Privacy Policy

Articles of this notice

1. Art. 01

   Who we are

   This policy is issued by SHIELDRA EG LLC, commercial registration number 298594110, Egypt. We provide software engineering services for government and private sector organizations in Egypt. This notice covers personal data processed through the public website and through the Contact page. It does not replace a written data-processing agreement for a client project.

   We have not published a named Data Protection Officer on this website. Privacy requests go through the Contact page or info@shieldraeg.com. This page is a website notice, not licensed legal advice, and it is not a licence or certification from the Personal Data Protection Center.

2. Art. 02

   Governing law

   Personal data on this website is governed by the law of the Arab Republic of Egypt, including the Personal Data Protection Law No. 151 of 2020 (PDPL) and its executive regulations issued by Minister of Communications and Information Technology Decree No. 816 of 2025, to the extent they are in force. The supervisory authority established by the PDPL is the Personal Data Protection Center. GDPR is not the governing law of this site.

   This policy does not state that SHIELDRA holds a licence, permit, or certification from the Personal Data Protection Center. Where the law requires a licence or permit to process personal data or to transfer it abroad, that is a legal obligation. It is not a marketing claim on this page.

3. Art. 03

   Controller and processor

   For the public website and for meeting requests sent through Contact, SHIELDRA EG LLC is the controller: we decide why the inquiry is collected and how it is handled. If you later engage us in writing, the contract governs the roles. For systems we build for a client, the client entity is usually the controller of data in that system. We process that data only within the written scope, as processor or as a separate controller where the contract says so.

   Do not send secrets, classified material, or large personal-data dumps through the Contact form. Discovery is a conversation about a possible engagement, not a data-migration channel.

4. Art. 04

   What we collect

   When you submit the Contact form, we collect the fields you enter so we can reply to a meeting request. We do not run a public account login on this website.

   • Name.
   • Organization.
   • Role.
   • Work email.
   • Phone, if you choose to give it.
   • Entity type (government, private, or other).
   • Topic, and an advisory focus if you chose advisory.
   • The written mandate text you type into the form.
   • How you prefer to be reached, a meeting window, timezone (Africa/Cairo by default), and any date preference.
   • Your consent to this Privacy Policy, which is required to send the form.

5. Art. 05

   Why we process it

   We process Contact data to identify who is writing, understand the topic, reply within one business day, and arrange a meeting window if one is requested. The primary legal basis under the PDPL is your explicit consent, given by the consent checkbox, together with what is necessary to take steps toward a possible written engagement at your request (PDPL Article 6).

   We do not sell personal data. We do not use Contact submissions as a purchased marketing list. Purpose is limited to the inquiry and any written engagement that follows.

6. Art. 06

   Retention

   We keep a Contact minute for as long as needed to reply and to evidence the request and your consent. If no written engagement follows, we delete or anonymise the minute when it is no longer needed for that purpose. If a written agreement is signed, project data follows that agreement, not this website notice.

   Personal data must not be kept longer than needed for the purpose of collection (PDPL Article 3). We do not publish a fake multi-year archive period for website leads.

7. Art. 07

   Who receives the data

   Contact submissions are received by SHIELDRA. They are sent from this website to our own application programming interface so the team can read and reply. Hosting, content delivery, and related infrastructure used to serve the site may process technical request data (such as IP address, browser, and time of request) in order to deliver pages.

   We name only what is real. This public site is a Next.js application. It does not run a third-party advertising pixel or a marketing analytics product. If a cloud host or CDN is used to serve the pages, that host processes technical data as part of delivery. We do not invent additional vendors here.

8. Art. 08

   Cookies and technical data

   The site uses strictly necessary cookies or similar storage to operate, including language preference (Arabic or English) through next-intl. Next.js and the hosting stack may set technical cookies required to serve pages securely. We do not claim that the site uses no cookies.

   We do not use a European-style cookie banner for advertising consent, because we do not run advertising or analytics cookies on this public site. Server logs of a typical web request may include IP address, user agent, and timestamps.

9. Art. 09

   Transfers outside Egypt

   Serving a website and storing an inquiry can involve infrastructure outside the Arab Republic of Egypt. Under the PDPL, transferring, storing, sharing, or making personal data available outside Egypt is a cross-border transfer. Transfers are subject to conditions, including a licence or permit from the Personal Data Protection Center where required, and consent of the data subject, with limited exceptions set out in the law (PDPL Articles 14, 15, and 16).

   We do not pretend that EU standard contractual clauses are the Egyptian transfer mechanism. If a transfer abroad is needed to reply to you or to host the site, it is limited to that purpose. This page does not claim that such a transfer has already been licensed.

10. Art. 10

    Security

    We apply encryption, access control, audit, and isolation as an engineering standard. Those measures reduce risk. They do not eliminate it. This policy is not a PDPL certificate, an ISO certificate, or a SOC report, and we do not issue one to ourselves.

    More detail on the engineering bar is on the Trust Center. How controls are applied to a client system is selected in discovery and written into scope.

11. Art. 11

    Your rights under the PDPL

    If we process your personal data as controller, you have the rights set out in PDPL Article 2, not a pasted GDPR list.

    The law allows the Center to set a consideration for exercising certain rights, excluding the right to be notified of an infringement. That consideration must not exceed EGP 20,000. We will tell you if a fee applies. We do not invent a fee here.

    • To know, review, and access or obtain your personal data that we hold.
    • To withdraw consent you previously gave for retention or processing.
    • To correct, edit, delete, add to, or update your personal data, where applicable.
    • To limit processing to a specified purpose.
    • To be notified of an infringement of your personal data.
    • To object to processing or its results when it contradicts your fundamental rights and freedoms.
    • To complain to the Personal Data Protection Center, the regulator established under the PDPL.

12. Art. 12

    How to exercise your rights

    Use the Contact page or write to info@shieldraeg.com. Describe the right you wish to exercise and how we can identify the inquiry. We may need to verify that the request comes from the data subject. We will handle it in a reasonable time and as the PDPL and its executive regulations require.

    You may also complain to the Personal Data Protection Center. We do not publish a fake portal URL for the Center. If the Center publishes a complaints channel, use that channel.

13. Art. 13

    Children

    This website and our services are directed at organizations, not at children. We do not knowingly collect personal data from children. Under the PDPL, data relating to children is sensitive personal data. Do not submit data of a child through Contact.

14. Art. 14

    Electronic marketing

    We use Contact data to reply to the meeting request you sent. We do not use that form as a direct electronic marketing broadcast. If we ever send marketing messages by electronic means, Egyptian law requires prior consent, a clear sender identity, and an uncomplicated way to withdraw consent (PDPL Articles 17 and 18). This site does not run that activity today.

15. Art. 15

    Changes

    We may update this policy when the site, the processors, or the law changes. The date at the top of this page is the date of the current text. Material changes will be published here.

16. Art. 16

    Language and identification

    This policy is published in English and in Arabic. Both versions are written to be used. If they conflict, the Arabic text prevails, as is usual for a company seated in Egypt. Seat: Egypt. Identify us as SHIELDRA EG LLC, commercial registration number 298594110, Egypt, through the Contact page or info@shieldraeg.com.