Privacy Policy

The data controller responsible for your personal data is Opal General Contracting Company, registered at 9 Moez Al Dawla, Al Mintaqah as Sādisah, Nasr City, Cairo Governorate.

For any privacy question, to exercise your rights, or to contact our Data Protection Officer, write to privacy@opalconst.com or call +20 2 2274 3470.

• Contact data you submit through forms: name, email, phone number, company, project details.
• Technical data collected automatically: IP address, browser type, device identifiers, referring URL, pages viewed, timestamps.
• Cookie and consent data: categories accepted or rejected, timestamp of your choice, policy version.
• Correspondence: the content of emails, messages, and call records you voluntarily send us.

We do not knowingly collect special categories of data (health, biometrics, political opinions) or data from children under 16.

• Respond to enquiries and deliver services — performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)).
• Operate and secure the website — legitimate interests in site security and abuse prevention (GDPR Art. 6(1)(f)).
• Analytics and performance measurement — consent (GDPR Art. 6(1)(a); ePrivacy Directive Art. 5(3)).
• Marketing communications — consent, revocable at any time.
• Comply with legal obligations — tax, accounting, and regulatory record-keeping (GDPR Art. 6(1)(c)).

We keep personal data only as long as needed for the purpose it was collected or as required by law:

• Enquiry and sales records — up to 24 months after last contact.
• Contractual and accounting records — up to 10 years (Egyptian Commercial Code) or the applicable statutory period.
• Server logs and security events — up to 12 months.
• Cookie consent records — up to 12 months from the decision.

We share personal data with the minimum number of recipients needed to run the service:

• Service providers acting as processors: hosting (Google Firebase), analytics (Google Analytics), email delivery, customer-support tooling. Each is bound by a written data-processing agreement.
• Group companies within the Opal Group on a need-to-know basis for the purposes listed above.
• Authorities where disclosure is required by law, court order, or to protect rights, property, or safety.

We do not sell personal data in the sense of the CCPA/CPRA and we do not share it for cross-context behavioural advertising without explicit consent.

Some of our processors operate outside your country of residence, including in the United States and the European Union. Where data leaves the EEA, UK, KSA, UAE, or Egypt, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other legally approved transfer mechanisms, together with supplementary measures where needed (encryption in transit and at rest, access controls, pseudonymisation).

Depending on where you live, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify data that is inaccurate or incomplete.
• Request erasure ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time without affecting prior lawful processing.
• Opt out of the "sale" or "sharing" of personal information and of targeted advertising (CCPA/CPRA).
• Not be subject to automated decisions that produce legal or similarly significant effects.
• Lodge a complaint with a supervisory authority — in the EU with your local DPA, in the UK with the ICO, in KSA with SDAIA, in the UAE with the UAE Data Office, or in Egypt with the Personal Data Protection Center.

To exercise a right, email privacy@opalconst.com. We respond within 30 days (GDPR) or 45 days (CCPA), extendable once where justified.

We apply technical and organisational measures appropriate to the risk, including TLS in transit, encryption at rest for sensitive data, least-privilege access, audit logging, staff confidentiality obligations, and periodic security reviews. No online transmission is perfectly secure — if you believe your data has been compromised, contact us immediately.

The website is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Policy to reflect legal, technical, or business changes. Material changes will be highlighted on this page and, where required, notified to you. The "last updated" date at the top indicates when it was last revised.

Opal General Contracting Company
9 Moez Al Dawla, Al Mintaqah as Sādisah, Nasr City, Cairo Governorate
Email: privacy@opalconst.com
Telephone: +20 2 2274 3470