POLICY AND TRUST CENTRE · LAST UPDATED 10 SEPTEMBER 2026
Privacy Notice
How NEXQORA handles personal data on the website and products.
Scope and controller
NEXQORA operates this public website. This notice applies to contact and quotation requests, product accounts and contracted services.
Data and purposes
We may process name, contact details, company information and product needs to respond, prepare a proposal, perform a contract, protect the service or meet applicable obligations. Public forms must not be used for payroll, identity or health data.
Payment preference and payment data
A quotation request may retain your preferred payment route to prepare the offer and invoice. The public site does not request card numbers, PINs, OTPs, bank-account or wallet details, and selecting Visa does not mean card payment is active. Correct collection instructions are provided only in the invoice or an approved contractual channel.
Public website forms
Contact and quotation requests are stored in a private server location with a reference and review status. We use a short-lived form token, origin checks, a bot-trap field and submission rate limits. A raw IP address is not stored in the lead record.
Choices and rights
You may request access, correction, deletion, objection or withdrawal of marketing consent through info@nexqora-alfaridgroups.com. We handle requests under applicable law and lawful restrictions.
Security and transfers
We apply organisational and technical safeguards appropriate to the data. We share data only where legitimately needed, such as hosting, support or contract performance, with appropriate safeguards.
Egyptian framework and claim limits
These practices are drafted with regard to Egyptian Personal Data Protection Law No. 151 of 2020 and Executive Regulations No. 816 of 2025, as applicable to actual processing. This notice alone does not mean NEXQORA holds a government licence or certification, or automatically complies with every processing case; entity details, records, contracts and specialist assessment must be completed before any operation requiring them.
Marketing and third parties
We will use your data for direct marketing only on an appropriate basis and with a clear opt-out path. Before enabling data with hosting, support, communications or integration providers, we assess their role and contractual and security scope.
Website-request retention
The operational default for public website requests is deletion after 90 days unless another period is needed for a proposal, contract, claim or documented legal obligation. Deletion or correction may be requested through the published contact channel.