Privacy Policy
This implementation draft requires legal review. The website operator must replace every bracketed placeholder before publication.
1. Who we are
This website presents Primostone’s natural-stone products, facilities, projects, and export services. The data controller is [LEGAL ENTITY NAME], with registered address at [REGISTERED ADDRESS]. The published operational location is Plot No. 21, Industrial Area, Third Settlement, New Cairo, Cairo, Egypt. Privacy questions may be sent to privacy@primostone.com.
2. Information we process
- Enquiries: name, email address, optional phone number and company, message, and submission time.
- Newsletter: email address, subscription status and dates, source page, referral path, and submitted UTM campaign fields. We do not intentionally store query strings in source or referral paths.
- Analytics: on a first visit, before you record a preference, page path, date, view count, IP address, country code supplied by our delivery infrastructure, and browser user-agent may be recorded in first-party statistics. Google Analytics may also receive online identifiers, device/browser details, approximate location, and interaction data. A saved rejection disables future analytics collection.
- Experience analytics: Microsoft Clarity may process interaction, performance, device, and session-recording information from the first page load, before you record a preference. Form fields are configured for masking and our custom events do not include form contents. A saved rejection disables future Clarity collection where supported.
- Security and diagnostics: IP address and browser information may be used transiently for rate limiting. Browser error reports may store error details, page path, user-agent, and a redacted stack trace. Cloudflare Turnstile may process device, network, and challenge information when configured on the contact form.
- Staff administration: authorized staff accounts contain account and contact fields. Administrative audit logs may include the staff user, action, IP address, approximate location, user-agent, resource, and timestamp.
- Uploaded content: authorized staff may upload website images and related titles, captions, and categorization metadata.
Please do not include special-category or other sensitive personal information in a general enquiry unless it is genuinely necessary.
3. Why we use information and our legal bases
- To answer enquiries and take steps requested before entering a business relationship: contractual necessity or steps at your request.
- To send newsletter communications: consent. You may unsubscribe at any time.
- To secure, troubleshoot, administer, and improve the service: our legitimate interests in a reliable and secure website, balanced against visitor rights.
- Analytics and experience technologies can start before you make a choice. The operator must confirm and document the applicable legal basis for this pre-choice processing: [LEGAL BASIS FOR PRE-SELECTION ANALYTICS]. Your saved preferences control subsequent collection, and a rejection disables these technologies for future visits.
- To comply with applicable recordkeeping, legal claims, and regulatory duties: legal obligation or legitimate interests, as applicable.
4. Cookies and similar technologies
Django session and CSRF technologies support sessions and form security. Our consent cookie stores only your category choices, timestamp, and policy version. Google Analytics, Microsoft Clarity, and first-party visitor statistics operate only after the relevant choice. See the Cookie Policy or use .
5. Service providers and disclosures
Information may be processed by hosting and infrastructure providers; MEGA S4 object storage for website media and database backups; ip-api.com for approximate location of staff administrative activity; Cloudflare Turnstile when configured; Google Analytics; Microsoft Clarity; and email or communications providers used when staff respond. Social-network, WhatsApp, Google Maps, and email links are outbound links: those services receive information when you choose to follow them. We may also disclose information where legally required or in connection with legal claims or a business reorganization.
6. International transfers
Some providers may process data outside your country, including locations without equivalent data-protection laws. The operator must confirm the providers, processing locations, and safeguards actually used, such as adequacy decisions or approved contractual clauses: [INTERNATIONAL TRANSFER SAFEGUARDS].
7. Retention
First-party visitor statistics are configured for deletion after 90 days. Consent choices remain in the browser for up to six months. Frontend errors, enquiries, newsletter records, staff accounts, audit logs, and backups remain until deleted through operational processes; the operator must approve and document exact periods: [RETENTION SCHEDULE]. We retain information only as long as needed for its purpose, legal duties, disputes, and enforcement.
8. Security
We use access controls, CSRF protection, secure production cookies, HTTPS assumptions, rate limiting, data minimization, and restricted staff administration. No internet service is completely secure.
9. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Contact privacy@primostone.com. You may complain to [RELEVANT SUPERVISORY AUTHORITY]. We may need to verify your identity before fulfilling a request.
10. Children
This business website is not directed to children, and we do not knowingly solicit their personal information.
11. Changes and contact
We may update this policy and will change the version and date above when we do. Material changes will be highlighted where appropriate. Contact: privacy@primostone.com, [LEGAL ENTITY NAME], [REGISTERED ADDRESS].