Privacy Policy

This Privacy Policy applies to the Ghareeb Oglu online store, customer accounts, checkout, order enquiries and related customer communications. Ghareeb Oglu operates within Al-Tayseer International for Mills, an Egyptian joint-stock company, Commercial Registration No. 81437 (referred to here as “Ghareeb Oglu”, “we” or “us”).

Our business contact address is 2nd Industrial Zone, St. 12 - M, 6th of October, Giza, Egypt. For privacy enquiries, contact info@ghareeboglu.com, Hotline 17690 or WhatsApp +20 103 494 4444.

This policy explains our own handling of personal data. Payment providers, carriers and external websites may also publish separate privacy notices describing their independent activities.

When you place an order, create an account or contact us, we may collect your name, email address, phone number, delivery or pickup details, billing information where required, address instructions, account identifiers, and messages you send to us.

We maintain order and commerce records such as the items in your basket, purchases, amounts, discounts, delivery method, payment method, transaction or order reference, invoice or refund status, and customer-service history. When you use the site, technical data may include IP address, device and browser details, security logs, cookies, preferences, and page or shopping events where enabled.

We do not ask you to provide sensitive personal information for an ordinary coffee purchase. Please avoid putting unnecessary sensitive information in delivery notes or customer messages.

Most information is supplied directly by you when you browse, register, check out or ask for support. Some is generated by our website and commerce systems, and some may be returned by payment, delivery or fraud-prevention providers to confirm the status of a transaction or shipment.

If you provide another person's address or contact details for a gift or delivery, please ensure you have a lawful basis to share that information and that the recipient can reasonably expect to be contacted about the delivery.

• To create and manage carts, customer accounts and orders, check stock, take payment, issue receipts and handle refunds.
• To arrange pickup or delivery, validate delivery information, send order updates and resolve delivery problems.
• To answer enquiries, provide after-sales support, manage complaints and protect consumers' rights.
• To prevent fraud, abuse, duplicate transactions and unauthorized access, and maintain system reliability and security.
• To meet applicable tax, accounting, consumer-protection, regulatory and legal obligations, and establish or defend legal claims.
• To understand and improve site performance and shopping journeys using appropriately configured analytics; to send promotions only where permitted and with any consent required by law.

We process personal data only for specified, legitimate purposes and on a basis permitted by applicable Egyptian law, including processing necessary to perform your requested transaction, meet legal duties, or protect the service from misuse where legally allowed. Where consent is required, we will seek it through an appropriate, separate choice rather than treating mere website use as blanket consent.

Marketing consent, where required, is optional and not a condition of buying coffee. You may withdraw an applicable consent for future processing at any time; withdrawal does not undo prior lawful processing or erase records we must lawfully retain.

Where Paymob or another online payment option is offered at checkout, the payment provider processes the payment using its own secure service. We receive information needed to verify and reconcile the transaction, such as amount, method, status, provider reference and relevant timestamps.

We do not need to collect or retain your full card number, card security code (CVV) or PIN in our storefront order records. A payment provider may process additional information under its own privacy notice and legal obligations. Cash-on-delivery or cash-at-pickup orders are handled according to the payment option selected.

We share only relevant information with providers and personnel who need it to operate the store: commerce and hosting providers; Paymob or the payment provider you choose; Bosta or the carrier fulfilling a delivery; customer-support, security, infrastructure and analytics vendors where used; and professional advisers or public authorities when disclosure is lawfully required.

A delivery partner may need the recipient's name, phone, address, delivery instructions, order reference and collection amount where cash on delivery applies. Payment providers may need transaction and customer-identification details required to process or check a payment.

We do not sell customer personal data to data brokers. We may disclose information to investigate suspected fraud, enforce lawful terms, respond to a binding legal request or protect our rights and those of customers, but only to the extent permitted by law. Our providers may have independent legal obligations, and their separate privacy policies apply to their own processing.

Essential cookies and similar storage help maintain your basket, login session, security and chosen language. Disabling essential storage may stop some checkout or account features from working.

Where analytics or other non-essential tracking is enabled, it may measure visits and shopping events to improve the store. Any non-essential tracking that legally requires consent must be subject to the relevant notice and choice; we do not treat acceptance of essential cookies as permission for unrelated advertising.

You can manage cookies in your browser and exercise any consent controls provided on the website. Third-party websites linked from our store are responsible for their own cookies and notices.

We keep personal data no longer than reasonably necessary for the purpose collected, taking account of applicable Egyptian requirements for transaction, invoice, accounting and tax records, disputes, chargebacks, fraud prevention and other legal obligations. There is no single retention period for every category: order and invoice records may need to outlast an active customer account, while temporary shopping and security records are reviewed on shorter operational cycles.

When information is no longer required, we delete it or anonymize it where practicable. Limited copies may remain temporarily in secured backups until their ordinary rotation or for a lawful preservation requirement. We may retain the minimum evidence needed to comply with law or defend a claim even after an account-deletion request.

We apply reasonable technical and organizational safeguards proportionate to the information and risks, including access controls, secure transport, restricted operational access and safeguards for payment and delivery integration. We review incidents and take legally required action when a personal-data breach occurs.

No online system or transmission can be guaranteed completely secure. Please safeguard your account credentials, avoid sharing passwords or payment codes with others, and tell us promptly if you suspect unauthorized account activity. This statement does not waive any duty or liability that cannot lawfully be excluded.

Some technology, hosting, payment, security or support providers may process or access information from outside Egypt. Where a transfer is subject to Egyptian personal-data protection requirements, we will use the applicable lawful arrangements, safeguards, authorizations or permissions before transferring data as required.

We do not promise that all website data remains physically in Egypt. You can contact us for information about relevant provider categories and transfers affecting your data.

Subject to applicable law, you may request information about our processing, access to your personal data, correction of inaccurate details, deletion where permitted, restriction or objection where applicable, withdrawal of consent, and an end to direct marketing. You may also raise a complaint with the competent Egyptian Personal Data Protection Center (PDPC) or another lawful authority.

Send requests to info@ghareeboglu.com with the subject “Privacy Request”, or use the support details below. We may reasonably verify your identity, ask for information needed to locate records, and refuse or limit a request where a legal exception applies, such as preserving tax, payment, fraud-investigation or dispute records. We will respond according to applicable legal requirements.

We may send service messages needed to complete or support your order even if you decline promotional communications. Where direct marketing is allowed, we will provide the notices and consent or other lawful choices required in Egypt, and an accessible way to stop future marketing messages.

To stop promotional messages, use an unsubscribe option where offered or email info@ghareeboglu.com. We may retain minimal suppression information to honor an opt-out. We do not treat a service-message opt-out as a reason to withhold transaction notices that are needed for an active order.

The store is intended for customers legally able to make purchases. We do not knowingly seek children's personal information for independent marketing. If you believe a child has submitted personal data without the authorization required by law, contact us so we can review the situation.

Our website may link to external payment, delivery, social-media or support services. We do not control those services' independent practices, although we remain responsible for our own legal obligations.

We may revise this policy to reflect changes to the website, our providers, our practices or legal requirements. The updated version and its effective date will appear here. Where a change requires a new notice or consent, we will provide it as required; a later policy update does not retroactively create consent.

Our handling of personal data is subject to the applicable laws of the Arab Republic of Egypt, including Personal Data Protection Law No. 151 of 2020 and its Executive Regulations under Ministerial Decision No. 816 of 2025. Nothing in this policy takes away a mandatory privacy, consumer-protection or other legal right.