Privacy Policy

The data controller for this website is AlGammal Holding, headquartered in Cairo, Egypt. For any question or request about your personal data, contact us at:

AlGammal Holding, PO Box 4230072, Maadi, Cairo, Egypt. Email: info@algammalholding.com. Phone: +20 233 770 931.

We collect only what each interaction needs.

• Contact requests: your name, email address, company, the office you selected, subject, message, and the language you wrote in. We use these to answer you and to route the request to the right team.
• Careers portal: the account you create (email address and a password we store only as a cryptographic hash), your full name, phone number, country and city, preferred language, your CV and any documents you attach, your answers to the application questions, the date you accepted the terms and this policy, and whether you opted in to our talent pool. We use these to run the recruitment process for the role you applied to and, if you opted in, to consider you for future roles.
• Partner and vendor portal: the business contact details of the people acting for a partner, vendor, or client, their account credentials, and the documents exchanged during a collaboration (quotes, invoices, permits, correspondence). We use these to manage the relationship and the projects we deliver together.
• Technical data: when you visit the site our hosting provider records your IP address, browser and device type, the pages requested, and timing information in server logs, and our performance monitoring collects anonymised page speed metrics. We use these to keep the site secure, available, and fast.

Depending on the context, we process your data because:

• you asked us to (responding to your contact request, or taking steps before entering into an employment or business contract with you);
• you gave your consent (joining the talent pool, receiving recruitment updates), which you can withdraw at any time;
• we have a legitimate interest in running, securing, and improving our website and in managing our relationships with partners and vendors; or
• we are required to by law, including employment, tax, and anti-corruption obligations.

We process personal data in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020 and, for individuals in the European Economic Area and the United Kingdom, the GDPR and the UK GDPR.

We do not sell personal data. We share it only with:

• Service providers that operate the site on our behalf: Vercel (hosting and file storage, served from Frankfurt, Germany), Neon (managed database), Resend (transactional email, such as application confirmations and password resets), and Google Cloud Vertex AI (the model used for CV parsing and scoring). Each acts under contract and only on our instructions.
• AlGammal group companies, when your application, inquiry, or project concerns one of them.
• Professional advisers, auditors, and public authorities where we are legally required to, or to protect our rights.

Some pages embed third-party content: videos from YouTube in privacy-enhanced mode, an interactive 3D scene from Spline, and flag images from flagcdn.com. Loading that content sends your IP address to the provider, under its own privacy policy.

AlGammal operates from Egypt and has offices in ten countries. The website and its data are hosted in the European Union (Frankfurt), and recruitment and partnership data may be accessed by our teams in the country the role or project concerns. Where data leaves the country it was collected in, we rely on contractual safeguards with our providers and on the data protection commitments described here.

We keep personal data only as long as the purpose requires:

• Contact requests: up to 24 months after our last exchange.
• Job applications: 12 months after the recruitment process for the role closes. If you opted in to the talent pool, up to 24 months after your last activity, or until you withdraw.
• Candidate accounts: until you ask us to delete the account, or after 24 months of inactivity.
• Partner and vendor records: for the duration of the relationship and afterwards for the periods required by commercial, accounting, and tax law.
• Server logs: 30 days.

All traffic to the site is encrypted (HTTPS). Passwords are stored only as salted hashes. Access to candidate, partner, and vendor data is restricted by role, so recruiters see only recruitment data and partner-facing staff see only their own collaborations. Uploaded documents are served through authenticated requests, not public links. We review access regularly and log administrative actions.

Subject to applicable law, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data deleted, or its processing restricted;
• object to processing based on our legitimate interests;
• receive the data you gave us in a portable format;
• withdraw consent at any time, without affecting processing that took place before; and
• lodge a complaint with the Egyptian Personal Data Protection Centre or, if you are in the EEA or the UK, with your local supervisory authority.

To exercise any of these rights, email info@algammalholding.com with "Privacy request" in the subject line. We respond within 30 days. Candidates can also update or delete most of their data directly from their account.

The site, the careers portal, and the partner portal are intended for people aged 18 and over. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

We update this policy when our practices or the law change. The date at the top shows the current version. Material changes will be announced on this page before they take effect.