Egress

Privacy Policy

Last Updated: 24.February 2026

  1. Data Controller

Egress International Freight
6 Road #9 (B), Maadi, Cairo 11431, Egypt
Email: Info@Egress-eg.com
Phone: +202 2359 6105[3]

For data protection inquiries: privacy@egress-eg.com

  1. Scope

This Privacy Policy explains how Egress International Freight (“Egress”, “we”, “us”) collects, uses, stores, and protects personal data in connection with: (a) the use of this website (egress.webmeh.com); and (b) the provision of freight forwarding, logistics, customs brokerage, relocation, and related services.

This policy applies to all individuals whose personal data Egress processes, including website visitors, clients, consignees, shippers, customs contacts, and relocation customers.

  1. Legal Framework

Egress processes personal data in compliance with:

  • Egypt PDPL (Personal Data Protection Law No. 151/2020) — the primary data protection law governing data processing in Egypt[17][6]
  • EU GDPR (Regulation 2016/679) — applicable when processing personal data of individuals located in the European Union, given that Egress actively offers services to EU-based clients[5][7]
  • Applicable international transport conventions that may require specific data handling for cargo documentation
  1. Personal Data We Collect

4.1 Website Usage Data (Automatic Collection)

  • IP address (anonymized where technically feasible)
  • Browser type and version, operating system
  • Pages visited, time spent, referral source
  • Device type and screen resolution
  • Cookie identifiers (see Cookie Policy)

4.2 Quote Requests and Inquiries

  • Full name and company name
  • Email address and phone number
  • Cargo details (description, dimensions, weight, value)
  • Origin and destination information
  • Preferred service type and timeline

4.3 Freight Forwarding and Logistics Services

  • Shipper and consignee names, addresses, contact details
  • Passport or national ID numbers (for customs declarations)
  • Tax identification numbers / VAT registration numbers
  • Commercial invoices, packing lists, certificates of origin
  • Bills of lading, airway bills, and related transport documents
  • Customs declarations and ACID/NAFEZA registration data[13][12]
  • Bank account or payment details

4.4 Moving and Relocation Services

  • Full personal or family details
  • Current and destination addresses
  • Passport copies, visa documentation
  • Household inventory lists
  • Special handling instructions (medical equipment, valuables)
  • Diplomatic credentials (where applicable)

4.5 Communication Data

  • Email correspondence content
  • Phone call records (date, time, duration — content is not recorded)
  • Chat or form submission content
  1. Purposes and Legal Basis for Processing

Purpose

Data Categories

Legal Basis (PDPL / GDPR)

Responding to quote requests

4.2

Consent / Pre-contractual measures

Performing freight forwarding services

4.3, 4.5

Contract performance

Customs clearance and regulatory compliance

4.3

Legal obligation (Egyptian customs law, NAFEZA)[12]

Moving and relocation services

4.4, 4.5

Contract performance

Invoicing and payment processing

4.3, 4.4

Contract performance / Legal obligation

Website operation and security

4.1

Legitimate interest

Website analytics and improvement

4.1 (via cookies)

Consent

Marketing communications

4.2

Consent (opt-in)

Compliance with legal obligations

All categories

Legal obligation

Establishing or defending legal claims

All categories

Legitimate interest

 

  1. Data Sharing and Third-Party Recipients

Egress may share personal data with the following categories of recipients, strictly on a need-to-know basis:

  • Carriers and transport operators (airlines, shipping lines, trucking companies) — for cargo transport
  • Customs authorities (Egyptian Customs Authority via NAFEZA, foreign customs authorities) — as required by law
  • Port and airport authorities — for cargo handling and security clearance
  • Insurance companies — when cargo insurance is requested by the Client
  • Sub-contractors and agents — warehousing, packing, local delivery partners
  • Financial institutions — for payment processing
  • IT service providers — website hosting, email services, CRM systems
  • Legal and professional advisors — when required for dispute resolution or compliance
  • Government authorities — when required by law, regulation, or court order

Egress does not sell personal data to third parties for marketing purposes.

  1. International Data Transfers

Given the international nature of freight forwarding, personal data may be transferred to countries outside Egypt, including EU/EEA member states, the USA, and countries in Asia and Africa.

  • Transfers to the EU/EEA: Subject to GDPR safeguards including Standard Contractual Clauses (SCCs) where required
  • Transfers from the EU to Egypt: Egypt does not currently hold an EU adequacy decision; Egress relies on SCCs or explicit consent for such transfers
  • Transfers required by transport documentation: Sharing data with carriers, customs authorities, and consignees in destination countries is necessary for contract performance
  • Under Egypt PDPL: Cross-border data transfers require prior approval from the Egyptian Personal Data Protection Center (EDPC) or the explicit consent of the data subject, unless an exception applies
  1. Data Retention

Data Category

Retention Period

Basis

Website analytics

26 months

Industry standard

Quote requests (no contract)

2 years

Legitimate interest

Freight/logistics service records

10 years

Egyptian Commercial Code (Art. 21)

Customs declarations and transport documents

10 years

Egyptian Customs Law; tax law

Moving/relocation records

7 years

Contractual and insurance purposes

Invoices and payment records

10 years

Egyptian tax retention obligations

Marketing consent records

Until withdrawal + 1 year

PDPL/GDPR compliance

Communication records

5 years

Business practice and dispute resolution

 

After the retention period, data is securely deleted or irreversibly anonymized.

  1. Data Security

Egress implements technical and organizational measures to protect personal data, including:

  • SSL/TLS encryption for all website traffic
  • Access controls with role-based permissions
  • Encrypted storage for sensitive documents
  • Regular security assessments of IT infrastructure
  • Confidentiality agreements for all employees with access to personal data
  • Physical security at office and warehouse locations (24/7 surveillance, access control)
  • Incident response procedures for data breaches

In the event of a personal data breach, Egress will notify the Egyptian Personal Data Protection Center (EDPC) within 72 hours and affected data subjects without undue delay, as required by the PDPL. For EU data subjects, notification will also comply with GDPR Article 33/34 requirements.[17]

  1. Your Rights

Under the Egypt PDPL and (where applicable) the EU GDPR, you have the following rights:[6][7]

  • Access: Request information about what personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (subject to legal retention obligations)
  • Restriction: Request limitation of processing in certain circumstances
  • Data Portability: Receive your personal data in a structured, machine-readable format (GDPR)
  • Objection: Object to processing based on legitimate interest (GDPR) or withdraw consent
  • Withdrawal of Consent: Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing
  • Complaint: Lodge a complaint with the Egyptian Personal Data Protection Center (EDPC) or, for EU residents, with your national data protection supervisory authority

To exercise your rights, contact: privacy@egress-eg.com

Egress will respond to rights requests within thirty (30) calendar days. Identity verification may be required.

  1. Children’s Privacy

The Services are not directed at individuals under the age of 18. Egress does not knowingly collect personal data from minors. If such data is identified, it will be promptly deleted.

  1. Updates to This Policy

This Privacy Policy may be updated to reflect changes in legislation, business operations, or data processing practices. Material changes will be communicated via website notice or email to active clients. The current version is always available at www.Egress-eg.com/privacy-policy.