GDPR Compliance Statement
Effective Date: May 7, 2025
O-Nile (“we”, “us”, “our”) is committed to protecting the personal data of residents of the European Economic Area (“EEA”) in accordance with the EU General Data Protection Regulation (GDPR). This GDPR Compliance Statement describes how we collect, process, store, and safeguard your personal data and outlines your rights under the GDPR.
1. Data Controller
O-Nile
Nasr City, Cairo, Egypt
Email: info@o-nile.com
We determine the purposes and means of processing your personal data and are responsible for compliance with the GDPR.
2. Lawful Basis for Processing
We process your personal data only when we have a valid legal basis, including:
-
Performance of a contract: to provide services you’ve requested (account management, order processing).
-
Legal obligation: to comply with applicable laws (e.g., tax, anti-fraud).
-
Legitimate interests: to improve our Site, prevent abuse, secure our systems—balanced against your rights.
-
Consent: for marketing communications, analytics, and cookies beyond strictly necessary (you may withdraw consent at any time).
3. Categories of Personal Data
-
Identity Data: name, title
-
Contact Data: email address, postal address, phone number
-
Technical & Usage Data: IP address, browser type/version, device identifiers, pages viewed, timestamps
-
Marketing & Communications Data: preferences, consents, feedback
4. Purpose of Processing
We use your personal data to:
-
Deliver our Website, products, and services you request
-
Communicate with you (support queries, transactional messages, marketing pitches—if opted in)
-
Personalize content and offers
-
Maintain security, detect and prevent fraud or abuse
-
Meet legal and regulatory obligations
5. Data Retention
We retain your personal data only as long as necessary for the purposes outlined above, or as required by law. Thereafter, we securely delete or anonymize it.
6. Data Transfers Outside the EEA
Your data may be transferred to and processed in countries outside the EEA. Whenever we do so, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses adopted by the European Commission) to protect your rights.
7. Your Rights Under GDPR
As an EU data subject, you have the right to:
-
Access: obtain confirmation of whether we process your data and request a copy.
-
Rectification: correct inaccurate or incomplete data.
-
Erasure (“Right to be Forgotten”): delete data when there’s no lawful reason to retain it.
-
Restriction of Processing: “block” processing in certain circumstances.
-
Data Portability: receive your data in a structured, commonly used, machine-readable format.
-
Object: to processing based on legitimate interests or direct marketing.
-
Withdraw Consent: at any time for processing based on consent (without affecting processing prior to withdrawal).
To exercise any of these rights, please contact us at privacy@o-nile.com. We will respond within one month, or longer if justified by complexity.
8. Right to Lodge a Complaint
If you believe our processing violates the GDPR, you have the right to file a complaint with an EU supervisory authority in your country of residence.
9. Security Measures
We implement appropriate technical and organizational measures—such as encryption, access controls, and regular audits—to protect your data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
10. Changes to This Statement
We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. Any revisions will be posted here with a new effective date.