Privacy Policy
Last updated: 25 August 2026
Definitions and legal framework
“SFA”, “we” and “the Institution” mean SFA Consultants and the relevant entity handling the request. “Personal data”, “processing”, “controller” and “processor” have the meanings given by applicable Egyptian law. This policy is applied, as relevant, with Egyptian Personal Data Protection Law No. 151 of 2020, Cybercrime Law No. 175 of 2018, Electronic Signature Law No. 15 of 2004, Consumer Protection Law No. 181 of 2018 and other binding professional, tax, employment, corporate and record-retention rules.
Scope and controller
This policy applies to sfabcs.com, SFA Assist, consultation, recruitment, partnership and protected internal forms operated by SFA Consultants. The relevant SFA entity receiving the request controls the information for that purpose.
Information we collect
We may collect identity and contact details, company and service information, form answers and attachments, CV and professional information, conversation records with SFA Assist, consent choices, and limited device, security and usage data.
Sources and authority to provide data
Data may come directly from you, your employer or authorised representative, public or official records, referrals, website technologies and service providers. If you submit information about another person, you confirm that you are authorised to do so and have given any required notice or obtained any required consent.
Why we process information
We use information to respond to enquiries, assess and administer engagements, prepare proposals, operate forms and reports, manage recruitment and partnerships, improve services, prevent misuse, keep records, and comply with legal, regulatory and professional obligations.
Required and optional information
Fields marked as required are needed to route or assess a request. You may refuse optional fields, but missing, inaccurate or outdated information may prevent us from responding, verifying authority, opening a file or delivering the requested service.
Confidential and sensitive submissions
Do not submit passwords, payment-card data or unnecessary sensitive information. Professional secrecy and engagement-specific confidentiality apply only within their proper legal and contractual scope. Uploads are restricted by type and size but no internet transmission is risk-free.
Client files, forms and documents
Internal and client forms may contain accounting, tax, payroll, employment, corporate, ownership, government-payment or legal records. Access is limited according to role and operational need. Submission does not by itself create an engagement, and originals should not be sent unless specifically requested through an approved channel.
SFA Assist and automated features
Automated answers provide navigation and general information from published SFA content. Conversations may be logged to improve answers and support follow-up. They are not professional advice and may be reviewed by authorised staff.
Calls, messages and service quality
Calls, emails, WhatsApp messages and support conversations may be documented, summarised or, where lawfully notified and permitted, recorded for service delivery, quality, evidence, security and complaint handling. Do not send confidential instructions through an unapproved channel.
Cookies and similar technologies
Necessary cookies support language, security, sessions and forms. With the choices available on the site, optional analytics or marketing technologies may measure visits and campaigns. Browser settings can restrict cookies, but some features may stop working.
Marketing preferences
Where permitted, we may send service updates, invitations and relevant professional content. You may opt out of marketing at any time. Operational, security, legal and engagement messages may still be sent when necessary.
Legal grounds, sharing and transfers
Processing may rely on consent, steps requested before an engagement, performance of an engagement, legitimate operational and security interests, or legal obligations. We do not sell personal data. Necessary data may be shared with authorised staff, hosting, email, security, analytics or professional providers, and competent authorities where required. A provider may process data outside Egypt subject to available safeguards.
Processors, authorities and professional advisers
Recipients may include contracted technology providers, auditors, accountants, lawyers, insurers, banks or payment providers, and tax, social-insurance, investment, labour, judicial, regulatory or law-enforcement bodies where authorised, instructed or legally required. Each recipient receives only what is reasonably necessary for its role.
International processing
Some infrastructure or support providers may operate from another country. Where a transfer is subject to restrictions, we seek an available lawful basis, contractual protection and proportionate security measures. Mandatory official disclosures remain governed by applicable law.
Retention and security
Retention depends on the request, engagement, recruitment need, statutory periods, disputes and backup cycles. We apply proportionate access control, review, backups and security measures, but absolute security cannot be guaranteed.
Indicative retention rules
General enquiries are retained only as operationally necessary; unsuccessful recruitment records may be retained for a limited future-opportunity period; client, accounting, tax, legal and payment records follow the applicable engagement, statutory, limitation, audit and defence periods. Backup copies expire through controlled cycles unless preservation is required.
Security incidents
We investigate suspected loss, unauthorised access or disclosure, contain risk and make notifications when required by applicable law. You must promptly report a suspected compromise and protect your devices, email accounts, access codes and copies of downloaded files.
Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction or objection, and may withdraw consent without affecting prior lawful processing. Some records must be retained for legal or professional reasons.
Exercising rights and complaints
We may verify identity, authority and request scope before acting. A request may be limited or refused where the law permits, including protection of another person, professional privilege, legal claims or mandatory retention. You may contact us first and retain any right to complain to the competent Egyptian authority.
Accuracy and changes
Please keep your details accurate and tell us promptly about authorised representatives, ownership, contact or engagement changes. SFA is not responsible for delay caused by incorrect, incomplete or unauthorised information supplied to it.
Recruitment and business contacts
Applicant, employee, supplier, partner and business-development data may be used to assess suitability, verify experience, communicate, manage conflicts, prevent fraud and preserve a recruitment or commercial record, subject to applicable rights and retention rules.
External links and children
External government and technology links follow their own policies. The website and services are directed to businesses and adults and are not intentionally designed to collect children’s data.
No sale and no solely automated legal decision
We do not sell personal data. SFA Assist is a navigation and information feature; it is not intended to make a decision producing a legal or similarly significant effect without appropriate human involvement.
Language, changes and contact
We may update this policy when services, technology or law changes. The published version is current and the Arabic text prevails if the bilingual texts conflict, to the extent permitted by law. Contact info@sfabcs.com or SFA Consultants, 31 El Obour Buildings, Salah Salem Road, Heliopolis, Cairo, Egypt.