Privacy policy.

The data controller is Customer Path Marketing Services LLC, registered in Egypt under Commercial Register number 234414 with the Egyptian Tax Authority under TRN 779-951-638, with its registered office at 18 Taha Hamadi Street, Cleopatra, Sidi Gaber, Alexandria.

Contact for data-protection matters: support@customerpath.io.

This policy applies to visitors to customerpath.io and to prospects who contact us via email, WhatsApp, or phone in connection with the site.

Personal data we process on behalf of a client business under a written services engagement is governed by the Data Processing Agreement that forms part of that engagement, not by this policy.

Information you give us: your name, business email, phone number, company, and the contents of any message you send us when you reach out for a discovery call or proposal.

Information collected automatically: IP address, browser user-agent, timestamps, pages visited, and referring URL. This is standard server-log data used to operate and secure the site.

Cookies and similar technologies, as described in the Cookie Policy.

To respond to inquiries and proposals; to deliver services you request; to issue invoices and meet our tax and commercial-record obligations under Egyptian law; to secure the site and detect abuse; and to improve how the site works.

We process personal data on the following bases recognised by PDPL Law 151 of 2020:

• 01Your explicit and informed consent, for cookies and any non-essential processing.
• 02Performance of a contract or steps taken at your request prior to entering into a contract, when you initiate a discovery call or proposal.
• 03Compliance with legal obligations under Egyptian tax, commercial, and accounting law.
• 04Protection of vital interests in narrow security cases involving the integrity of the site.

We retain personal data only for as long as needed for the purpose it was collected for, or as required by Egyptian law:

• 01Inquiry correspondence: up to 36 months from last contact.
• 02Billing records and invoices: 5 years, as required by the Egyptian Tax Authority.
• 03Server logs: 12 months.
• 04Cookie data: per the lifetime described in the Cookie Policy.

We share personal data only with service providers we use to operate the site and the business, including hosting, email delivery, payment processing, and communications platforms. Each provider is bound by confidentiality and processes data only on our documented instructions.

We do not sell personal data. We do not share personal data with advertisers.

Some of our service providers operate outside the Arab Republic of Egypt, primarily in the United States and the European Union. Where PDPL requires it, we will obtain a cross-border transfer license from the Personal Data Protection Center (PDPC) before transferring personal data above statutory thresholds.

If you would like the current list of countries to which your data may be transferred, contact us at support@customerpath.io.

Under PDPL Law 151 of 2020 you have the following rights with respect to your personal data:

• 01Right to access the personal data we hold about you.
• 02Right to rectify inaccurate or incomplete data.
• 03Right to erasure of your data, subject to legal retention obligations.
• 04Right to restrict or object to processing.
• 05Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
• 06Right to data portability in a structured, commonly used format.
• 07Right to know about disclosures of your data to third parties.
• 08Right to lodge a complaint with the Personal Data Protection Center (PDPC).

To exercise any of these rights, email support@customerpath.io with the subject line "Data request". We will respond within 30 days.

Our services are directed to businesses, not to individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

We do not knowingly collect sensitive personal data (health, biometric, religious, political, or financial-behaviour data) from site visitors. If you voluntarily include such data in a message to us, we will treat it under the enhanced safeguards required by PDPL.

We protect personal data with measures appropriate to its sensitivity: TLS encryption in transit, access control on stored data, least-privilege internal access, and audit logging on production systems.

In the event of a personal data breach, we will notify the Personal Data Protection Center within 72 hours of becoming aware of the breach, and affected individuals within 3 working days, as required by the Executive Regulations of the PDPL.

We do not currently send marketing emails, SMS messages, or other direct-marketing communications. Should we begin to do so, we will obtain a separate direct-marketing permit from the PDPC, as required by Article 28 of the Executive Regulations, and add an explicit opt-in mechanism.

We may update this policy as our practices evolve or as Egyptian law changes. The effective date below indicates the current version. Material changes will be announced on this page. Continued use of the site after a change is posted constitutes acceptance of the updated policy.

For any privacy question or to exercise a right, contact us at support@customerpath.io.

If you are not satisfied with our response, you have the right to lodge a complaint with the Egyptian Personal Data Protection Center (PDPC) under the Ministry of Communications and Information Technology.