Home
Privacy policy

Privacy policy

PRIVACY POLICY

EFFECTIVE MAY 2026

This Privacy Policy explains how STENG Jeans collects, uses, shares, and protects the personal data of visitors and customers of stengeg.com, in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020.

Your privacy is not a procedural item for us — it is a prior commitment. We collect the minimum data necessary to provide a safe shopping experience, and we do not sell your data to any party.

SCOPE AND DATA CONTROLLER

This Policy applies to all interactions with STENG Jeans (referred to as "STENG" or "we"), through:

  • The online store stengeg.com and all its subpages.
  • Payment and shipping operations completing any online order.
  • Customer service channels (WhatsApp, email, and the contact form).
  • Promotional campaigns and newsletters issued by us.

The Data Controller is STENG Jeans, a company registered in the Arab Republic of Egypt under commercial register number 619092289. For any matter related to personal data, please use the channels listed at the end of this Policy.

DATA WE COLLECT

We collect the following categories of data:

  • Identifying information. First and last name, email address, mobile number, and optionally date of birth.
  • Order and shipping information. Shipping address, governorate, region, product details, payment method, and order date.
  • Payment information. Order amount, payment method, and transaction status. We do not store full card details (PAN) on our servers — payments are processed directly through PCI-DSS compliant gateways.
  • Account information. If you create a customer account: your preferences, wishlist, and order history.
  • Technical information. IP address, browser type and operating system, device type, language, time zone, pages visited within the site, and visit duration.
  • Communication content. Messages you send us via WhatsApp, email, contact forms, or Shopify Inbox.

Data minimization. We do not request or collect any data beyond what is necessary to fulfill your order or improve your experience. Fields marked optional may be left blank without affecting order completion.

HOW WE COLLECT DATA

  • Directly from you. When you register, complete an order, subscribe to the newsletter, or contact us.
  • Automatically while browsing. Through cookies and similar tracking technologies (details below).
  • From payment gateways. Transaction status (success/failure/refund) only — no full card data.
  • From the shipping carrier. Shipment status, delivery attempts, and proof of receipt.
  • From advertising platforms. Non-personal performance data (impressions, clicks, conversions) when you interact with our ads.

THIRD-PARTY SERVICES

We rely on specialized service providers to operate the store, measure performance, and manage communications. Each provider has its own privacy policy that we comply with in parallel:

  • Shopify. Store platform, database, checkout, order and inventory management. Receives all order, account, and browsing data.
  • Shopify Inbox. On-site chat for customer enquiries. Receives chat content, name, and email.
  • Google Analytics 4. Measures visitor traffic, browsing behavior, and page performance. Receives aggregated, mostly anonymized technical data.
  • Meta (Facebook) Pixel. Measures ad performance on Facebook and Instagram and serves more relevant ads. Receives browsing and purchase events plus browser identifier.
  • TikTok Pixel. Measures TikTok ad performance and improves targeting. Receives browsing and purchase events plus browser identifier.
  • Klaviyo. Manages newsletters, SMS campaigns, and automated marketing (abandoned cart, etc.). Receives name, email, mobile number, and purchase behavior.
  • Paymob. Processes card payments (Visa/Mastercard) and digital wallets. Receives order amount and transaction status only — no card data.
  • Fawry. Processes payments via Fawry outlets and digital wallet. Receives order amount, reference number, and transaction status.
  • valU. Installment service. Receives order amount and approval status (customer is verified by valU directly).
  • Premium Card. Installment service. Receives order amount and approval status (customer is verified by Premium directly).
  • Contracted shipping carrier. Delivers orders and updates status. Receives name, address, mobile number, and order details.

We may add or replace similar tools serving the same purposes without changing the substance of this Policy. Any material change will be announced by updating this page.

PURPOSES OF USE

  • Order fulfillment. Processing payment, preparing the shipment, tracking it, and communicating about it.
  • Customer service. Responding to enquiries and managing returns and exchanges.
  • Account management. Enabling you to track orders, save preferences, and log in.
  • Site improvement. Understanding user behavior to improve performance and browsing experience.
  • Personalized marketing. Sending newsletters and offers relevant to your interests (you can opt out at any time).
  • Fraud prevention. Detecting suspicious orders and protecting the store and customers.
  • Legal compliance. Responding to any official request from a competent judicial or regulatory authority.

