Privacy Notice
EFG Holding.
In accordance with Personal Data Protection Law No. 151 of 2020 and its Executive Regulation No. 816 of 2025
Important note: This Notice is addressed to you as a visitor to our website or a client of EFG Holding. It explains how we collect and process your personal data and the rights guaranteed to you by law. Please read it carefully. |
The entity controlling your personal data is:
Company Name | EFG Holding |
Address | Building No. B129, Phase 3, Smart Village, Km 28 Cairo Alexandria Desert Road, Egypt |
Phone | T: +20 (0)2 3535 65 84 |
Website |
Note: EFG Holding is responsible for protecting your data as a client or visitor of EFG or any of its affiliates. |
EFG Holding has appointed a Data Protection Officer whom you may contact directly:
Job Title | Data Protection Officer (DPO) |
Identity data: full name, national ID card or passport, date of birth, nationality, and the selfie you provide during the identity verification process, which may undergo automated facial-matching processing and, in that case, is treated as sensitive biometric data collected under your explicit written consent; the process may include human review.
Contact data: address, email, phone numbers, and your location via the Global Positioning System (GPS). We collect GPS location data — after obtaining your permission — for identity verification, fraud prevention, and compliance with regulatory requirements (Know Your Customer). You may disable this permission at any time from your device settings, noting that this may affect the availability of certain services.
Website data: IP address, browsing data, cookies, information about the device used, and your account details (including username and password) relating to the accounts used to access our website and/or mobile application.
Communication records: correspondence via email or phone, and contact forms.
Note: We collect certain commercial data relating to your company, such as:
Professional and commercial data: Company name, company financial profile, company commercial registration number, annual sales volume, shareholder structure, and delegation form.
We process your personal data on the following legal bases under Article 6 of Law No. 151 of 2020:
Legal Basis | Associated Purposes |
|---|---|
Performance of a contract | Performance of contracts based on the requested services. |
Legal obligation | Compliance with the requirements of the Central Bank of Egypt and the Financial Regulatory Authority, anti-money laundering and counter-terrorism financing requirements, and tax reporting requirements. |
Consent | Sending newsletters and marketing communications and using analytical and non-essential cookies. You may withdraw your consent at any time. |
Legitimate interests | Operating the website and ensuring its security and continuity, improving user experience, managing client relationships, and preventing fraud. |
Establishment, Exercise, or Defence of Legal Claims | Maintaining the necessary documents in the event of disputes or legal proceedings. |
Execution of a Judicial Order or an Order Issued by a Competent Investigative Authority | Responding to requests from Egyptian regulatory and judicial authorities. |
To enter into a contract with you or to take steps related to entering into a contract with you.
To create an account for you and provide our services to you after contracting with you, in accordance with the terms and conditions of that contract.
To comply with applicable laws.
For administrative, assessment, and analytical purposes relating to our services.
To verify your identity.
To monitor and analyze the use of our services for system administration, operation, testing, and support purposes.
To manage our information technology and ensure the security of our systems.
To establish, exercise, and/or defend legal claims or rights.
To investigate and respond to any enquiries or issues.
To verify and enforce compliance with our terms and conditions or other contractual terms.
To improve and develop the products and services we provide.
To provide you with information about our Group’s services and products and/or any additional products and services that we believe may interest you. This information may be provided in the form of advertisements and digital campaigns, or by email or SMS.
To identify products or services that we believe may interest you by using cookies or similar tracking technologies on our services, which track and analyze how you use them.
To retain a copy of your correspondence with us.
We may share your data with the following parties where necessary:
EFG Holding Group affiliates: for operational and administrative support purposes under written agreements here.
Service providers: contracted hosting, email, and analytics companies (data processors committed to protecting your data based on Data Processing Agreements)here.
Courts and investigative authorities: pursuit to valid legal orders.
Confirmation: We do not sell your personal data to any external party, nor do we use it for commercial purposes outside the scope of EFG Holding’s services. |
Due to the nature of our business and our reliance on international technology and operational service providers, some of your personal data may be transferred outside the Arab Republic of Egypt to multiple countries within and outside the Middle East and North Africa, Europe, the Americas, and Asia, you can see them here.
