1. Who is responsible
Mohamed Reda Legal Foundation, at 55 Sheraton St, Hurghada, Red Sea, Egypt, operates this platform and acts as the data user or controller for the activities described here. Contact: info@redalegal.com, +20 122 526 8605. The entity's final registration particulars and designated Data Protection Officer contact are pending formal verification and must be inserted before production approval.
2. Scope
This notice covers visitors, prospective clients, clients, account holders, authorized Foundation personnel, representatives, and people whose information is supplied in connection with a legal inquiry. A separate engagement letter may provide additional matter-specific terms.
3. Data we collect
We collect information you provide, information created while assessing or delivering services, and limited technical information needed to operate and secure the platform.
- Identity and contact details, account credentials, profile details, and communication preferences.
- Consultation requests, correspondence, engagement records, and information later supplied through an office-approved secure channel.
- Internal content submissions from authorized Foundation personnel, feedback, optional screenshots, and social links.
- Authentication, session, device, browser, page-path, security, and audit information.
- A random first-party browser identifier used only to calculate aggregate unique-visitor and visit totals; the traffic counter does not store an IP address, user agent, or visited route.
- Payment or billing records if a paid engagement is later agreed outside or through the platform.
4. Purposes and legal grounds
Depending on the activity and applicable law, processing is used to take requested pre-contract steps, perform an engagement, meet legal and professional duties, protect the platform and legal rights, administer accounts, respond to requests, improve services, and communicate where consent is required. Optional marketing requires a separate choice and is not currently enabled.
- Account creation, authentication, two-factor authentication, and access control.
- Conflict checking, consultation triage, engagement administration, and legal service delivery through approved channels.
- Security monitoring, abuse prevention, troubleshooting, and legal-claims handling.
- Publishing Foundation-reviewed legal resources and administering internal content review.
- Complying with court, regulatory, tax, professional, and lawful authority requirements.
5. Sensitive and confidential information
Legal matters can contain sensitive, criminal, health, financial, family, or confidential information. Do not send confidential documents through the public contact or feedback forms. Submission of a public form does not create an attorney-client relationship. Matter information is requested only after the office confirms an appropriate secure channel and engagement process.
6. Sources
We usually collect data directly from you. Matter data may also come from an authorized representative, another party, courts, public authorities, public registers, experts, or lawfully available sources. When data is obtained indirectly, notice will be provided as required, subject to lawful exceptions and professional confidentiality.
7. Recipients and processors
Access is limited to authorized personnel, assigned lawyers, approved experts, and trusted technical service providers that need the information for their role. These providers support authentication, secure hosting, database storage, file storage, transactional email, and privacy-conscious media embeds when activated. Information may also be disclosed to courts, authorities, counterparties, or advisers where required for a matter or by law. No personal data is sold.
8. International processing
Some technology providers may process data outside Egypt. The production hosting region, destination countries, contractual safeguards, and any required authorization are under formal verification. Production approval must not be issued until the transfer register and applicable PDPC requirements are completed.
9. Retention
Data is kept only for the period needed for the stated purpose, an active engagement, legal and professional record duties, dispute limitation periods, security, and legal holds. Consultation, account, feedback, content, and audit records follow the Foundation retention schedule, which must receive final Egyptian legal and data-protection review before production approval. A legal hold suspends deletion.
10. Security
Controls include row-level database access, role-based authorization, encrypted transport, managed authentication, email verification, TOTP two-factor authentication for sensitive administrative access, restricted uploads, and audit logging. No system can guarantee absolute security. Suspected incidents are assessed, contained, documented, and notified where law requires.
11. Your rights
Subject to applicable law and lawful exceptions, you may request information about processing, access, correction, deletion, restriction or cessation, objection, portability where applicable, and withdrawal of consent without affecting earlier lawful processing. You may also complain to the Egyptian Personal Data Protection Center. We will verify identity before disclosing or changing account or matter data.
- Submit a request at /en/privacy-rights or email info@redalegal.com.
- Describe the request and the relevant account, matter, or interaction without sending unnecessary sensitive documents.
- Authorized representatives must provide evidence of authority. We may preserve information subject to legal hold or professional duties.
12. Automated decisions and children
The platform does not make solely automated decisions that produce legal or similarly significant effects. It is not directed to children. A guardian or properly authorized representative must handle services involving a minor, subject to applicable law and the engagement process.
13. Changes and complaints
Material changes will be versioned and communicated through the platform or an appropriate contact channel. Questions or complaints should first be sent to the contact above. You retain the right to approach the competent Egyptian data-protection authority.
14. Privacy-request submissions
When you submit a privacy request, the Foundation uses the supplied identity, contact, request-type, and explanatory details only to register, authenticate, assess, communicate about, and document the request. Submitting this form does not create a legal-services engagement.
- Access is restricted to Administrator accounts through role-based database controls and protected audit records.
- We may request proportionate identity evidence through a separate appropriate channel before disclosing, correcting, restricting, transferring, or deleting personal data. Do not attach identity documents to the public form.
- The request, decisions, status history, and minimum audit evidence are retained according to applicable legal duties, dispute requirements, security needs, and the Foundation retention schedule. Removing a request from the active queue does not erase its protected audit record.
- You may ask about the request, correct submitted contact information, or raise a complaint through the contact details in this notice.
- Submit a request through /en/privacy-rights. Processing remains subject to applicable Egyptian law, lawful exceptions, professional confidentiality, third-party rights, and legal holds.