Privacy Policy

The data controller responsible for personal data processed through this website and our client engagements is:

We practice data minimization and collect only information necessary for communication, scoping, contract execution, and secure website delivery:

• Inquiry and Consultation Data: Full name, work email address, organization name, requested service category, indicative budget range, target timeframe, project description, and optional telephone number if you request phone/WhatsApp communication.
• Client Account and Contract Information: Authorized representative names, company registration numbers, billing and invoicing addresses, payment reference numbers (we do not process or store raw payment card data directly), and signed agreement records.
• Correspondence: Records of communications sent via email, WhatsApp, or contact forms, including technical scoping briefs and revision requests.
• Technical and Security Data: Client IP address (temporarily processed in server memory for anti-abuse and rate limiting), browser user-agent, operating system, and system timestamp.
• Analytics Data (Consent-Grounded): Aggregated website usage metrics, page views, session duration, and referral sources collected via Google Analytics 4 only when you have granted analytics consent.

In accordance with Egypt's Personal Data Protection Law No. 151 of 2020 and applicable international data protection standards, we process your personal data under the following legal bases:

We receive personal data directly from you when you submit a project inquiry on our website, contact us via email or WhatsApp, or enter into a written service agreement. We do not purchase data from third-party brokers or data aggregators.

We do not sell, rent, or trade your personal data. We disclose data only to trusted infrastructure providers who process data strictly under our instructions:

• Transactional Email Services: Resend, Inc. (used securely to dispatch inbound inquiry notifications to our engineering inbox).
• Cloud Hosting & Edge Infrastructure: Vercel Inc. and Google Cloud Platform (for secure content delivery and serverless computing).
• Analytics Provider: Google Ireland Limited / Google LLC (for Google Analytics 4, operating with IP anonymization and Consent Mode v2 controls).
• Professional Advisors: Qualified legal and accounting professionals bound by professional confidentiality obligations.

BizChefs operates from Egypt and serves both local and international clients. When data is transferred to cloud servers located outside Egypt (e.g. European Union or United States data centers used by hosting and email providers), we ensure adequate safeguards are in place, including standard contractual clauses, encryption in transit (HTTPS/TLS), and compliance with Article 14 of Egypt's Law No. 151 of 2020.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Unconfirmed Inquiries: Retained for 12 months following initial inquiry to assist with delayed project kick-offs, then securely purged.
• Active Client Records & Deliverables: Retained for the duration of the project engagement plus 5 years to comply with statutory Egyptian tax, audit, and commercial accounting regulations.
• In-Memory Rate Limiting Logs: Flushed automatically every 10 minutes from server memory.
• Analytics Data: Retained in Google Analytics 4 for up to 14 months before automated deletion.

Subject to statutory exceptions under applicable Egyptian law (Law No. 151 of 2020) and international standards, you hold the following rights:

• Right to Knowledge & Access: You may request confirmation of whether we process your data and receive a readable copy.
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where retention is no longer necessary or lawful.
• Right to Restriction: You may request that we temporarily suspend processing of your data in specific disputed situations.
• Right to Object: You may object at any time to direct marketing communications.

To exercise any of these rights, contact our privacy desk at contact@bizchefs.com. We will respond within 30 calendar days without charging an administrative fee for reasonable requests.

Where processing is based on your consent (such as performance cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

You can update or withdraw your cookie consent at any time by clicking the "Cookie Preferences" button located in the global website footer or on our Cookie Policy page.

We maintain technical, physical, and administrative safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access:

• Mandatory TLS/HTTPS encryption for all data in transit across our website and API routes.
• Zero storage of sensitive payment credentials or raw credit cards on our servers.
• Strict access controls and environment variable secret isolation on server runtimes.
• Automated server rate limiting, anti-CRLF injection sanitization, and honeypot validation on inquiry endpoints.

BizChefs provides digital services and web engineering exclusively for commercial businesses, founders, and professionals. Our website is not intended for or directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.

We send marketing materials or newsletters only where you have explicitly opted in via an unchecked consent box or requested ongoing updates. You can unsubscribe at any time by clicking the unsubscribe link in any promotional email or contacting us directly.

This policy is governed by the laws of the Arab Republic of Egypt, specifically Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations (Ministerial Decision No. 816 of 2025). The competent national supervisory authority is the Personal Data Protection Center (PDPC) in Egypt.

We may revise this Privacy Policy from time to time to reflect operational, technological, or legal developments. When changes occur, the updated policy will be posted on this page with a revised effective date.