Privacy Notice
Effective date: 1 January 2026
This notice explains how ItQan – Advocates & Legal Consultants (the “Firm”) collects, uses and protects your personal data through itqanlaw.com, and your rights under Egypt’s Personal Data Protection Law No. 151 of 2020 and its Executive Regulations. It applies to website visitors and people who contact us through it; client files are governed by the engagement terms and our professional duty of confidentiality.
Summary of key points
| Topic | Summary |
|---|---|
| Who is responsible | The Firm is the controller. The Managing Partner handles your requests (Section 1). |
| What we collect | Contact details you give us, and website usage data through cookies after you consent (Sections 3 and 5). |
| Why | To answer your enquiries, send legal content if you subscribe, and improve the website and measure advertising (Section 4). |
| Cookies | Necessary cookies only without consent; analytics and advertising cookies after you accept, and you can reject just as easily (Section 5). |
| Sharing and transfers | We do not sell your data. We share it with technical service providers, and some may be processed on servers outside Egypt (Sections 6 and 7). |
| Your rights | Nine rights, including access, correction, erasure, objection and withdrawal of consent, and the right to complain to the Personal Data Protection Centre (Sections 12 and 13). |
1.Who is responsible for your data
The controller of data collected through this website is ItQan – Advocates & Legal Consultants. Managing Partner Mahmoud Atef Abdelsalam is responsible for personal data protection at the Firm and handles your requests.
Address: 72 Gameat El Dowal El Arabia Street, Mohandessin, Giza, Egypt
Egyptian Bar Association registration no.: 584518
Email: Info@itqanlaw.com
WhatsApp: +20 105 050 3390
2.Plain-language definitions
- Personal data: any data relating to an identified or identifiable natural person, such as name, phone number and email address.
- Processing: any operation on data, such as collecting, storing, using, disclosing or deleting it.
- Controller: the party that decides the purposes and means of processing, which is the Firm in this notice.
3.What data we collect and where it comes from
- From you directly: name, email, phone number and the content of your message when you complete a contact form, download a guide or write to us, and what you write in a WhatsApp conversation when you click our contact buttons.
- Automatically from your device: website usage data (pages viewed, device type, approximate country) through cookies, and your IP address and basic technical data for website security.
We do not collect sensitive data (such as health or religious data) or children’s data through the website, and ask you not to send it in contact forms. If your matter requires such data, we will request it by appropriate means and with your written consent.
4.How we use your data and the legal basis for each use
We do not use your data for any purpose other than the one disclosed when we collect it.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your enquiry and preparing a service proposal | Contact details and message content | Steps taken at your request before a contract, and our legitimate interest in answering correspondence | As long as needed to handle the enquiry; if it becomes an engagement, client file retention rules apply |
| Sending a guide, legal content and service offers | Email and name | Your explicit consent, which you can withdraw at any time | Until you withdraw consent, and no longer than ten years |
| Communicating through WhatsApp | WhatsApp conversation | Your own request to contact us | Per WhatsApp’s policy; we keep what is needed to follow up your request |
| Improving the website and measuring advertising | Usage data through cookies | Your explicit consent through the cookie banner | Per the cookie table in the next section |
| Website security and preventing spam and fraud | IP address and technical data | Our legitimate interest in protecting the website | A short period, per the hosting provider’s security logs |
5.Cookies and analytics tools
When you first visit, a cookie banner lets you accept analytics and advertising cookies or reject them just as easily. Before you choose, these tools do not run in full data-collection mode. We keep your choice for 180 days and then ask again, and you can change it at any time with the “Cookie settings” button at the bottom of the page.
| Category | Tool and purpose | Consent needed? |
|---|---|---|
| Necessary | Remembering your cookie choice and chosen language; form spam protection | No |
| Analytics | Google Analytics 4 (through Google Site Kit): aggregated statistics about website use | Yes |
| Advertising | Google Ads: measuring campaign results and conversions | Yes |
6.Who receives your data
We do not sell your data. We share it only with technical service providers working on our behalf for hosting, email, analytics and advertising (including Hostinger, Google and Meta through WhatsApp), limited to what the service requires. We also disclose data to competent authorities where the law requires.
7.Transfers outside Egypt
Some of your data may be processed on service providers’ servers outside Egypt. We follow the cross-border transfer rules of the Law and its Regulations and rely on your explicit consent for analytics and advertising.
8.How long we keep your data
We keep your data only as long as needed for the purpose it was collected for, as set out in the table in Section 4, and then delete or anonymise it unless the law or our professional duties require us to keep it.
9.Automated decisions and profiling
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you, and we do not build profiles about you for that purpose. Analytics tools use your data to produce aggregated statistics about the website, after you consent.
10.Are you required to provide your data?
Providing contact details is optional, but without them we cannot answer your enquiry or send you a guide. Rejecting analytics and advertising cookies does not stop you from using the website.
11.Data security and breach notification
We apply suitable technical and organisational measures, including restricted access and encryption of the website. If a data breach occurs, we will notify the Personal Data Protection Centre within 72 hours and the affected persons within three working days of notifying the Centre, under Article 7 of the Law.
12.Your rights
Law No. 151 of 2020 gives you the rights below. Write to us by email or WhatsApp with your name and the right you wish to exercise:
- To know what data we hold about you and how it is processed.
- To access your data and obtain a copy.
- To correct inaccurate data or complete it.
- To erase your data once the purpose of processing has ended.
- To withdraw consent at any time, without affecting earlier lawful processing.
- To restrict processing in the cases the law provides.
- To object to processing, including direct marketing.
- To have your data transferred to another party where the conditions apply.
- To be told of any breach of your data that puts you at risk.
We verify your identity before acting on a request, to protect your data, and reply within the periods set by law.
13.Right to complain
If you believe your rights were not respected, you can contact us first so we can address it, and you may complain to the Personal Data Protection Centre in Egypt.
14.Children
This website is aimed at companies and adults. We do not knowingly collect children’s data, and will delete it if we learn of it.
15.Updates to this notice
We may update this notice when our practices or legal requirements change, and will post the updated version on this page.
For any question about your data or to exercise a right, write to us with your name and the right you wish to exercise.
This notice is based on Law No. 151 of 2020, its Executive Regulations (Ministerial Decision No. 816 of 2025) and Personal Data Protection Centre guidance, and gives general information about the Firm’s practices in protecting website visitors’ data.
