Privacy Policy & Data Processing Notice
Last Updated: September 2026 · Governing Territory: Arab Republic of Egypt · Egyptian Law No. 151 of 2020 on the Protection of Personal Data (PDPL)
Legal Statement & Data Controller Identity
This Privacy Policy governs the collection, storage, transmission, and processing of personal and vehicle data by BAMADORI Automotive Interior Craftsmanship (“BAMADORI”, “we”, “our”, or “us”), registered and operating in Cairo, Arab Republic of Egypt. We are committed to uncompromised digital transparency and safeguarding consumer privacy in full adherence to Egyptian Personal Data Protection Law No. 151 of 2020.
1. Explicit Categories of Personal Data Collected
BAMADORI limits personal data collection strictly to information essential for manufacturing precision-tailored automotive seat covers, scheduling workshop bay appointments, and executing financial audits:
Full legal name, authenticated email address, and encrypted account credentials (hashed passwords via Argon2/bcrypt).
Local mobile telephone number (010, 011, 012, 015 series) utilized strictly for workshop arrival reminders, bay readiness notifications, and WhatsApp coordination.
Automotive Make, Model, Model Year, Exterior Body Paint Color, and Egyptian License Plate Number (Arabic letter/digit combinations or alphanumeric). Plate numbers are required at workshop intake check-in to prevent vehicle misallocation and vehicle theft.
Seat cushion, backrest, headrest, bolster, and seam stitching hex color codes, fabric/leather material types, and subdivision parameters.
Transaction confirmation screenshots originating from the Central Bank of Egypt's National Instant Payment Network (Instapay) showing transaction reference numbers, transfer dates, and transfer amounts. Note: BAMADORI never solicits, collects, stores, or processes raw bank account passwords, CVV numbers, or credit card primary account numbers (PAN).
2. Hosting Infrastructure & Database Processors (Vercel & Supabase)
To maintain the highest tier of performance, availability, and cryptographic security, our platform is engineered using modern, dedicated cloud infrastructure providers:
Our web application is hosted and globally distributed by Vercel Inc. (San Francisco, CA, USA). Vercel provides high-speed Edge Network routing, serverless compute execution, automated DDoS mitigation, and mandatory Transport Layer Security (TLS 1.3) cryptographic encapsulation for all inbound and outbound traffic. Server logs collected by Vercel include anonymized IP addresses, HTTP headers, and system telemetry strictly for latency optimization and threat detection.
Customer profiles, vehicle fitment configurations, appointment bookings, and payment audit logs are persisted by Supabase Inc. (Singapore / USA). Data is stored within managed, enterprise-grade PostgreSQL relational databases secured with automated daily encrypted snapshots. We strictly implement Row Level Security (RLS) policies within Postgres, mathematically guaranteeing that a client can only access their own user records. Instapay screenshots are uploaded to private, non-public Supabase Storage buckets restricted to verified administrative credentials.
3. Lawful Basis & Specific Purposes of Processing
Under Egyptian Law No. 151/2020, BAMADORI processes your data solely under lawful grounds:
- Contractual Performance: Creating tailored CAD cutting files matching your vehicle seats, reserving dedicated workshop bay time, and assigning master upholsterers to execute the installation.
- Statutory & Tax Compliance: Maintaining commercial sales ledgers, transaction proof, and value-added tax (VAT) accounting records mandated by Egyptian corporate and fiscal regulations.
- Operational Coordination & Logistics: Transmitting automated appointment confirmations, cancellation eligibility notifications, and post-installation follow-up via WhatsApp or telephone.
- Workshop Security & Fraud Prevention: Matching vehicle license plates upon physical entry into our facility to verify ownership and eliminate warranty fraud or unauthorized vehicle intake.
4. Mandatory 18+ Age Checkup & Protection of Minors
Strict Age Requirement: 18 Years or Older
BAMADORI services, custom manufacturing contracts, and workshop bay reservations are exclusively intended for adult consumers aged eighteen (18) years or older who possess full legal contractual capacity under the Egyptian Civil Code.
We implement an affirmative age verification checkpoint during user registration. Minors under the age of 18 are strictly prohibited from creating accounts, submitting vehicle data, or uploading payment receipts. If BAMADORI discovers or is alerted that personal data of an individual under 18 has been submitted without verifiable guardian consent, we will immediately delete the account and purge all associated records from our database.
5. Data Retention & Archival Schedules
We do not retain personal data longer than necessary for the purposes for which it was gathered:
- Active Account Profiles: Retained for the active lifespan of your account until you initiate deletion via our self-service Profile Delete feature.
- Instapay Payment Screenshots: Retained in private encrypted cloud storage for up to 36 months following completion of service to satisfy statutory tax audit requirements, after which the files are permanently expunged.
- Vehicle Installation Specifications: Retained for 5 years to support repeat fitments, warranty claims, and historical craft records.
6. User Rights & One-Click Account Deletion (“Right to Erasure”)
Pursuant to Articles 12 and 13 of Egyptian Law No. 151/2020, you hold unambiguous legal rights over your personal data:
Inspect all vehicle configurations and orders associated with your profile.
Update or correct inaccurate contact telephone numbers or car specifications.
You can permanently delete your account at any time without submitting a support ticket. Simply navigate to your Profile (“الملف الشخصي”) and click the “Delete Account” button. Our system immediately invokes an administrative purge routine that strips your personal identification, purges saved 3D configurations, and wipes authentication credentials across Supabase.
7. Zero Commercial Data Sale Warranty
BAMADORI does not sell, lease, rent, broker, trade, or monetize your personal or vehicle data to any third-party advertisers, data brokers, or marketing syndicates under any circumstances. Data disclosures are strictly limited to infrastructure providers (Vercel Inc. and Supabase Inc.) bound by strict contractual data processing agreements, and official Egyptian law enforcement authorities upon receipt of a legally binding court order.
8. Contacting Our Data Protection Officer
For formal privacy inquiries, statutory data requests, or legal notices under Egyptian Law No. 151/2020, you may directly reach our Data Protection Officer:
Organization: BAMADORI Automotive Upholstery & Craftsmanship
Headquarters: Cairo, Arab Republic of Egypt
Privacy Inquiries Email: privacy@bamadori.com
Hotline & WhatsApp Support: +20 121 148 7856
Customer Service Bay Hours: Sunday – Thursday, 10:00 AM – 6:00 PM (Cairo Time)