Privacy Policy
Last updated: [Insert date]
1. Introduction
This Privacy Policy explains how Marjaa collects, uses, stores, shares, and protects personal data when you use our website or app, purchase courses, join communities, or contact support. We aim to process personal data in accordance with applicable laws in the Arab Republic of Egypt, including Personal Data Protection Law No. 151 of 2020 and any applicable implementing requirements.
2. Who Is Responsible for Your Data?
Data controller / responsible entity: [Registered legal company name]. Privacy contact: [Official privacy email]. Address: [Registered address]. These details must be completed and the legally responsible entity verified before publication.
3. Data We May Collect
We may collect information you provide, such as your name, email address, phone number, profile details, support messages, and billing information. We may collect usage data such as courses purchased or progress, community memberships, posts, comments, interactions, points, achievements, referrals, and subscription history. Technical data may include device type, operating system, IP address, login logs, error reports, and cookies, subject to settings and applicable law. We should collect only data necessary for specified and legitimate purposes.
4. Payment Data
Payments are processed through payment providers. Marjaa may receive transaction references, status, amount, currency, and information needed to confirm orders or process refunds. Marjaa should not store full payment-card details or security codes unless legally permitted and compliant with payment-security requirements; sensitive card data should ordinarily be handled by the payment provider.
5. How We Use Data
We use data to create and manage accounts; provide courses, communities, and subscriptions; activate purchases; send service notices; manage payments and refunds; provide support; secure the platform and prevent fraud or abuse; improve performance and user experience; operate points, achievements, and referrals; and comply with legal obligations. Additional uses must be compatible with the original purpose or supported by an appropriate legal basis.
6. Legal Bases for Processing
Depending on the processing activity and applicable law, processing may be based on performing a contract, consent where required, legal obligations, protection of rights and security, or another lawful basis. Where consent is the basis, users may withdraw it through available means. Withdrawal does not necessarily affect the lawfulness of earlier processing or processing based on another legal ground.
7. Service Messages and Marketing
We may send necessary account, purchase, security, and service-change communications. Marketing communications will be sent in accordance with legal requirements, user settings, and any required consent, with an appropriate opt-out method where required. Opting out of marketing does not stop essential service communications.
8. Messages, Communities, and Content
Messages, posts, comments, files, and interactions are processed to operate, moderate, and secure community and communication features. Other members may see content you post in shared spaces according to product settings. Do not post sensitive or personal information you do not wish to share. Authorized staff or moderators may access content when needed for support, moderation, investigating reports, or complying with legal obligations, subject to access controls.
9. Data Sharing
We may share necessary data with hosting and infrastructure providers, payment processors, email and notification services, analytics and security providers, support providers, app stores, professional advisers, or competent authorities where required by law. We seek appropriate arrangements with service providers and limit their use of data to required purposes. We do not sell personal data for money. The actual provider list must be verified before publication.
10. International Data Transfers
Data may be processed or stored outside Egypt if we use overseas providers or infrastructure. Any international transfer must be reviewed for compliance with applicable Egyptian legal requirements, including any safeguards, approvals, or permits required in the circumstances. Marjaa should document actual hosting locations and service providers before launch.
11. Cookies and Analytics
The platform may use cookies or similar technologies for login, preferences, performance, usage measurement, and security. Consent, refusal, or preference-management options will be provided where required by law. Users can control some cookies through browser settings, although disabling essential cookies may affect platform functionality.
12. Data Retention and Deletion
We retain data only as long as necessary for the purposes described in this Policy or to meet legal and accounting obligations, resolve disputes, or protect rights. Some transaction or security records may remain after account closure where legally required or necessary for a legitimate purpose. When retention is no longer needed, data will be deleted, anonymized, or secured in accordance with applicable procedures and law.
13. User Rights
Subject to applicable law and the circumstances of processing, users may have rights to learn what data is processed, access or obtain a copy, correct inaccurate data, request deletion or restriction where applicable, withdraw consent where relied upon, object, or complain to a competent authority. Requests are subject to identity verification and applicable exceptions or deadlines. Contact [Official privacy email] to submit a request.
14. Data Security
We use appropriate administrative, technical, and organizational safeguards to reduce the risk of unauthorized access, loss, alteration, or disclosure. No transmission or storage method is completely secure. If a data incident occurs, we will respond in accordance with applicable legal requirements, including required notifications where applicable.
15. Children’s Data
The platform is not directed to children unless a service is expressly identified as designed for them. If a service is available to minors, age requirements, parental consent, and any special safeguards must be established before launch. If we learn that a child’s data was collected unlawfully, we will take appropriate steps to address the situation.
16. External Links and Services
The platform may include links to or integrations with third-party services. Those services operate under their own privacy practices. Review their policies before providing information to them.
17. Changes to This Policy
We may update this Policy as services or legal requirements change. The revised version will be published with an updated date, and users will be notified of material changes where required by law or warranted by the nature of the change.
18. Contact and Complaints
For privacy questions or requests: [Official privacy email]. Company: [Registered legal company name]. Address: [Registered address]. These details and the process for handling data-subject requests and complaints must be verified before publication.