Privacy Policy

1. Who is responsible

[Company legal name] ([Registered address, Egypt]) operates Shoghlak and is responsible for your personal data under Egypt's Personal Data Protection Law (Law 151 of 2020). Contact: [contact email]. [Data protection officer details, if required, to be added by counsel.]

2. What we collect

• Account: your name, email address and password (stored only as a secure hash), language and time zone.
• Profile (if you add it): photo, biography, city and governorate, languages, headline, skills, rates, work experience, education, certifications, portfolio and links.
• Activity: jobs, proposals, services, orders, projects, deliverables, bookings, messages, reviews, reports, disputes and verification requests.
• Payments: amounts, status and references. Card details are entered on our payment provider's page and never reach or stay on Shoghlak.
• Technical: sign-in cookies, your browser type for active sessions, and security logs. IP addresses are used briefly to limit abuse and kept only as a scrambled (keyed hash) value, not in readable form.

3. Why we use it

We don't sell your data and we don't use it for advertising.

• To run the marketplace and the agreements you make (contract).
• To keep accounts and payments secure and prevent fraud and abuse (legitimate interest).
• To keep financial and transaction records the law requires (legal obligation).
• To send you account emails and notifications about your work.

4. Who can see it

• Everyone: what you publish, such as your public profile, services and open jobs.
• The other party: proposals, messages, deliverables and booking details of your engagements.
• Administrators: only what they need to moderate, resolve reports and disputes, and run payments; their actions are recorded.
• Service providers acting for us: hosting, database and file storage, email delivery (Resend) and payment processing (Paymob), each limited to their task.
• Authorities, when Egyptian law requires it.

5. Storage outside Egypt

Some of our service providers may store data outside Egypt. Where they do, we transfer it only as Law 151 allows. [Hosting location and transfer basis to be confirmed by counsel.]

6. How long we keep it

• While your account is open, we keep your data to provide the service.
• When you close your account, we delete your name, email, photo, profile, portfolio, skills, files and sign-in details right away, and remove your listings from the marketplace.
• Messages, reviews, orders, projects, payments and audit records are shared with other people or required for legal and accounting purposes. We keep them for 5 years, shown as "Closed account" with nothing that identifies you. [Retention period to be confirmed by counsel.]

7. Your rights

• See and copy your data: Settings → Your data → Download my data gives you everything we hold about your account in one file.
• Correct it: edit your account and profile at any time.
• Delete it: Settings → Your data → Close my account.
• Object, or withdraw consent you've given: contact us at [contact email].
• Complain to Egypt's Personal Data Protection Center if you think we've mishandled your data.

8. Cookies

We use only cookies that are needed for the site to work: keeping you signed in, completing two-step sign-in, and remembering your language. We don't use advertising or analytics trackers.

9. Security

Connections are encrypted, passwords are stored only as secure hashes, two-step sign-in is available (and required for administrators), access is restricted and recorded, and payment and audit records can't be altered. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

10. Children

Shoghlak is not intended for people below the minimum age to use it. [Minimum age to be confirmed by counsel.]

11. Changes and contact

We'll show the date of the latest version at the top and tell you of significant changes. Questions or requests: [contact email].