Privacy Policy

Beauty & Glow respects your privacy and processes your personal data in line with Egypt's Personal Data Protection Law No. 151 of 2020 and its Executive Regulations. This policy explains what we collect, why, and your rights.

1. Data we collect

Data you give us: name, phone number, email, delivery address, governorate, and order details.
Payment data: card payments are processed directly by licensed payment providers. We receive only the payment status and the last 4 digits of the card, never the full card number or CVV.
Technical data: IP address, device and browser type, pages visited and cookies, to run and improve the website.
Communications: messages you send us by WhatsApp, phone, email or social media.

We do not knowingly collect data from children under 18 without the consent of a parent or guardian.

2. Why we use your data

To process, confirm, deliver and support your orders, returns and refunds.
To contact you about your order and respond to your enquiries.
To prevent fraud and protect the website and our customers.
To meet legal, tax and accounting obligations.
To send offers and marketing messages only if you have given your explicit consent. You can unsubscribe at any time, free of charge, using the link in the message or by contacting us.

3. Sharing your data

We never sell your personal data. We share it only as needed with:

Shipping and courier companies, to deliver your order.
Licensed payment providers, to process payments.
Technology providers who host or run our website, bound by confidentiality.
Government or judicial authorities, when required by law.

If any of these providers stores data outside Egypt, we will do so only in line with the transfer rules of Law No. 151 of 2020.

4. Cookies

We use essential cookies to run the website and keep your cart, and, with your consent, analytics and marketing cookies. You can change your cookie choices at any time from your browser or our cookie banner.

5. Data retention

We keep your data only as long as needed for the purposes above or as required by law (for example, invoices and tax records). After that, we delete or anonymise it.

6. Data security

We use appropriate technical and organisational measures, such as encrypted connections (SSL), restricted access and secure payment gateways. If a data breach affects your personal data, we will notify the Personal Data Protection Centre within 72 hours and inform affected customers as required by law.

7. Your rights

Under Law No. 151 of 2020, you have the right to:

Know what personal data we hold about you and get a copy of it.
Correct, update or complete your data.
Request deletion of your data, unless we must keep it by law.
Withdraw your consent at any time, including for marketing.
Object to or restrict certain processing.
Be informed of any breach affecting your data.

To use any of these rights, contact our Data Protection Officer at [DPO email]. We respond within the period set by law. You may also file a complaint with the Personal Data Protection Centre.

8. Changes to this policy

We may update this policy from time to time. The latest version, with its effective date, is always available on this page.