Privacy Policy
Last updated 16 September 2026
Before this goes live: the entries marked [TO CONFIRM] are facts only Joia & Gina can supply — the registered company name, commercial register and tax numbers, the registered address and the contact point for data questions. They have been left visible rather than filled with plausible-looking invented values.
The short version: we collect what we need to bring you an order and nothing else. We do not sell your details to anyone. Because you pay the courier in cash, we never hold card or bank details at all.
Who is responsible
[TO CONFIRM: registered company name], trading as Joia & Gina, of [TO CONFIRM: registered address], Alexandria, is the controller of the personal data described here. For anything on this page, contact [TO CONFIRM: data contact email].
We handle personal data in line with Egypt’s Personal Data Protection Law (Law No. 151 of 2020).
What we collect, and why
| What | Why | Kept for |
|---|---|---|
| Name | To address the order and confirm who is receiving it | 7 years (accounting records) |
| Mobile number | To telephone and confirm before dispatch; the courier calls before arriving. It is also how our shop system recognises a returning customer. | 7 years |
| Delivery address | To bring the order to you | 7 years |
| Email address | Order confirmations and, if you asked for it, the newsletter | Until you ask us to stop |
| What you ordered | To fulfil it, to handle exchanges and returns, and for our accounts | 7 years |
| Account password | Only if you create an account. Stored encrypted; we cannot read it. | Until the account is closed |
| Basic site usage | To keep the site working and see which pages are useful | Up to 2 years |
Seven years is not our preference — it is how long Egyptian commercial and tax law requires us to keep records of sales.
What we do not collect
- No card or bank details. There is no card form on this website.
- No national ID numbers. We never need one.
- No tracking of you across other websites for advertising.
- Nothing about your health, religion, politics or anything else in the sensitive categories.
Our legal basis
- To perform the contract — name, mobile, address and order details. Without these we cannot deliver.
- Legal obligation — keeping sales records for tax and commercial law.
- Consent — the newsletter, and non-essential cookies. You can withdraw either at any time.
- Legitimate interest — keeping the site secure and preventing fraudulent orders.
Who else sees it
- Our shop system. Confirmed orders are written into the point-of-sale system that runs our Alexandria branches, so staff can prepare the order and handle any later exchange. It holds your name, mobile and what you bought. It is our own system, operated on our behalf.
- The courier. Name, address, mobile and the amount to collect — only what is needed to deliver.
- Our web host, which stores the site and its database on our instructions.
- Our newsletter provider, only if you subscribed, and only your email address.
- The authorities, where the law requires it.
We do not sell personal data, and we do not share it for anyone else’s marketing.
Cookies
Essential cookies keep your basket and your login working, and remember which language you chose. The site cannot function without them.
Anything beyond that — measurement or marketing — is only set if you agree, and you can change your mind. Your browser can block or delete cookies; the basket will stop working if you block the essential ones.
Your rights
Under Egyptian data protection law you may ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything wrong;
- delete what we hold, where we are not required to keep it;
- stop using it for a particular purpose, such as the newsletter;
- withdraw consent you have given.
Write to [TO CONFIRM: data contact email]. We will reply within 30 days. We may ask a question or two to check it is really you before we act — that protection is for your benefit.
If you are not satisfied with our answer you may complain to the Egyptian Personal Data Protection Centre.
Keeping it safe
The site runs over an encrypted connection, access to order data is limited to staff who need it, and passwords are stored hashed. No system is perfect, and we will tell you promptly if something happens that puts your data at real risk.
Children
This shop is not aimed at children and we do not knowingly collect their data. If you believe a child has given us personal data, tell us and we will remove it.
Changes
If we change how we handle your data we will update this page and change the date at the top. Anything significant, we will say so plainly rather than quietly editing a clause.