Privacy Policy
Last updated: 30 October 2026
This policy explains how we collect, use, share and protect your personal data when you use walygroup.com, or when you contact us. We do so in line with the Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations issued by Ministerial Decree No. 816 of 2025.
1. Who we are
The party responsible for your data (the controller) is: Waly Group for Investment and Project Management, an Egyptian limited liability company, Commercial Registry No. 4652 (Gamasa Investment Commercial Registry Office), Unified Registry No. 11090 09000 04652, Tax Registration No. 754-531-694, head office: Salah Salem St., opposite the Spinning and Weaving Factory, Damietta 1st District, Damietta City, Damietta. This policy covers the walygroup.com website and Waly Group's own contact channels. Each group company has its own privacy policy on its website and is responsible for its own customers' data. You can reach our data-protection contact about anything related to your data at: Email info@walygroup.com and phone/WhatsApp +20 110 075 7356.
2. Data we collect and where it comes from
- Conversations: the content of messages you send us through WhatsApp, Facebook, Instagram and our contact forms (text, photos, voice notes and files), and your name and account ID as the messaging platform shows them to a business account.
- Technical data: IP address, device and browser type.
We receive this data from you directly when you use our services or contact us; from social media platforms (account name and ID). We do not ask you for sensitive data such as health or religious data.
3. Why we use your data
- To answer your questions, messages and complaints.
- To operate and secure the website and prevent fraud.
- To send marketing messages, only with your consent.
- To comply with the law and respond to requests from competent authorities.
4. Legal basis for processing
We process your data on one of the following bases:
- Legal obligation: answering requests from competent authorities as the law requires.
- Legitimate interest: to operate, secure and improve our services, without overriding your rights.
- Consent: for marketing messages and any case where the law requires your consent. You can withdraw your consent at any time.
5. Sharing your data
We do not sell your personal data. We share it only as needed with:
- Competent government bodies where the law requires it.
We also share it with service providers that process data on our behalf, under confidentiality obligations:
- Hetzner: hosting of our servers, databases, email and backups (Germany and Finland).
- Backblaze: storage of encrypted backup copies of our data (United States).
- Google (Google Fonts): loading the website fonts; your device's IP address reaches Google when a page opens (United States).
- Meta (WhatsApp): carrying your messages when you contact us on WhatsApp (United States).
- Meta (Facebook and Instagram): receiving and answering messages and comments on our pages (United States).
When you message us on WhatsApp, Facebook or Instagram, Meta also processes your messages under its own policy. We do not use the content of Facebook, Instagram or WhatsApp messages for advertising.
6. Transfers outside Egypt
Your data is stored on servers outside the Arab Republic of Egypt and is transferred to the following countries:
- Germany and Finland: the Hetzner servers that run our systems, and their backups.
- United States: encrypted backup copies at Backblaze, and the services of Google and Meta.
Some of the service providers listed may also process data in other countries where their servers are located. The Personal Data Protection Law and its Executive Regulations require a licence or permit from the Personal Data Protection Center for these transfers. We have applied for it, and until it is issued we transfer only what is needed to provide the service.
7. How long we keep your data
We keep your data for as long as needed for the purpose we collected it for, and then for the periods required by law, such as tax and commercial law. After that we delete the data or remove what identifies you.
8. Security
We take technical and organisational measures to protect your data against loss, misuse and unauthorised access, including:
- Encryption of the connection between your device and our websites over HTTPS.
- Administrative access to our servers over SSH is by key only.
- Encrypted backups.
- Access rights set for each user according to their work.
9. Your rights
The law gives you the following rights:
- To know what data we hold about you, to see it and to obtain it.
- To withdraw your consent to processing at any time.
- To have your data corrected, changed, added to or updated.
- To have your data erased.
- To restrict processing to a specific scope.
- To object to processing or its results where it conflicts with your fundamental rights and freedoms.
- To be informed of any breach of your personal data.
Withdrawing consent does not affect processing carried out before it. We may keep some data after an erasure request where the law requires us to.
10. How to exercise your rights
Send your request to our data-protection contact at: Email info@walygroup.com and phone/WhatsApp +20 110 075 7356. We may ask you for proof of identity before we act on a request, so that we do not give your data to someone else. We answer your request within six (6) working days of receiving it. If you messaged us on Facebook, Instagram or WhatsApp, you can ask us to delete your data and message history by sending a request from the same email or phone number you used to contact us to info@walygroup.com with the subject "Data Deletion". We delete the data within the same period, except what the law requires us to keep.
11. Complaints
If you believe our processing of your data breaks the law, you have the right to complain to the Personal Data Protection Center in Egypt. We ask you to contact us first so that we can try to solve the problem.
12. Data breach notification
If a breach of your personal data occurs, we notify the Personal Data Protection Center within seventy-two (72) hours of becoming aware of it, and we also notify you if you are affected, as the law requires, explaining what happened and what we have done.
13. Cookies and measurement tools
We use only essential cookies to run the website, for example to keep you signed in and remember your language. We do not use analytics or advertising tools. The website loads Google Fonts from Google's servers, so your device's IP address reaches Google when a page opens.
14. Electronic marketing messages
We send you marketing messages by text message, WhatsApp or email only after your prior consent. Every marketing message clearly shows Waly Group as the sender. You can stop these messages at any time by contacting us at: Email info@walygroup.com and phone/WhatsApp +20 110 075 7356. We stop them free of charge. Service messages, are sent because they are needed to provide the service.
15. Children
Our services are not directed at people under 18, and we do not knowingly collect their data without a guardian's consent. If you learn that a child has sent us their data, contact us so that we can delete it.
16. Changes to this policy
We may change this policy from time to time. We publish the updated version on this page with its "Last updated" date. If a change is material, we tell you about it in a suitable way before it takes effect.
17. Contact
Waly Group for Investment and Project Management — Salah Salem St., opposite the Spinning and Weaving Factory, Damietta 1st District, Damietta City, Damietta. Email info@walygroup.com and phone/WhatsApp +20 110 075 7356.