Privacy Policy

1. Introduction

Brand Haus for E-Marketing LLC ("we," "our," or "Masdr") operates the Masdr digital B2B marketplace platform accessible at www.masdrmena.com. This Privacy Policy describes how we collect, use, store, and protect personal and business data submitted by manufacturers ("Suppliers"), brand owners ("Buyers"), and visitors to the Platform.

By accessing or using the Platform, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Who We Are

The data controller for all personal data processed through this Platform is Brand Haus for E-Marketing LLC, Commercial Register No. 47874, with registered offices at Building 3i, Legenda Village, Sheikh Zayed, Giza Governorate, Egypt.

For privacy-related inquiries, contact: adham@factorymena.com

3. Data We Collect

4. How We Use Your Data

• To create, verify, and manage platform accounts and verified storefronts
• To facilitate connections and communications between Suppliers and Buyers
• To process payments and disbursements through our licensed Payment Service Provider (Paymob)
• To archive legally significant communications under Egyptian Law No. 15 of 2004 (Electronic Signatures)
• To comply with regulatory, tax, and governmental obligations under Egyptian law
• To prevent fraud, investigate disputes, and enforce our Master Services Agreement (MSA)
• To improve the Platform’s features, performance, and user experience
• To send transactional and operational communications (account confirmations, payment notifications, policy updates)
• For marketing and promotional purposes, only where you have provided explicit consent

5. Legal Bases for Processing

• Performance of a contract: Processing necessary to fulfill our services to you under the MSA or Buyer terms
• Legal obligation: Processing required by Egyptian law, including tax law, data protection law, and anti-fraud regulations
• Legitimate interests: Fraud prevention, platform security, and dispute resolution
• Consent: Where you have opted in to marketing communications or optional features

6. Data Sharing & Disclosure

We do not sell your personal data. We may share data in the following limited circumstances:

• Paymob (Payment Service Provider): Transactional data necessary to process and disburse payments
• Regulatory & Judicial Authorities: Where required by Egyptian law, court order, or regulatory inquiry, including the Egyptian Tax Authority (ETA) and financial regulators
• Dispute Resolution: Communications and transaction records may be disclosed as evidence in disputes between Suppliers and Buyers, or in connection with MSA enforcement
• Service Providers: Vetted third-party providers who assist with hosting, security, analytics, and customer support, bound by confidentiality agreements
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred subject to equivalent privacy protections

7. Data Retention

Upon account deletion or MSA termination, data will be anonymized or deleted within 90 days, except where longer retention is required by law.

• Account data and transactional records: Retained for a minimum of 5 years from the date of last activity, in compliance with Egyptian commercial and tax laws
• Live Chat communications: Archived for a minimum of 180 days as required under Platform operations; retained longer where required by law or active disputes
• Audit logs and system metadata: Retained for 180 days minimum
• Marketing data: Retained until you withdraw consent

8. Data Security

We implement administrative, technical, and physical safeguards to protect your data, including:

• SSL/TLS encryption for all data in transit
• Localized servers within Egypt (compliant with Egyptian Data Protection Law No. 151/2020)
• Role-based access controls limiting data access to authorized personnel
• Regular security reviews and penetration testing

While we take reasonable measures to protect your data, no digital system is completely secure. We will notify affected users of any data breach as required by applicable law.

9. Cookies

The Platform uses cookies and similar technologies to:

• Maintain your login session and authentication state
• Remember your preferences and settings
• Analyze traffic and usage patterns for platform improvements

You may control cookie settings through your browser. Disabling essential cookies may affect Platform functionality.

10. Your Rights

Under Egyptian Data Protection Law No. 151/2020, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the Egyptian Personal Data Protection Center (PDPC)

To exercise these rights, contact us at adham@factorymena.com. We will respond within 30 calendar days.

11. International Data Transfers

Data is stored and processed within Egypt on localized servers. Any international transfers, where necessary, will be conducted in compliance with Egyptian data protection requirements and subject to appropriate safeguards.

12. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform at least 14 days before taking effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.