is used. The Arabic text prevails in the event of any difference from the English translation.