Privacy policy

Last updated: 23 September 2026

This policy explains what personal data ELVARA collects when you visit elvaraeg.com, place an order, contact us or use Elvara Care; why we collect it; who receives it; how long we keep it; and the rights you have under Egypt's Personal Data Protection Law (Law No. 151 of 2020). An Arabic version is published alongside it. If the two versions ever differ, the one more favourable to you applies.

The short version

  • We collect what we need to deliver your order and look after it afterwards: your name, mobile number, delivery address, email and what you bought.
  • We never see a bank card number. We accept Cash on Delivery and InstaPay only, and we will never ask for a card number, PIN or password.
  • We never receive the health and activity data your tracker records. It goes from the device to the manufacturer's app, not to us.
  • We do not sell your personal data.
  • We send marketing only if you agreed to it, and every message lets you stop.
  • You can ask to see, correct or delete your data at any time by writing to info@elvaraeg.com.

1. Who is responsible for your data

ELVARA ("we", "us") runs elvaraeg.com and decides how the personal data described here is used, which makes us its controller under Law No. 151 of 2020.

Email: info@elvaraeg.com
Phone: +20 11 16652035
Address: Rabea, First 6th of October, Giza, Egypt

2. What we collect

  • When you order: your name, mobile number, delivery address and governorate, email address if you give one, the products, prices and discounts on the order, any note you add, the payment method and the delivery status.
  • When you pay by InstaPay: the sender name or InstaPay address shown on the transfer and its reference, so we can match the payment to your order. We do not receive your bank card details or your InstaPay PIN.
  • For every device we ship: its serial number, recorded against your order, so we can prove the device is original and handle warranty and Elvara Care claims.
  • When you ask for a return, a repair or an Elvara Care replacement: your description of the problem, the photos or videos you send, and the device's serial number.
  • When you contact us by email, the chat on our website, Instagram, TikTok, Facebook or phone: your messages and whatever you choose to tell us.
  • If you create an account: your email address and the addresses and orders saved in it.
  • When you browse the site: your device and browser type, IP address, approximate location worked out from the IP address, the pages and products you view, what you add to your cart, and how you reached us (for example, from an ad). Through Microsoft Clarity we also record how visitors scroll, tap and move around our pages, as recordings and heatmaps.

3. What we do not collect

  • Your health data. Heart rate, sleep, activity and any other measurements your WHOOP, Amazfit, Garmin or Google Fitbit device records are sent to that manufacturer's app and handled under the manufacturer's own privacy policy. ELVARA does not receive them and cannot see them. If you send us a screenshot from your app to get help, we use it only for that request.
  • Bank card numbers, PINs or passwords. We never ask for them. Anyone who asks for them in our name is not us.
  • Sensitive personal data, such as health conditions or religious belief. We do not ask for it. If you choose to mention a health condition when asking which product suits you, we use it only to answer you.

4. Why we use your data

  • To deliver your order: to confirm the order and address with you by phone or message, pass the parcel to the courier, collect payment, and send order and delivery updates. This is needed to perform our contract with you.
  • To look after you after the sale: returns, exchanges, repairs, the warranty rights the Consumer Protection Law (Law No. 181 of 2018) gives you, and Elvara Care claims.
  • To keep accounts and issue invoices and receipts, as Egyptian tax law requires.
  • To prevent fraud and misuse, for example repeated fake orders or refused cash-on-delivery parcels.
  • To improve the website, by measuring which pages work and finding what goes wrong.
  • To measure and show our advertising, including showing our ads to people who visited our site.
  • To send you offers and news, only if you agreed.

Depending on the purpose, we rely on your consent, on the need to perform our contract with you, on our legal obligations, or on our legitimate interest in running and protecting the business. Where we rely on consent, you can withdraw it at any time.

5. Who receives your data

We share only what each recipient needs for the purpose listed:

  • Panther Express, our courier: your name, mobile number, address, governorate, a description of the parcel and the amount to collect.
  • Shopify, the platform our store, checkout, chat and customer accounts run on. Shopify processes the data for us and may also use some of it for its own services, such as fraud prevention across stores, under the Shopify Consumer Privacy Policy.
  • Klaviyo, our email service: your email address, your name and your order and browsing activity, to send order emails and, if you agreed, marketing emails.
  • Advertising and analytics platforms: Meta (Facebook and Instagram), Google (including Google Analytics and Google Merchant Center), TikTok and Microsoft Clarity. They receive browsing events such as page views, add-to-cart actions and purchases, linked to cookies or device identifiers. They use this data to measure our ads and our website, and may also use it under their own privacy policies.
  • The product's manufacturer or its authorised service partner, only when a warranty or Elvara Care claim needs them: the serial number, the fault description and the photos.
  • Our own order and accounting system, which runs on cloud servers used only by ELVARA, and its backups.
  • Government authorities, when the law requires it. This includes the Egyptian Tax Authority for invoices and receipts, and courts or law enforcement acting on a valid legal request.
  • A buyer of our business, if the business is ever sold, on the condition that your data stays protected as this policy describes.

