Privacy Policy
Last updated: August 2026
This policy explains how Expand Franchise handles personal data that reaches us through expandfranchise.net: what is collected, for what purpose, who receives it, how long it is kept, and what rights you have over it. We collect no more than the purpose requires.
Scope of this policy
This policy covers the expandfranchise.net website and the data collected through it. It does not cover contact made away from the site — phone calls, WhatsApp conversations, or our pages on social platforms — as those platforms are governed by their operators' own privacy policies. Expand Franchise is responsible for the data collected through this website.
What data we collect
Data you give us yourself
The site asks you for information in two places only: the contact form on the Contact page, and the application form on the Careers page.
- From the contact form: your name, email address, phone number (optional), the category that describes you, and the message you write.
- From the application form: your name, contact details, the role applied for, years of experience, and the CV file you upload.
Data collected automatically
- Every message and application is recorded with the IP address it was sent from, the date and time, and the page it was sent from — for security and to limit automated repeat submissions.
- Visits are counted anonymously, as described in section 5.
The site does not ask for or collect payment card details, identity document numbers, or any sensitive data such as health, religious or political information.
Why we use this data
- To answer your enquiry and follow it up regarding your project or request.
- To assess job applications and contact applicants.
- To secure the site and prevent misuse of the forms.
- To understand, in aggregate, how much the site and its pages are visited.
We do not use this data for direct marketing, to build a profile of you, or to make automated decisions affecting you. We do not sell it, rent it, or share it with any third party for commercial or advertising purposes.
Our basis for processing
Anything you enter into a form reaches us on your own initiative and for an evident purpose — to make contact, or to apply for a role — and you may withdraw from that at any time. Data collected automatically rests on our legitimate interest in protecting the site from automated submission and abuse, and is the minimum that serves that purpose.
Cookies and visit statistics
This site uses no cookies that track or identify you, and no marketing or advertising trackers such as Google Analytics or the Facebook pixel.
No visitor-counting system runs on this site at all. We rely on Google Search Console reports, which show us the search terms that surfaced the site in Google results; nothing is loaded in your browser and nothing reaches you.
The fonts used on the site are served from our own server, so browsing the pages sends no request to any outside party on their account.
Who receives this data
We do not sell your data or share it for commercial purposes. Running the site and its email does require service providers, and these are the parties data may reach, and what reaches each of them:
| Party | Purpose | What reaches them |
|---|---|---|
| Our server hosting provider | Running the website's server | Data held on the server, by virtue of hosting it |
| Google Workspace | Hosting the company mailbox | The content of contact messages, job applications and CVs sent to us |
| Facebook's content delivery network | Displaying our post images on the News and Projects pages | When you open either page: your IP address, your browser type, and the page you are viewing |
We may disclose data where required to do so by applicable law or by an order from a competent judicial or regulatory authority.
Processing outside Egypt
Some of the providers above operate servers outside the Arab Republic of Egypt, so your data may be transferred to and processed in other countries whose data protection rules may differ from Egypt's. We choose established providers that commit to recognised data protection standards.
Data security
The whole site runs over an encrypted connection (HTTPS). Form data is submitted to our own server directly, with no third-party intermediary, and is then forwarded to the company mailbox. A copy of each message is held on the server so that no enquiry is lost if mail delivery fails; it sits in a location not reachable from the internet, and only a limited number of our staff can see it, in the course of their work.
That said, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of what you send us.
Job applications
The application form posts to our own server, exactly as the contact form does: no third-party form service receives your details or your CV, you need no account to apply, and you receive an automatic acknowledgement that your application arrived.
A CV usually carries more personal information than the contact form does, and we use it solely to assess your application. Before it is opened, the file is security-scanned: anything containing macros, scripts or embedded files is refused, and only PDF and Word are accepted. If your file is refused you are told why. If you would rather not upload a file to a website, you are welcome to reach us on WhatsApp instead.
How long we keep it
| Type of data | Retention |
|---|---|
| Contact messages in the company mailbox | As long as there is a business reason to follow up the enquiry or project |
| Job applications in the company mailbox | As long as there is a realistic prospect of returning to you with a suitable role |
| The CV copy held on the server | Ninety days, then deleted automatically |
| Submission records on the server | For operational and security purposes and to follow up enquiries |
You may ask us to delete your data, of any kind, at any time and without giving a reason.
Your rights
- To ask what personal data we hold about you.
- To ask us to correct anything inaccurate or incomplete.
- To ask us to delete it entirely.
- To withdraw your consent to its use, without affecting the lawfulness of what was done beforehand.
- To object to its processing for a particular purpose.
You can exercise any of these through our contact form or on WhatsApp, and we aim to answer every request within a reasonable time. We may ask you to confirm your identity first, so that your data is not disclosed to someone else.
Children's privacy
This site is aimed at professionals, investors and business owners. It is not directed at anyone under eighteen, and we do not knowingly collect their data. If we learn that a minor's data has reached us through the site, we delete it.
Links to external sites
The site links to sites and platforms we do not operate, such as our social media pages and our partners' websites. We are not responsible for the privacy practices of those sites, and we encourage you to read the privacy policy of each.
Changes to this policy
We may update this policy from time to time so that it continues to match what the site actually does. Any change is reflected in the "Last updated" date at the top of the page, and we encourage you to review it occasionally.
Contacting us about privacy
For any question or request about your data or this policy, reach us through our contact form or on WhatsApp.