COOKIES AND TRACKING

We use cookies and similar local-storage technologies on three levels:

  • Essential cookies. Required to operate the site (cart, login, checkout). The site does not work without them. Cannot be disabled.
  • Performance cookies. Measure visitor count and page performance (Google Analytics 4). Can be disabled.
  • Marketing cookies. Measure and improve ads (Meta Pixel, TikTok Pixel) and enable retargeting. Can be disabled.

You can manage cookies from your browser settings (delete or block). Disabling marketing cookies does not affect site functionality but may reduce the relevance of ads you see.

DATA SHARING

We do not sell, rent, or share your data for marketing purposes with any third party.

We share data only in the following cases, and only to the extent necessary:

  • Operational service providers (Shopify, the shipping carrier, payment gateways, Klaviyo). Each accesses only the data needed for its specific service.
  • Advertising platforms (Meta, TikTok, Google). Anonymized browsing and purchase events to measure ad performance.
  • Legal or regulatory bodies. Upon official request from competent authorities or to fulfill legal obligations.
  • Professional advisors. Such as accountants or legal counsel, under confidentiality agreements.

STORAGE AND SECURITY

  • Store data is hosted on Shopify's encrypted cloud infrastructure (TLS/SSL in transit, encryption at rest).
  • Payments are processed through PCI-DSS Level 1 certified gateways. Full card data does not pass through our servers.
  • Internal access to data within STENG is restricted to authorized employees on a need-to-know basis and is subject to periodic review.
  • Despite following best practices, no system is 100% secure. In the event of a breach, we will notify affected customers and competent authorities in accordance with Law No. 151 of 2020.

Stay safe. Do not share your account password or payment OTP with anyone. STENG will never ask for your password or OTP via WhatsApp, phone, or email.

DATA RETENTION

  • Order and invoice records. 5 years (for tax and accounting obligations).
  • Active account data. Throughout account activity plus 24 months after the last interaction.
  • Newsletter subscription data. Until manual unsubscribe.
  • Aggregated analytics data. 14 months (Google Analytics 4 default).
  • Conversation logs (Inbox / email). 24 months.

After the period elapses, data is deleted or converted to an anonymized form used for statistical analysis only.

YOUR RIGHTS

Under Egyptian Personal Data Protection Law No. 151 of 2020, you have the right to:

  • Be informed of the categories of your data we hold and the purposes of their use.
  • Access a copy of your data on record with us.
  • Correct any inaccurate or outdated data.
  • Delete your data (subject to retention of invoice records for 5 years as required by law).
  • Object to the processing of your data for direct marketing purposes.
  • Withdraw consent at any time without affecting prior processing.
  • File a complaint with the Egyptian Personal Data Protection Center if you believe your rights have been violated.

To exercise any of these rights, contact us via the channels at the end of this Policy and clearly state your request. We will respond within 15 business days (extendable by an equal period for complex requests, with notice of the reason).

INTERNATIONAL VISITORS

The online store currently serves orders within the Arab Republic of Egypt only. If you browse the site from outside Egypt:

  • Your technical data may be transferred to Shopify servers outside Egypt (United States, European Union) as part of the platform's cloud infrastructure.
  • If you are a resident of the European Union or the United Kingdom, additional GDPR / UK-GDPR provisions apply, including the right to data portability.
  • By using the site, you consent to the transfer and processing of your data in accordance with this Policy regardless of your geographic location.

POLICY UPDATES

  • We may update this Policy periodically to reflect operational or legal changes. The last-updated date is always shown at the top of the page.
  • For any material change (such as adding a new purpose for data use, or a new third party), we notify registered customers by email.
  • Continued use of the site after the update date constitutes acceptance of the new version.

CONTACT

This Policy is governed by Egyptian law — particularly Personal Data Protection Law No. 151 of 2020 and its executive regulations. Any dispute arising from its interpretation or application is subject to the exclusive jurisdiction of the competent Egyptian courts.