Privacy Policy
Last updated: 30 October 2026
This policy explains how we collect, use, share and protect your personal data when you use eikah.com, or when you contact us. We do so in line with the Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations issued by Ministerial Decree No. 816 of 2025.
1. Who we are
The party responsible for your data (the controller) is: WalyMart, an Egyptian limited liability company, Commercial Registry No. 3675 (Gamasa Investment Commercial Registry Office), Unified Registry No. 11090 09000 03675, Tax Registration No. 699-603-633, head office: Salah Salem St. and Dr. Abdel Azim Wazir St., opposite the Spinning and Weaving Factory, Damietta 1st District, Damietta City, Damietta. "Eikah" is a brand of this company. Throughout this policy, "we", "us" and "our" mean WalyMart. You can reach our data-protection contact about anything related to your data at: The contact form on our website: https://eikah.com/contactus.
2. Data we collect and where it comes from
- Account data: name, phone number and email.
- Order data: delivery address, order contents, value and date, payment method, and your messages with us about the order.
- Payment data: we do not store full card numbers. Card details are entered with the licensed payment provider on secure PCI-DSS-compliant systems, and we receive only the transaction result and limited reference data.
- Conversations: the content of messages you send us through our contact forms (text, photos, voice notes and files).
- Technical data: IP address, device and browser type.
We receive this data from you directly when you use our services or contact us; from payment providers (the transaction result only). We do not ask you for sensitive data such as health or religious data. Financial data is sensitive data under the law, which is why we do not store full card numbers. If you tell us something about your health, such as an allergy to an ingredient, we use it only to serve your order.
3. Why we use your data
- To create and manage your account.
- To process and deliver your orders and provide after-sales service.
- To take payment and issue invoices, including electronic invoices and receipts for the Egyptian Tax Authority where required.
- To answer رسالتكs, messages and complaints.
- To operate and secure the website and prevent fraud.
- To send marketing messages, only with your consent.
- To comply with the law and respond to requests from competent authorities.
4. Legal basis for processing
We process your data on one of the following bases:
- Performance of a contract: to fulfil your order, your account or our agreement with you.
- Legal obligation: such as tax, e-invoicing and consumer protection.
- Legitimate interest: to operate, secure and improve our services, without overriding your rights.
- Consent: for marketing messages and any case where the law requires your consent. You can withdraw your consent at any time.
5. Sharing your data
We do not sell your personal data. We share it only as needed with:
- Competent government bodies where the law requires it, including the Egyptian Tax Authority for e-invoicing.
We also share it with service providers that process data on our behalf, under confidentiality obligations:
- Hetzner: hosting of our servers, databases, email and backups (Germany and Finland).
- Backblaze: storage of encrypted backup copies of our data (United States).
- Google (Google Fonts): loading the website fonts; your device's IP address reaches Google when a page opens (United States).
- Paymob: processing online payments.
- Geidea: processing online payments.
- Metabase: internal management reports built from our systems' data.
6. Transfers outside Egypt
Your data is stored on servers outside the Arab Republic of Egypt and is transferred to the following countries:
- Germany and Finland: the Hetzner servers that run our systems, and their backups.
- United States: encrypted backup copies at Backblaze, and the services of Google.
Some of the service providers listed may also process data in other countries where their servers are located. The Personal Data Protection Law and its Executive Regulations require a licence or permit from the Personal Data Protection Center for these transfers. We have applied for it, and until it is issued we transfer only what is needed to provide the service.
7. How long we keep your data
We keep your data for as long as needed for the purpose we collected it for, and then for the periods required by law, such as tax and commercial law. After that we delete the data or remove what identifies you.
8. Security
We take technical and organisational measures to protect your data against loss, misuse and unauthorised access, including:
- Encryption of the connection between your device and our websites over HTTPS.
- Administrative access to our servers over SSH is by key only.
- Encrypted backups.
- Access rights set for each user according to their work.
9. Your rights
The law gives you the following rights:
- To know what data we hold about you, to see it and to obtain it.
- To withdraw your consent to processing at any time.
- To have your data corrected, changed, added to or updated.
- To have your data erased.
- To restrict processing to a specific scope.
- To object to processing or its results where it conflicts with your fundamental rights and freedoms.
- To be informed of any breach of your personal data.
Withdrawing consent does not affect processing carried out before it. We may keep some data after an erasure request where the law requires us to.
10. How to exercise your rights
Send your request to our data-protection contact at: The contact form on our website: https://eikah.com/contactus. We may ask you for proof of identity before we act on a request, so that we do not give your data to someone else. We answer your request within six (6) working days of receiving it.
11. Complaints
If you believe our processing of your data breaks the law, you have the right to complain to the Personal Data Protection Center in Egypt. We ask you to contact us first so that we can try to solve the problem.
12. Data breach notification
If a breach of your personal data occurs, we notify the Personal Data Protection Center within seventy-two (72) hours of becoming aware of it, and we also notify you if you are affected, as the law requires, explaining what happened and what we have done.
13. Cookies and measurement tools
We use only essential cookies to run the website, for example to keep you signed in, keep your shopping cart and remember your language. We do not use analytics or advertising tools. The website loads Google Fonts from Google's servers, so your device's IP address reaches Google when a page opens.
14. Electronic marketing messages
We send you marketing messages by text message, WhatsApp or email only after your prior consent. Every marketing message clearly shows Eikah as the sender. You can stop these messages at any time by contacting us at: The contact form on our website: https://eikah.com/contactus. We stop them free of charge. Service messages, such as order confirmations, are sent because they are needed to provide the service.
15. Children
Our services are not directed at people under 18, and we do not knowingly collect their data without a guardian's consent. If you learn that a child has sent us their data, contact us so that we can delete it.
16. Changes to this policy
We may change this policy from time to time. We publish the updated version on this page with its "Last updated" date. If a change is material, we tell you about it in a suitable way before it takes effect.
17. Contact
WalyMart — Salah Salem St. and Dr. Abdel Azim Wazir St., opposite the Spinning and Weaving Factory, Damietta 1st District, Damietta City, Damietta. The contact form on our website: https://eikah.com/contactus.