Privacy Policy

1. Who we are

Just2Pay for Technical Financial Payments - S.A.E. ("Just2Pay", "we", "us") operates Just2Pay websites, SAJ merchant software, storefronts, selling and payment links, dashboards, order and inventory tools, integrations, and related support services (together, the "Services"). Commercial Register No. 156229 | Egyptian Joint Stock Company (S.A.E.) | Tax ID 602-136-626. Registered office: 1171, 9th Street, Mokattam, Cairo, Egypt. Privacy contact: infosec@just2pay.net.

2. Scope and roles

This Policy applies to website visitors, merchant applicants and users, authorized merchant staff, shoppers using a merchant storefront or link, and people who contact us. Depending on the activity, Just2Pay may act as a data controller for its own accounts, security, billing, compliance and service operations; as a processor/service provider for customer and order data handled on a merchant’s instructions; or as an independent controller with a payment, shipping, identity, analytics or financing partner where each party determines its own legally required processing. The merchant remains responsible for its own customer notices, lawful instructions, products and direct marketing.

3. Data we collect

We may collect: identity and contact details; account credentials and access logs; merchant corporate, tax, commercial-register, ownership, authorized-signatory, KYC/KYB and settlement details; product, catalog, pricing, inventory and store content; shopper contact, delivery, order, invoice, return and support data; transaction amount, method, status, provider and reference data; uploaded manual-transfer evidence; device, browser, IP, cookie and usage data; communications and support records; consent and audit records; and information supplied by connected providers. We do not state that we store full payment-card numbers. Card credentials should be entered into the relevant authorized payment provider’s secure environment.

4. Why and on what basis we process data

We process data to provide and administer the Services and contracts; create accounts; verify merchants and prevent fraud; configure commerce, payment and delivery workflows; process orders, refunds and support; maintain security and audit trails; invoice and collect fees; meet legal, regulatory, tax, accounting and lawful-request obligations; improve performance; measure site usage; and send marketing where consent or another lawful basis permits. Depending on applicable law, processing may rely on consent, contractual necessity, legal obligation, protection of legitimate interests and other grounds recognized by Egyptian law. Optional analytics and advertising cookies are not activated before the visitor’s choice where consent is required.

5. Payments, offline methods and marketplace transactions

Provider-backed online payments are processed through the applicable bank, payment service provider or gateway. Cash on delivery is an offline collection workflow. A manual bank transfer or InstaPay proof is evidence submitted for merchant review and is not confirmation of payment by Just2Pay. For marketplace purchases, the merchant normally acts as seller of record and supplies the product, invoice, warranty and consumer remedy, while Just2Pay supplies platform and payment-enablement functions unless checkout expressly states otherwise.

6. How we share data

We may share necessary data with the relevant merchant; payment, banking, fraud, identity and KYC partners; shipping and fulfillment providers; hosting, cloud, communications, analytics, customer-support, security and professional advisers; financing providers only where the merchant requests the service and required consent/authority exists; corporate transaction counterparties under safeguards; and public authorities where legally required. We do not sell personal data as an ordinary business activity. Service providers receive only data reasonably needed for their functions and are contractually restricted where required.

7. International transfers

Some providers may process data outside Egypt. Before making a restricted international transfer, we apply the approvals, permits, contractual safeguards and other measures required by Egypt’s Personal Data Protection Law No. 151 of 2020 and its applicable executive framework. Transfer destinations and safeguards are maintained in Just2Pay’s internal processing and provider records.

8. Retention

We retain data only for as long as needed for the purposes above and applicable limitation, tax, accounting, anti-fraud, dispute, payment-network and regulatory requirements. Account and commerce data is retained while the account is active and afterward for the period reasonably necessary to close the account, support lawful claims and meet recordkeeping duties. Transaction, invoice, KYC and audit records are retained for the period required by applicable Egyptian law, regulators and contracted payment providers. Cookie records follow the Cookie Policy. Data may be retained longer for an active dispute, investigation, legal hold or lawful authority request, then deleted or anonymized.

9. Security

We use proportionate organizational and technical measures, including access controls, role separation, encryption in transit, protected storage, logging, monitoring, backups, vulnerability management and incident procedures. No system is completely secure. Users must protect credentials, enable available security features and promptly report suspected misuse.

10. Your rights

Subject to Egyptian law and lawful exceptions, a person may request information about processing; access or a copy; correction or completion; deletion; restriction or objection; withdrawal of consent without affecting earlier lawful processing; and review of certain automated outcomes where applicable. We may verify identity and may direct a shopper to the relevant merchant where that merchant controls the data. Submit requests to infosec@just2pay.net. A person may also complain to the competent Egyptian data-protection authority through its officially published channels.

11. Marketing and children

Electronic marketing will include an appropriate choice to unsubscribe, and consent records will be maintained where required. The Services are intended for adults and lawful businesses. We do not knowingly offer merchant accounts to persons under 18. A merchant selling to minors must establish its own lawful basis and protections; if we learn that children’s data was collected unlawfully, we will take appropriate action.

12. Changes and contact

We may update this Policy for legal, product or operational changes. Material changes will be communicated through the website, account or other suitable channel and will show a new effective date. Contact: infosec@just2pay.net; 1171, 9th Street, Mokattam, Cairo, Egypt.