Privacy Policy

1Who We Are

Engineering For Kids Egypt ("EFK Egypt," "we," "us," or "our") is an educational company that designs and delivers hands-on STEM and AI summer camp programmes for children aged 4 to 16. We operate across Alexandria and Cairo, Egypt.

EFK Egypt is the data controller responsible for the personal information collected through our website at efkegypt.com and through the camp registration and payment process.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. By registering for any of our programmes, you confirm that you have read and understood this policy.

2Information We Collect

We collect only the information that is genuinely necessary to deliver our services and keep families informed.

Information you provide directly

Information collected automatically

When you visit our website, our servers automatically record standard technical information including your IP address, browser type and version, the pages you visit, the time and date of your visit, and referring URLs. This data is used solely for maintaining service quality and security and is not linked to your personal registration details.

3How We Collect Your Information

We collect information through the following channels:

• Online registration form on our website when you book a camp place
• Payment processing via our third-party payment gateway (EasyKash), which notifies us of a successful transaction
• Direct communications when you contact us by email, phone, or WhatsApp with enquiries
• AI Chatbot on our website — conversations are processed in real time to answer your questions; we do not store chat transcripts linked to your identity
• Interest registration if you sign up to be notified about new camp locations or programmes

4How We Use Your Information

We use the information we collect exclusively for the following purposes:

• Processing your registration and confirming your child's place in the selected programme
• Sending booking confirmation via email and WhatsApp immediately after payment
• Communicating camp logistics — venue directions, start times, what to bring, schedule changes, and reminders
• Personalising the experience — ensuring instructors know your child's age, grade, and any relevant information you have shared
• Responding to your enquiries and providing customer support
• Improving our programmes — understanding which camps are most popular, analysing attendance patterns, and developing new content
• Financial administration — maintaining accurate payment records and processing refunds where applicable
• Legal compliance — meeting our obligations under Egyptian law

5Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity — processing your registration, managing your booking, and fulfilling our obligations as a service provider requires us to handle your personal information. Without it, we cannot provide the service.
• Legitimate interests — communicating service updates, maintaining security, and improving our programmes are in our and your legitimate interest, provided these activities do not override your rights.
• Consent — for optional activities such as appearing in published photographs, or receiving updates about future EFK programmes and events. You may withdraw consent at any time.
• Legal obligation — we may process and retain certain data as required by Egyptian financial, tax, or consumer protection regulations.

6Payment Data & Security

All payments are processed by EasyKash, a licensed Egyptian payment service provider. EasyKash operates in full compliance with PCI-DSS standards, the highest security certification in the payments industry.

We store only the payment reference number and transaction amount in our records, which are necessary for booking administration and refund processing.

7Children's Privacy

EFK Egypt serves children aged 4 to 16. We take the protection of children's data with the utmost seriousness.

• All registration must be completed by a parent or legal guardian aged 18 or over. Children do not register themselves.
• We collect only the minimum information about children that is necessary to deliver the programme (name, age/grade, school).
• Children's personal data is never used for marketing, profiling, or shared with any party outside those directly involved in delivering the camp.
• Photographs or videos involving children are handled with care — see Section 4. Parents may opt out at any time.
• We do not knowingly allow children to interact directly with our services in a way that would lead to independent data submission.

If you believe a child has submitted personal information without parental consent, please contact us immediately and we will delete it promptly.

8Sharing Your Information

We do not sell or share your data for commercial purposes. We share your information only with the following trusted partners, each of whom is bound by appropriate data protection obligations:

We may also disclose personal data if required by Egyptian law, court order, or to protect the safety of a child or other individual.

9International Data Transfers

Some of our third-party service providers process data outside Egypt. Specifically:

• Supabase stores data in the European Union (Ireland), which maintains high standards of data protection.
• Google Cloud infrastructure is hosted in the Middle East (Qatar) for our primary region and the EU (Belgium) for redundancy.
• Brevo is a French company operating under EU data protection law.
• Meta processes WhatsApp message delivery through its global infrastructure.

In all cases, we ensure that adequate contractual safeguards are in place and that transfers comply with applicable data protection requirements.

10Data Retention

We retain your personal data for as long as necessary to deliver our services and meet legal obligations:

• Active booking records — retained for 3 years after the camp date for administrative, financial, and legal purposes.
• Financial records (payment references and amounts) — retained for 7 years in accordance with Egyptian accounting and tax regulations.
• Marketing consent records — retained until you withdraw consent.
• Interest-list registrations — retained until the programme you expressed interest in launches or until you request deletion.
• Server logs — retained for up to 90 days for security and performance monitoring, then automatically deleted.

After the retention period expires, your data is securely and permanently deleted from our systems. You may also request earlier deletion — see your rights below.

11Cookies & Technology

Our website uses minimal technology to function correctly. Specifically:

• Session storage — used locally in your browser to remember your progress through the booking form. This data never leaves your device and is cleared when you close the browser tab.
• Local storage — used to remember your language preference (English or Arabic) across visits.
• No third-party tracking cookies — we do not use Google Analytics, Meta Pixel, or any other advertising or analytics trackers on this website.

12Your Rights

As a parent or guardian whose data we hold, you have the following rights:

• Right of access — request a copy of all personal data we hold about you and your child.
• Right to rectification — ask us to correct any inaccurate or incomplete information.
• Right to erasure — request deletion of your personal data, subject to any legal retention obligations.
• Right to restrict processing — ask us to limit how we use your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to withdraw consent — withdraw any previously given consent (e.g., photography consent) at any time without affecting the lawfulness of prior processing.
• Right to object — object to us processing your data on the basis of legitimate interests.

To exercise any of these rights, contact us at the details in Section 15. We will respond within 30 days. We may ask you to verify your identity before actioning a request.

13Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption on all web traffic (TLS 1.2+)
• Encrypted database storage with access control and audit logging
• Restricted admin access protected by strong authentication
• Regular review of third-party service providers' security practices
• No storage of payment card data on our systems at any point

While we take all reasonable precautions, no system is entirely immune to risk. In the unlikely event of a data breach that poses a risk to your rights, we will notify you promptly and take immediate remedial action.

14Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable law. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered families by email if the changes are significant

We encourage you to review this policy periodically. Your continued use of our services after any update constitutes acceptance of the revised policy. The current version is always available at efkegypt.com/privacy-policy.html.

15Contact Us

For any questions about this Privacy Policy, to exercise your rights, or to report a privacy concern, please reach out to us through any of the following channels. We aim to respond to all privacy-related enquiries within 5 business days.

Engineering For Kids Egypt
Antoniades International School, Alexandria, Egypt
Serving families across Alexandria and Cairo