We do not sell your personal data to anyone.

6. Cookies and similar technology

  • Essential cookies keep your cart, your language choice, checkout and security working. The site cannot work without them.
  • Analytics (Google Analytics and Microsoft Clarity) show us how the site is used, so we can improve it.
  • Advertising (Meta, Google and TikTok) measure our ads and let us show our ads to people who visited the site.

You can block or delete cookies in your browser settings; the store will still work, though some features may not. You can also limit ad personalisation in your Google, Meta and TikTok account settings.

7. Where your data is stored

Several of the providers above (Shopify, Klaviyo, Meta, Google, TikTok, Microsoft and our cloud hosting) store data outside Egypt, including in Europe and the United States. We send each provider only what it needs, and we use providers that protect the data with contractual and security safeguards. Where the law requires your consent or another legal condition for such a transfer, we meet it.

8. How long we keep it

  • Orders, invoices, payment and delivery records: for as long as Egyptian tax and commercial law requires. After that we delete them or make them anonymous.
  • Device serial numbers, warranty and Elvara Care records: for as long as the device's warranty or plan runs, plus 12 months to settle any claim.
  • Messages with us: up to 24 months after the conversation ends, unless they relate to an open claim.
  • Marketing: until you unsubscribe. After that we keep only your email or number on a do-not-contact list, so that we do not message you again.
  • Your account: until you delete it or ask us to.
  • Website analytics: Microsoft Clarity keeps recordings for about 30 days; Google Analytics data is kept for no longer than 14 months.

9. How we protect it

Only the staff who need your data can reach it, and each person uses their own login. Our store and systems use encrypted (HTTPS) connections. Our courier may use your details only to deliver your parcel. No system is perfectly secure. If a breach of your personal data happens, we will notify the Personal Data Protection Center and tell you, within the time limits the law sets. We will explain what happened and what you can do.

10. Your rights

Under Law No. 151 of 2020 you have the right to:

  • know what personal data we hold about you, and get a copy of it;
  • withdraw any consent you gave us, such as for marketing, at any time;
  • have inaccurate or incomplete data corrected or updated, and ask for your data to be erased;
  • ask us to limit how we use your data to a specific purpose;
  • be told about any breach of your personal data;
  • object to our use of your data, or its results, where it conflicts with your fundamental rights and freedoms.

To use any of these rights, write to info@elvaraeg.com with the subject "Privacy request", or message us on any of our channels. To make sure we give your data only to you, we may ask you to confirm the mobile number or email used on your order. Requests are free, and we reply within 30 days, or sooner where the law requires. Some records we must keep by law, such as invoices, even if you ask us to delete them. If that happens, we will tell you which records and why.

If you are unhappy with how we handled your data, please tell us first so we can put it right. You also have the right to complain to Egypt's Personal Data Protection Center.

11. Marketing messages

We send offers and news by email or other messages only if you agreed, for example by ticking the box at checkout or signing up on our site. Every marketing email has an unsubscribe link, and you can also ask us to stop at any time. Messages about an order you placed, such as confirmation, delivery and warranty messages, are not marketing, and we send them whether or not you subscribed.

12. Children

Our store is not directed at anyone under 18. Orders must be placed by an adult, such as a parent or guardian. If we learn that we hold personal data of a child without a guardian's consent, we will delete it.

13. Links to other websites

Our site links to other websites, such as the manufacturers' apps and our social media pages. Their own privacy policies apply there, not this one.

14. Changes to this policy

If we change this policy, we will publish the new version here with a new date. If a change is significant, we will also tell customers by email or with a notice on the site.

15. Governing law

This policy is governed by the laws of the Arab Republic of Egypt, including the Personal Data Protection Law (Law No. 151 of 2020) and the Consumer Protection Law (Law No. 181 of 2018).