Privacy Policy

1. Responsible Entity

Eb3at is operated under the “Eb3at” brand. For legal notices and data-protection matters, the responsible entity is [Full Legal Company Name], with registered address [Legal Address] and privacy contact [privacy@domain].

2. Scope

This Policy explains how Eb3at collects, uses, stores, secures, shares, and retains personal data through the public website, guest orders, accounts, customer, merchant and driver portals, tracking, support, and integrations.

3. Categories of Data

• Account data: name, mobile number, email, User Code, and login information.
• Merchant data: business activity, contact, billing, commercial registration, tax information, and related documents.
• Driver data: identity, personal photo, driving licence, vehicle licence, vehicle details, and document status.
• Shipment data: recipient, phone number, addresses, contents, weight, value, COD, shipment status, and delivery information.
• Security and operational data: IP address, device information, and audit records.
• Driver location data when tracking is enabled and authorized.
• Operational financial data required for transactions and settlements.

4. Purposes of Processing

Purposes include account management, shipment and delivery execution, merchant and driver verification, tracking, COD collection and settlement, customer support, fraud prevention, information security, legal compliance, reporting, and integrations.

5. Legal Basis

The applicable legal basis depends on the processing activity and may include service performance or contractual necessity, legal obligations, legitimate interests where permitted, or consent where consent is the appropriate basis. General consent is not treated as an unlimited authorization for undefined processing.

6. Sensitive Data and Documents

Identity documents, licences, and business documents are treated as information requiring enhanced protection. They should not be exposed through public URLs and access is restricted according to role and legitimate operational need.

7. Data Sharing

Data may be shared only to the extent necessary with trusted service providers or competent authorities where required or permitted, subject to appropriate confidentiality, contractual, and security safeguards.

8. Service Providers and Transfers

When email, messaging, payment, hosting, mapping, or analytics providers are used, sharing is limited to what is necessary to provide the relevant service and is subject to applicable security and transfer requirements.

9. Retention

Eb3at does not retain personal data indefinitely without a legitimate purpose. Retention is linked to the purpose, operational needs, and applicable legal or accounting obligations, followed by secure deletion, masking, or archiving as appropriate.

10. User Rights and Privacy Requests

Subject to applicable law, users may request access, correction, updating, deletion, withdrawal of consent, objection, or restriction of processing. Such rights remain subject to lawful exceptions and obligations that may require continued retention of certain records.

11. Information Security

Eb3at applies technical and organizational measures including access control, session protection, CSRF protection, secure password hashing, rate limiting, protected document handling, audit logging, and data minimization for public views.

12. Cookies

The platform may use cookies necessary for sessions and security and may enable additional analytics or marketing technologies only with appropriate disclosure and configuration.

13. Changes

This Policy may be updated when the service or legal requirements change. Where required, users may be asked to provide fresh consent to a new version, and the relevant policy version and consent record will be retained.

14. Contact

For privacy matters: [privacy@domain] or [Privacy Contact Method].

15. Governing Law

This Policy is intended to be reviewed and interpreted consistently with applicable Egyptian laws relating to data protection, communications, commerce, and consumer protection, taking into account the company’s final legal form and actual activities.