Privacy Policy

Data you give us:

• When you create an account: name, email address and password (stored in hashed form).
• When you place an order: name, phone number, delivery address, email address and any note you add to the order.
• When you contact us through the contact form, WhatsApp or email: your name, contact details and the content of your message.

Data collected automatically:

• IP address, device type, browser, operating system and chosen language.
• Pages you visit, products you view and how you arrived at the site.
• Shopping cart contents before an order is placed.

We do not collect payment card data. The payment method currently offered is cash on delivery, and no banking details pass through the website or the app.

• To process and deliver your orders and contact you about them.
• To manage your account and show your order history.
• To answer your questions and handle returns and exchanges.
• To improve the website and the app and understand which products people are interested in.
• To send offers or updates, only if you have agreed to receive them; you can unsubscribe at any time.
• To meet legal and accounting obligations.

The website uses cookies that are necessary to run the store: keeping your cart, remembering that you are logged in, and saving the language you chose. We also use cookies to learn how you reached us (for example through an advert or a search) so we can improve our service. You can disable cookies in your browser settings, but some store functions such as the cart and login will not work without them.

The “Boya Store” app displays the same website content inside the app, and this policy applies to it in full. The app may ask for notification permission to tell you about your order status or offers; you can refuse or withdraw that permission in your phone settings without affecting your use of the app. The app does not access your contacts, photos, location or microphone.

We do not sell or rent your data to anyone. We share only the minimum necessary with:

• Shipping and delivery companies: name, phone number and address, to deliver your order.
• Our hosting provider and the technical services that run the website and the app.
• Public authorities where the law requires it.

Order data is kept for the period required by Egyptian tax and accounting law. Account data is kept while your account is active and deleted on your request. Contact messages are deleted a reasonable time after they have been handled.

The website and the app run over an encrypted connection (HTTPS), passwords are stored in a hashed form that cannot be read back, and access to order data is limited to authorised staff. No method of transmission or storage is completely secure, so we recommend using a strong password and not sharing it.

Under Egypt’s Personal Data Protection Law No. 151 of 2020 you have the right to:

• Access the data we hold about you.
• Correct any inaccurate data.
• Request deletion of your account and data, except what the law requires us to keep.
• Withdraw your consent to marketing messages at any time.

To exercise any of these rights, write to the email address below. We reply within 30 days at most.

Our services are intended for adults. We do not knowingly collect data from anyone under 18, and we delete such data if we become aware of it.

The website may contain links to other sites, such as our social media pages. We are not responsible for the privacy practices of those sites.

We may update this policy from time to time. The updated version is published on this page with the date of the last update, and we notify you of any material change through the website or the app.