Privacy & Data Protection Policy

Section 1: Data Controller & Scope of Application

This Policy establishes the statutory and procedural basis upon which Nozherha Hona ("the Store" or "Data Controller") collects, processes, and maintains User personal data through the official domain nozherha.com, in compliance with Egyptian Personal Data Protection Law No. 151 of 2020 and recognized electronic commerce privacy standards.

Section 2: Categories of Personal Data Collected

Collection of personal data is limited to the minimum necessary for storefront operation and identity authentication, categorized as follows:

• Authentication & Profile Credentials (via Clerk): Includes registered display name, email address, and avatar transmitted through authenticated single-sign-on providers when registering or authoring a product review.
• Cart & Order Data: Items selected, total amounts in EGP, customer notes, and a cryptographically generated access token (AccessToken) used solely to query order status.
• Customer Review Attachments: Any images voluntarily uploaded by the Customer as part of product reviews; hosted directly on Cloudinary's secure cloud delivery network.
• Operational Technical Data: Internet Protocol (IP) address, user-agent string, and stored language preference identifier (NEXT_LOCALE).

Section 3: Complete Exclusion of Financial & Payment Data

The Store explicitly disclaims the collection, processing, or storage of sensitive financial credentials, credit/debit card numbers, or security codes (CVV/PIN) on the servers of nozherha.com. Order confirmation and settlement options (Cash on Delivery, InstaPay, or mobile banking wallets) are finalized independently between the parties through designated direct communication applications (WhatsApp or messaging services).

Section 4: Authorized Third-Party Service Processors

The Store guarantees that no personal data is sold, rented, or commercialized with third-party advertising brokers. Data transmission is strictly confined to the following essential infrastructure processors:

• Clerk Inc.: Identity verification and session management service.
• Cloudinary Ltd.: Cloud-based asset hosting for product and customer review imagery.
• Neon & Vercel Inc.: Serverless database infrastructure and encrypted application hosting.
• Meta Platforms, Inc. (WhatsApp, Messenger, Instagram): External messaging platforms initiated voluntarily by the Customer during checkout; communications therein are governed by Meta's respective privacy and encryption policies.
• Licensed Logistics Carriers: Provided strictly with recipient name, delivery address, and telephone number solely for physical order fulfillment.

Section 5: Cookies & Local Storage Technologies

The website uses only essential and functional cookies, avoiding invasive cross-site tracking technologies:

Section 6: Security Measures & Data Retention

• All communication between client browsers and our servers is secured via mandatory HTTPS (SSL/TLS) encryption.
• Account records and fulfilled transaction summaries are retained for statutory record-keeping periods or until the Customer requests account deletion.

Section 7: Statutory Rights of the Data Subject

Under Article (2) of Egyptian Data Protection Law No. 151 of 2020, the Customer possesses the following statutory rights:

• The right to access and inspect personal data held by the Store.
• The right to rectify, update, or complete inaccurate personal information.
• The right to erasure (deletion) of his/her account, review records, or stored data.

Section 8: Policy Amendments

The Store reserves the right to update this Policy to reflect technical or statutory developments. Amendments take effect upon publication of the updated document and effective date at the top of this page.