Legal & customer information
Privacy and personal-data protection policy
Last updated: 21 September 2026
Current scope and controller details
This policy covers the website launch list, support contact, testing app and future retail services. The Egyptian legal entity, registered address, data-protection contact and license/registration details required for production processing must be inserted before retail accounts, payment, shipping, camera analysis or large-scale analytics are activated.
Data we collect
- launch-list name, email, language, signup page and optional wedding-planning response;
- support messages and attachments you choose to send;
- future account, address, order, payment-token, delivery, return and invoice information;
- optional beauty preferences, routines and pregnancy or postpartum mode choices;
- technical, security and consent records needed to operate the service.
Card credentials will be handled by the approved payment provider. NOUR does not currently collect skin photographs through the public site or app.
Purposes and legal bases
NOUR uses data only for stated purposes: providing a requested service, fulfilling a contract, meeting legal obligations, protecting the service, handling complaints and sending marketing where valid consent has been given. Optional beauty, bridal, pregnancy and camera-related data will not be required to buy ordinary products.
Consent and sensitive features
Consent requests must be specific, informed, freely given, recorded and withdrawable. Marketing, optional bridal information, pregnancy or postpartum personalization, photo analysis and any non-essential analytics require separate controls where legally required. Withdrawing consent stops future consent-based use without affecting prior lawful processing.
Sharing and international processing
Data may be shared only with contracted service providers needed for hosting, email, authentication, payment, fraud prevention, delivery, support, professional advice and legal compliance. The launch-list form is hosted through Netlify. External fonts currently load from Google.
Some current or proposed providers may process data in Germany, the United States or another country outside Egypt. Before production customer data is intentionally stored, accessed or processed outside Egypt, NOUR must document the data categories, destination, purpose, provider and subprocessors; assess the destination protections; put appropriate contracts and security measures in place; and obtain every license, permit, approval or other transfer mechanism required under Egyptian law. Consent will not be treated as a substitute for another mandatory authorization. Providers may not use NOUR customer data for their own advertising.
Cross-border launch gate
Retail accounts, customer profiling, pregnancy or postpartum personalization, skin-image analysis and production analytics must remain disabled until Egyptian counsel has approved a written cross-border transfer assessment for every relevant provider, including any United States processing, and confirmed the steps required by Egypt’s Personal Data Protection Law No. 151 of 2020 and its applicable regulations and regulatory decisions.
Retention and security
NOUR will keep each category only for a documented period tied to its purpose, complaint, tax, accounting and legal requirements, then delete or irreversibly anonymize it. Access controls, encryption, logging, backups, incident response and supplier review are required before production. No internet service can promise absolute security.
Your rights
Subject to applicable law, you may request information, access, correction, deletion, restriction or objection, withdraw consent, and receive information about a breach affecting you. Identity may need to be verified. Requests and complaints may be sent to purchasing@nourbeautyegypt.com until a dedicated privacy address is activated.
Children and changes
NOUR is designed for adults. Do not submit a child’s information without the legally required authority. Material policy changes will be dated and communicated where required; new purposes will not be silently added to an existing consent.