Privacy Policy
Effective Date: 27 July 2026
1. Personal Data We Collect
Data you give us directly. When you submit a contact form, request a quotation, request a product sample, or subscribe to our newsletter, we collect the information you enter — typically your name, company name, business email address, telephone number, country, and the content of your enquiry, including any product or technical details you choose to share.
Data collected automatically when you browse. When you visit the Website we and our analytics providers collect technical and usage data: IP address, approximate location derived from it, browser and device type, operating system, referring page, the pages you view, time spent, and interactions such as clicks and scrolling.
Session interaction data. One of our analytics tools (Microsoft Clarity) records how visitors interact with pages, including mouse movement, clicks and scrolling, in order to produce heatmaps and session replays. See section 4.
We do not knowingly collect special categories of sensitive personal data through the Website, and we do not ask for them. Please do not include sensitive personal information in a free-text enquiry field.
2. Why We Use It, and Our Lawful Basis
| What we use it for | Lawful basis |
|---|---|
| Responding to your enquiry, quotation or sample request | Performance of, or steps prior to entering into, a contract |
| Managing our commercial relationship and business development | Legitimate interests in operating and growing a B2B business |
| Preventing spam and abuse of our forms | Legitimate interests in the security of our systems |
| Website analytics, performance and improvement | Legitimate interests, and consent where required by law |
| Advertising, remarketing and measuring campaigns | Consent where required by law |
| Sending you our newsletter | Consent, withdrawable at any time |
| Meeting legal, tax and accounting obligations | Compliance with a legal obligation |
3. How Long We Keep It
We keep personal data only as long as necessary for the purpose it was collected for, and to meet our legal obligations.
- Accounting, invoicing and tax records — retained for not less than five (5) years, as required by Egyptian tax and accounting law (VAT Law No. 67 of 2016 and Unified Tax Procedures Law No. 206 of 2020).
- Enquiries that do not lead to a business relationship — retained for up to 24 months, then deleted or anonymised.
- Newsletter subscriptions — retained until you unsubscribe.
- Website analytics data — retained according to each provider's standard retention period.
Where a longer retention period is required by law, that period applies.
4. Who We Share It With
We do not sell your personal data. We share it only with the providers below, and with professional advisers, auditors or authorities where the law requires it.
Where your enquiry goes. Information you submit through a form is stored in our own database (hosted with Supabase) and passed into our own customer relationship system so our sales team can respond. Form submissions are screened by Google reCAPTCHA to block automated abuse, which means Google receives technical signals about the submission.
Analytics and marketing providers active on this Website:
| Provider | What it does |
|---|---|
| Google Tag Manager | Loads and manages the tools listed below |
| Google Analytics 4 | Website traffic and usage statistics |
| Google Ads | Measures advertising campaigns and supports remarketing |
| Microsoft Clarity | Heatmaps and session replay — records page interactions. Form fields are masked so the content you type is not captured |
| LinkedIn Insight Tag | Measures LinkedIn campaigns and audience insight |
| Ahrefs Analytics | Website traffic and search performance measurement |
| Plausible Analytics | Privacy-focused traffic statistics — self-hosted on our own infrastructure, so this data is not shared with a third party |
5. Cookies and Tracking — Please Read This Carefully
We want to be straightforward about how tracking currently works on this Website rather than describe an arrangement we do not operate.
Analytics and marketing tools listed in section 4 begin operating when you arrive on the Website. They are not held back until you give permission. If you would prefer they did not run, you can opt out at any time using the controls described below, and you can block or delete cookies in your browser settings.
Your choices. You can disable cookies in your browser; use the Google Analytics opt-out browser add-on; opt out of Microsoft Clarity and LinkedIn tracking through those providers' own settings; and unsubscribe from our newsletter using the link in any email. Blocking cookies may affect how parts of the Website work.
6. Where Your Data Is Processed — International Transfers
Your personal data is processed outside the Arab Republic of Egypt.
Our Website and its database are hosted on infrastructure located in the United States, and several of the providers listed in section 4 — including Google, Microsoft, LinkedIn and Ahrefs — process data in the United States and other countries. No visitor personal data is stored on servers located in Egypt.
Under the PDPL, transferring personal data outside Egypt requires a lawful basis and appropriate safeguards. Where personal data of individuals in the European Union or United Kingdom is transferred, we rely on the transfer mechanisms operated by the relevant providers, including Standard Contractual Clauses where applicable.
7. How We Protect It
We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS), access restricted to staff who need it, a content security policy limiting what may run on the Website, and automated screening of form submissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Subject to the conditions and exceptions in the applicable law, you have the right to:
- Know and access what personal data we hold about you;
- Correct data that is inaccurate or incomplete;
- Erase your personal data where we have no continuing lawful reason to keep it;
- Object to or restrict processing, including processing based on our legitimate interests;
- Withdraw consent at any time where we rely on consent, without affecting processing already carried out;
- Portability — receive certain data in a structured, commonly used, machine-readable format;
- Complain to the competent supervisory authority — in Egypt, the Personal Data Protection Centre; in the EU or UK, your national data protection authority.
How to exercise them. Email us at the address in section 10 stating which right you wish to exercise. We will respond within 30 days. We may need to verify your identity before acting, and we will tell you if an exception applies.
9. Children
The Website is a business-to-business site and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
10. Contact Us
For any privacy question, or to exercise any right in section 8:
Chimi Art (شركة كيمى ارت) Privacy enquiries: privacy@chimiart.com General: info@chimiart.com Website: www.chimiart.com
11. Changes to This Policy
We may update this Policy. The "Last Updated" date above shows when it last changed. Material changes will be notified on this page.
© 2026 Chimi Art (شركة كيمى ارت). All rights reserved.