Privacy Policy

This policy explains what personal data we collect when you use asliplus.com, why we collect it, who we share it with, how long we keep it, and what rights you have under Egyptian Personal Data Protection Law No. 151 of 2020, along with how to exercise them.

We have written it as plainly as we can. If anything here is unclear, contact us and we will explain it.

Who is responsible for your data

The controller of your personal data is Asliplus.

• Tax Registration: 771-425-562
• Privacy and data protection contact: support@asliplus.com

What data we collect

• Phone number — your primary identifier with us. We use it for one-time-code (OTP) login, to link your orders together, and to contact you about an order.
• Name and delivery details — name, address, governorate, and any delivery notes you write.
• Order history — the products you ordered, quantities, amounts, order and shipment status, and any return or refund.
• Payment status only — the payment method and the outcome: succeeded or failed. We do not collect or store your card number (details in the next section).
• Device and usage data — browser and device type, IP address, and the pages you viewed in the store, for operations, security, and service improvement.
• Support messages — the questions or complaints you send us, and any photos you attach when requesting a return or reporting a damaged or incorrect item.
• Reviews — what you publish about products, which appears publicly on the product page.
• Communication preferences and consent records — whether you accepted or declined marketing messages, and the date of each consent or withdrawal.

We collect the minimum genuinely needed to complete and service your order. If you check out as a guest without creating an account, we still need your phone number and address to deliver the order and issue the tax receipt.

Why we collect it (lawful basis)

Marketing messages and non-essential cookies are the only things that require your consent. Service messages — the login code, order confirmation, and shipment updates — are not marketing: they continue because they are part of fulfilling the contract and protecting your account, even if you withdraw marketing consent.

Your card details never reach us

When you pay by card, you are taken to a payment page hosted by our payment provider (Paymob). You enter your card details directly on that page, and they never pass through our servers at any point.

We do not see or store your card number, its expiry date, or its security code (CVV). What we keep is a payment token issued by the provider, plus the outcome of the transaction: succeeded or failed, and the amount.

If you choose Cash on Delivery, there are no card details at all. You pay the courier in cash, including the Cash on Delivery service fee (currently 15 EGP), and every detail is shown to you before you confirm the order.

Who we share it with

We share the minimum necessary with the following parties, and only for the service we contract them to perform:

• The courier — name, phone number, delivery address, and the amount to collect, in order to deliver your order and collect payment on Cash on Delivery.
• The payment provider — to process card payments through its hosted page.
• Messaging providers — WhatsApp, SMS and email, to send your login code and order updates, and marketing messages if you have consented.
• The Egyptian Tax Authority — the invoice data required to issue the mandated electronic receipt for every order.
• Hosting and infrastructure providers — to run the store, store and protect data, and monitor faults.
• Authorities — where we are under a legal obligation or a judicial order.

We do not sell, rent, or trade your data. None of these parties is permitted to use your data for their own marketing or for any purpose beyond what we contract them to do.

Transfers outside Egypt

Some of the providers we rely on — including hosting, messaging, and analytics providers — process data on servers outside the Arab Republic of Egypt.

We state this plainly because you have a right to know. In those cases we transfer the minimum data required, under appropriate contractual and technical safeguards that oblige the provider to protect the data and not use it for any other purpose, in line with the requirements of the Personal Data Protection Law. Your consent to cross-border transfer is recorded in your consent record.

How we protect your data

• Traffic to the store is fully encrypted.
• Access to customer data is restricted to authorised staff by role, not open to everyone.
• Every change affecting your data or your order is written to a tamper-evident audit log.
• Card details never reach our servers in the first place, so they cannot leak from them.

Retention

• Order and tax records: 10 years. A legal obligation under Egyptian Tax Authority retention rules.
• Dispute and complaint evidence: 180 days from the closure of the dispute.
• Marketing consent: until you withdraw it. We then keep a record of the withdrawal itself, as proof that we honoured it.
• Account data and preferences: for as long as the account exists, then deleted or anonymised so it is no longer attributable to you once an erasure request is carried out, except for what we are legally required to keep.
• Usage and analytics data: for a limited period and in aggregated form that is not attributed to you.

Your rights

The Personal Data Protection Law gives you the following rights:

• Access — know what data we hold about you and obtain a copy of it.
• Rectification — correct any inaccurate or incomplete data.
• Erasure — request deletion of your data, to the extent the law permits.
• Objection — object to specific processing of your data and ask us to stop it, to the extent the law permits.
• Withdraw consent — stop marketing messages or non-essential cookies at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Portability — receive your data in a structured, machine-readable format.

How to exercise them

Email support@asliplus.com stating which right you wish to exercise. We may ask you to verify your identity first — usually a code we send to your registered phone number — to protect your account against a fraudulent request.

Exercising any of these rights is free of charge.

We aim to complete your request within 7 days, and within 30 days at the outside, which is the legal maximum. If we need longer within that limit, we will tell you and explain why.

You can also withdraw marketing consent directly from the notification settings in your account, or by using the opt-out option included in the message where one is provided, without contacting us.

The limits of erasure — stated honestly

An erasure request does not extend to records the law requires us to keep. Specifically: order and tax records are retained for 10 years to meet our obligations to the Egyptian Tax Authority, even after an erasure request is carried out. The same applies to evidence in an open dispute, until its retention period ends.

Everything else is deleted, or anonymised so it is no longer attributable to you.

Cookies and analytics

We use two kinds of cookies:

• Essential — to run login, keep your cart, and protect the store from abuse. The site does not work without them, and they do not require your consent.
• Non-essential — for analytics, performance measurement, and marketing. These are only set with your prior consent, and you can withdraw that consent at any time from the consent settings in the store.

If you decline, the store still works fully: browsing, buying, and returns all remain available.

Children

We sell childcare products, but the store is directed at adults only. We do not target content at children and do not knowingly collect their data. Accounts and orders must be in the name of an adult.

If a child's data reaches us unintentionally, email support@asliplus.com and we will delete it.

Changes to this policy

Each of our policies is versioned, and we record every consent you give against the version in force at that time. This covers the privacy policy, terms and conditions, marketing, cookies, and cross-border transfer.

When we make a material change we publish the updated version on this page and notify you, and we ask for fresh consent where the change requires it. We will not use your data for a new purpose that requires your consent without asking you first.

Complaints

If you are unhappy with how we handle your data, contact us first at support@asliplus.com and we will review the matter and respond.

You also have the right, at any time, to lodge a complaint with the competent personal data protection authority in Egypt under Law No. 151 of 2020.

Related pages

• Terms and Conditions
• Returns and Refund Policy
• Contact Us