Who we are

Bedaya is a digital toolkit publisher based in Cairo, Egypt. We operate bedayakit.com. For privacy purposes, Bedaya is the data controller of personal data collected from you.

What we collect

When you buy a product

• Your name — to address you in delivery and support emails
• Your email — to send your download link and confirmation
• Payment info — handled entirely by Paymob; we never see or store your card
• Purchase history — which kits you bought and when

When you subscribe to emails

• Email + first name — to send you what you signed up for
• Engagement data — which emails you opened (Beehiiv)

When you visit the website

• Standard request data — IP, browser, pages visited (Cloudflare + analytics)
• Cookies — only essential cookies, plus analytics cookies if you consent

Why we collect it (legal basis)

We process your personal data under one of three legal bases recognized by Egyptian Law 151/2020:

• Contract performance — delivering your product requires your name and email
• Consent — marketing emails only happen if you explicitly opt in
• Legitimate interest — basic analytics for site performance and fraud prevention

Who we share it with

We share data only with service providers we use to operate Bedaya:

• Paymob — payment processing
• Beehiiv — email platform (subscribers only)
• Cloudflare — hosting and CDN
• Make.com — workflow automation between purchase and delivery

We do not sell your data to advertisers, brokers, or any third party. Ever.

How long we keep it

• Purchase records — 7 years (Egyptian tax law)
• Email subscribers — until you unsubscribe, then 30 days, then deleted
• Analytics — anonymized after 14 months
• Support emails — 2 years from last contact

Your rights

Under Egyptian Personal Data Protection Law, you have the right to:

• Access — request a copy of your data
• Correct — fix data that's wrong
• Delete — ask us to delete (subject to tax retention obligations)
• Withdraw consent — unsubscribe anytime via email link
• Object to processing — stop us using your data for consent/legitimate-interest purposes
• Data portability — get your data in machine-readable format

To exercise any right, email hello@bedayakit.com. We respond within 30 days.

Security

We protect your data with reasonable technical and organizational safeguards: HTTPS encryption, access controls, secure cloud storage, and processor agreements with all our service providers. No system is 100% secure, but we apply industry standards.

In the event of a data breach affecting your personal data, we will notify you and the Egyptian Data Protection Center within 72 hours of discovery.

Children

Bedaya is intended for adults building businesses. We don't knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

International transfers

Some service providers (Beehiiv, Cloudflare, Make.com) are based outside Egypt. When your data leaves Egypt, we ensure it goes to jurisdictions with adequate protection or under contractual safeguards equivalent to Egyptian law.

Changes to this policy

Material changes will be communicated by email to existing subscribers.

Contact and complaints

Privacy questions: hello@bedayakit.com

If unsatisfied with our response, you can lodge a complaint with the Egyptian Data Protection Center.