Where the provision of services requires transferring your data outside the Arab Republic of Egypt, we apply the following safeguards in accordance with Executive Regulation No. 816 of 2025 of the Personal Data Protection Law:
Obtaining a cross-border data transfer permit from the Personal Data Protection Centre.
Verifying that the recipient country provides an adequate level of protection equivalent to that provided in the Arab Republic of Egypt.
Entering data processing agreements that require the recipient to comply with the same standards applicable to us.
Relying on the legal mechanisms approved by the Personal Data Protection Centre.
We retain your personal data for the period necessary to fulfil the purpose for which it was collected, or for the period required by law, whichever is longer:
Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
Client identity data (name, ID number, address) | 5 years from the end of the contractual relationship | Legal obligation -Anti-Money Laundering Law No. 80 of 2002 |
Financial data and transaction records | 5 years from the transaction completion date | Legal obligation - Anti-Money Laundering Law No. 80 of 2002 |
Browsing data and analytical cookies | 5 years | Client Consent |
Correspondence and enquiry records | 5 years from the correspondence date | Legal obligation / Legitimate interests |
Marketing communications data | 5 years from last contact or until consent is withdrawn | Client Consent |
Data relating to claims or legal disputes | Until legal proceedings are finally concluded | Establishment, exercise, or defence of legal claims |
Law No. 151 of 2020 guarantees you the following rights, and the controller must respond within six (6) working days of receiving your request:
Right to Be Informed and Notified | The right to know how your data is processed and to be notified in the event of a data breach within 3 working days of notifying the Personal Data Protection Center. |
Right of Access and to Obtain a Copy | The right to access your personal data and obtain a copy thereof. |
Right to Rectification | The right to request correction of inaccurate or incomplete data. |
Right to Erasure (Right to Be Forgotten) | The right to request deletion of your data when the purpose of processing has been fulfilled or consent has been withdrawn. Subject to applicable legal obligations |
Right to Restriction of Processing | The right to restrict processing of your data and limit it to storage in certain circumstances. |
Right to Object | The right to object to processing that conflicts with your rights or causes material or moral harm. |
Right to Data Portability | The right to request transfer of your data to another controller in a structured, machine-readable format. |
Right to Withdraw Consent | The right to withdraw your consent at any time without affecting the lawfulness of prior processing. |
To exercise any of these rights, please contact the Data Protection Officer using the details in Section 2 above.
Strictly necessary cookies: Essential for website operation and do not require consent.
Performance/analytical cookies: Used to measure and improve website use and require your consent.
Social media cookies: Facebook and Twitter sharing requires your consent.
You may manage your preferences or withdraw your consent at any time through the cookie preferences tool at the bottom of our website.
Directly from you: Through registration and contact forms.
Automatically: Browsing data and IP address when you visit our website.
From external parties (third parties):
Entities within the Company’s group (the “Group”), whose identities can be found through the link referred to in Section 6 above.
Publicly available sources, including publicly available online profiles and databases, for the purposes of establishing and verifying your identity, deriving your contact details, and supplementing the contact information we hold about you.
Through cookies and similar technologies: As described in Section 10 above.
By email: We retain copies of correspondence for documentation and legal compliance purposes.
We encourage you to contact the Data Protection Officer (Section 2) to resolve any concern relating to your data. We will respond within six (6) working days.
If the matter is not resolved, you have the right to lodge a complaint directly with the Egyptian Personal Data Protection Centre:
Authority | Personal Data Protection Centre (PDPC) |
Website |
We review this Notice periodically. When material changes are made, we will notify you before those changes take effect.
Current Version | 1.1 |
Issue Date | July 2026 |
Reference Law | Law No. 151 of 2020 and its Executive Regulation No. 816 of 2025 |
We use cookies to collect information about how you use our website. And we use the information derived from such cookies to ensure the functionality of our website and to enhance our services.
