Privacy Policy

Last updated: 28 September 2026

This Policy explains what personal data we collect when you use https://10point8.com (the “Site”), how we use and protect it, and your rights. We process personal data in line with Egypt’s Personal Data Protection Law No. 151 of 2020.

1) Who we are

Data controller: 10point8 (trading as “10.8”), an online cosmetics and personal-care store
Address: Al-Ahram Metro Station St., Heliopolis (Masr El-Gedida), Cairo, Egypt — next to Milad Raouf Jewelry
Privacy contact: info@10point8.com | Phone / WhatsApp: (+20) 010 8009 6770

2) Personal data we collect

Identity and contact: name, email address, phone number, billing and delivery addresses.
Account: login details (passwords are stored encrypted), preferences, wishlist and order history.
Orders and payments: order number, products, amounts, payment method and payment status, and the transaction reference returned by our payment provider. We do not collect or store full card numbers, CVV, card PIN, or wallet PIN / OTP codes.
Delivery: courier tracking information and proof of delivery.
Technical: IP address, device and browser information, pages viewed, and cookie or pixel identifiers.
Communications: messages you send us, reviews, and your marketing preferences.

3) How we collect it

From you: when you create an account, check out, contact us or subscribe.
Automatically: through cookies, pixels and similar technologies when you browse the Site (see our Cookie Policy).
From service providers: our payment provider (payment status and fraud-check results), couriers (delivery status) and analytics or advertising tools.

4) Why we use it and on what basis

To perform our contract with you: to process, pay for, deliver, cancel, return and refund orders, and to provide customer support.
To meet legal obligations: accounting, tax, consumer-protection, anti-fraud and payment-regulation requirements.
For our legitimate interests: to keep the Site and payments secure, prevent fraud and misuse, and improve our store.
With your consent: marketing messages and advertising cookies. You can withdraw consent at any time.

5) Payments through Kashier — we do not store card data

Online payments are processed by Kashier (Kashier Electronic Payments), an Egyptian electronic-payment service provider working with partner banks under the rules of the Central Bank of Egypt. Card details are entered directly on Kashier’s secure, PCI DSS-compliant payment page and are never sent to or stored on our servers.
Apple Pay payments are tokenised by Apple and your bank; your actual card number is not shared with us. Mobile-wallet payments (such as Vodafone Cash) are confirmed through your wallet provider’s own verification, and we never ask for your wallet PIN.
To authorise the payment and prevent fraud, we share only what is needed with Kashier: your name, email, phone number, billing/delivery details, order number and amount, and technical risk signals such as IP address. Kashier, its partner banks, the card networks (Visa, Mastercard) and your issuing bank or wallet provider process this data to complete, verify, refund or investigate the payment.

6) Who we share data with

We share personal data only with parties that need it to provide our service, under confidentiality obligations:

Payment: Kashier, its partner banks, card networks and wallet providers — for payments, refunds, fraud checks and payment disputes (chargebacks).
Delivery: courier partners — for delivering orders, collecting returns and recording proof of delivery.
Technology: hosting, email and IT providers that operate and secure the Site.
Analytics and advertising: as described in Section 7.
Authorities: courts, regulators (including the Central Bank of Egypt, through our payment provider) or law-enforcement bodies, when the law requires it or to protect our legal rights.

We do not sell or rent your personal data, and we do not share it with third parties for their own marketing.

7) Analytics and advertising

With your consent, we use Google Analytics 4, Google Ads (enhanced conversions) and the Meta (Facebook/Instagram) Pixel and Conversions API to measure visits and the performance of our ads. This may involve cookies, pixels and hashed (encoded) identifiers such as a hashed email or phone number. We do not send these tools data that we know relates to people under 18, or any sensitive personal data. You can change your choices through our cookie settings or your ad-platform settings.

8) International transfers

Some providers (for example, cloud, analytics or advertising services) may process data outside Egypt. When this happens we use appropriate safeguards, such as contractual protections, in line with Egyptian law.

9) How long we keep data

Order, payment and delivery records (including sales receipts): at least 18 months from the transaction date for payment-dispute purposes, and up to the period required by Egyptian tax and accounting law (typically 5 years).
Account data: while your account is active; after you close it, we delete or anonymise it unless we must keep it by law.
Marketing data: until you unsubscribe or withdraw consent.
Security logs: usually 12–24 months.

10) Security

We protect data with HTTPS (TLS) encryption across the whole Site, restricted access on a need-to-know basis, strong passwords, security updates and monitoring. Card data is handled only by our PCI DSS-compliant payment provider. No system is 100% secure; if a breach affects your data, we will notify you and the competent authority as required by law.

11) Your rights

Under Egyptian law, you may ask to access your personal data, correct or update it, delete it, restrict or object to its processing, and withdraw your consent. To make a request, email info@10point8.com. We may ask you to verify your identity, and we will respond within the period set by law. Some data (for example, invoices) must be kept even after a deletion request.

12) Children

The Site is intended for people aged 18 or over. We do not knowingly collect data from minors; if we learn that we have, we will delete it.

13) Links to other sites

Our Site may link to other websites or social media. We are not responsible for their privacy practices; please read their policies.

14) Complaints

If you have a concern about your data, please contact us first at info@10point8.com. You may also complain to Egypt’s Personal Data Protection Center.

15) Changes to this Policy

We may update this Policy from time to time. The current version is always published on this page with its “Last updated” date, and significant changes will be announced on the Site. This Policy is published in Arabic and English; if there is any inconsistency, the Arabic version prevails.