Privacy policy

Last updated: 8 October 2026

This Privacy Policy explains how Buruj Materials for Trading and Distribution of Building Materials L.L.C., trading as Turqwaz (“Turqwaz”, “we”, “us”), collects, uses, shares and protects your personal data when you use turqwaz.com, the Turqwaz mobile app and our customer accounts (together, the “Platform”), including when you sign in with Google, Facebook or Shop. It also explains your rights under Egypt's Personal Data Protection Law No. 151 of 2020 (the “PDPL”).

1. Who we are

1.1 The controller of your personal data is Buruj Materials for Trading and Distribution of Building Materials L.L.C., which trades as Turqwaz and operates turqwaz.com, registered at 44B Talaat Harb Street, Qasr El Nil, Cairo, Arab Republic of Egypt.

1.2 For any privacy question or request — including to reach our Data Protection Officer — email info.turqwaz@gmail.com, call +20 122 299 2694, or write to us at the address above.

2. What data we collect

Category	Examples
Identity & contact	Name, phone number, email address, delivery and billing addresses.
Account & sign-in	Your customer-account email address, sign-in activity, and the details a sign-in provider shares when you choose to use one (see section 3).
Orders	Products, order history, reservations, returns, warranty claims and your messages with us.
Payment	Payment method and status. Full card numbers are handled by our payment and instalment providers — we never see or store them.
Installation (Supply & Apply)	Site-survey details and access information you provide for works at your premises.
Technical & usage	Device, browser, IP address, pages viewed and actions on the Platform, collected through cookies and similar technologies (see section 10).

3.1 You can create a Turqwaz account, or sign in to it, with your Google, Facebook or Shop account instead of a one-time code sent to your email. Using a sign-in provider is optional.

3.2 What we receive. When you choose Continue with Google and approve Google's consent screen, Google shares with us your email address, whether it is verified, your name and profile picture, and a unique account identifier, using Google's openid, email and profile permissions. Facebook shares your name, email address and an account identifier (and your profile picture, where available); Shop shares your email address. We never post to your social accounts, and we never receive your passwords, friends list, photos or messages, or request access to your contacts, emails, files, calendar or any other data in your Google or Facebook account.

3.3 What we keep. Our customer accounts run on Shopify. Shopify uses the information from the sign-in provider to confirm it is you and saves only your email address to your Turqwaz customer account. We do not store your profile picture.

3.4 How we use it. Only to create your account, sign you in securely, recognise you when you return, and send you messages about your orders and account. We send marketing only if you separately agree to it (see section 9).

3.5 How we share it. Only with Shopify, which provides our online store, customer accounts and sign-in on our behalf, and with authorities where the law requires. We do not sell information received from Google or Facebook, and we do not share it with data brokers.

3.6 Storage and protection. It is stored on Shopify's secure servers, sent over encrypted (HTTPS) connections, and accessible only to staff who need it to serve you.

3.7 Retention and deletion. We keep it while your account is open. You can disconnect Turqwaz at any time from your Google Account at myaccount.google.com/connections or in Facebook under Settings & privacy › Settings › Apps and websites. Disconnecting stops future sign-ins through that provider but does not delete your Turqwaz account — to delete your account and the data linked to it, follow section 8.3 or our Delete your data page.

3.8 We handle information received from Google APIs in line with the Google API Services User Data Policy.

4. How we use your data & legal basis

4.1 We use your personal data only for the following purposes, each with a lawful basis under the PDPL:

To fulfil your order (performance of a contract) — process purchases, deliver goods, provide Supply & Apply, issue invoices and handle returns and refunds.
To run your account (performance of a contract) — create and secure your account, sign you in and show your orders.
To meet legal obligations — tax, invoicing, consumer-protection and record-keeping duties under Egyptian law.
To provide customer service — answer your questions, complaints and warranty claims.
To keep the Platform secure and improve it (our legitimate interests) — prevent fraud and misuse and understand how the Platform is used.
For marketing — only with your consent (see section 9).

5.1 We do not sell your personal data. We share it only with parties who help us serve you, under appropriate safeguards:

Shopify — hosts our online store, checkout, customer accounts and sign-in;
couriers and logistics partners — to deliver your order;
payment and instalment providers — to process payments and instalment plans;
installation crews — for Supply & Apply works at your premises;
analytics and advertising partners (such as Google, Meta, TikTok and Pinterest) — through cookies and similar technologies, to measure and improve our website and ads (see section 10);
authorities — where the law requires.

6. International transfers

6.1 Our store runs on Shopify, so your data is stored and processed outside Egypt — Shopify and its sub-processors may store data in Canada, the United States and the European Union. Some of our payment, analytics and sign-in providers (such as Google and Meta) also process data outside Egypt. We transfer data only as the PDPL permits and rely on these providers' contractual and security safeguards.

7. How long we keep your data

7.1 We keep personal data only as long as needed for the purposes above:

Account data — while your account is open; deleted or anonymised after you ask us to close it;
Order, invoice and payment records — for the periods required by Egyptian tax and commercial law;
Marketing preferences — until you withdraw your consent;
Customer-service messages — as long as needed to resolve your request and any related warranty claim.

8. Your rights under the PDPL

8.1 Subject to the PDPL, you have the right to: know and access the personal data we hold about you; correct or update it; erase it where there is no lawful reason to keep it; withdraw your consent at any time; object to or restrict certain processing; and complain to the Personal Data Protection Centre.

8.2 To exercise any right, email info.turqwaz@gmail.com. We respond within the period required by law and may need to verify your identity first.

8.3 Delete your account and data. Email info.turqwaz@gmail.com from the address on your account with the subject “Delete my data” (step-by-step instructions are on our Delete your data page). We will delete or anonymise your account and the personal data linked to it — including any data received from Google, Facebook or Shop — except records the law requires us to keep, and confirm by email when it is done.

9. Marketing & your choices

9.1 We send electronic marketing only where you have consented, and every marketing message includes a simple way to withdraw that consent.

9.2 Withdrawing marketing consent does not affect the service messages we must send about your orders — such as order confirmations, delivery updates and invoices.

10. Cookies & tracking

10.1 We use cookies and similar technologies in four groups:

Strictly necessary — cart, checkout, sign-in and security;
Preferences — language and region;
Analytics — to understand how the Platform is used;
Marketing — cookies and pixels from partners such as Google, Meta, TikTok and Pinterest, to measure and personalise ads.

10.2 You can manage non-essential cookies through our cookie banner (where shown) and your browser settings. Blocking strictly necessary cookies may stop the cart, checkout or sign-in from working.

11. Data security

11.1 Our store runs on Shopify, which is certified PCI DSS Level 1 for payment data. Data is encrypted in transit (HTTPS), access is limited to staff and providers who need it, and we require our providers to protect it.

11.2 If a personal-data breach affects you, we will notify the Personal Data Protection Centre and, where required, you, within the time limits set by the PDPL.

12. Children

12.1 The Platform is intended for adults; you must be at least 21 to place an order. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes & how to contact us

13.1 We may update this policy from time to time. Material changes will be posted on the Platform and, where appropriate, notified to you. The “Last updated” date shows the current version.

13.2 Questions or requests? Email info.turqwaz@gmail.com, call or WhatsApp +20 122 299 2694, or write to us at 44B Talaat Harb Street, Qasr El Nil, Cairo, Egypt. You may also complain to the Personal Data Protection Centre.

This policy forms part of our Terms & Conditions and is governed by the laws of the Arab Republic of Egypt · The Arabic version is the prevailing text.