Privacy Policy

Last updated: [13-7-2026]

Paragon Innovations (“we,” “us,” “our”) operates paragon-innovations.com, an online store for custom CNC-milled, laser-cut, and 3D-printed furniture and home decor, handcrafted in Alexandria, Egypt. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the rights available to you under Egyptian law, in particular the Personal Data Protection Law No. 151 of 2020 (“PDPL”) and its Executive Regulations issued under Prime Ministerial Decree No. 816 of 2025, which took effect on 2 November 2025.

By using our website, placing an order, subscribing to our newsletter, or joining our Loyalty Rewards or Affiliate Program, you agree to the practices described in this policy.

1. Who We Are (Data Controller)

Paragon Innovations acts as the data controller for personal data collected through this website, meaning we determine the purposes and means of processing your data.

Paragon Innovations 21 Riad Street, Zizinia, Alexandria, Egypt ๐Ÿ“ง paragoninnovationseg@gmail.com ๐Ÿ“ž (03) 5754411 / (+02) 01557502811

2. Information We Collect

a) Information You Provide Directly

  • Account & checkout details: name, email address, phone number, billing and shipping address, and payment information (processed by our payment provider; we do not store full card details on our servers)
  • Custom order details: dimensions, material, finish, and design preferences for customized furniture or decor
  • Newsletter subscription: your email address, if you opt in
  • Affiliate Program applications: name, contact details, portfolio/business information, and payout details
  • Loyalty Rewards account: purchase history and points balance
  • Communications: anything you share when contacting us

b) Information Collected Automatically

  • Cookies: used for cart functionality, session management, and preferences
  • Analytics data: pages visited, device/browser type, and general location, collected via Google Site Kit (which may include Google Analytics and Google AdSense)
  • Order and transaction data, automatically generated through our WooCommerce store platform

3. Legal Basis for Processing Your Data

Under Article 6 of the PDPL, we only process your personal data where one of the following legal bases applies:

  • Your consent โ€” for example, when you opt in to our newsletter or marketing communications
  • Performance of a contract โ€” to process your order, deliver products, and manage your account
  • Legal obligation โ€” to comply with Egyptian tax, commercial, and accounting requirements
  • Legitimate interest โ€” for example, to prevent fraud or improve site security, balanced against your rights
  • Establishment, exercise, or defense of a legal claim, where applicable

Where we rely on your consent (such as for marketing emails), that consent will always be requested separately from these Terms and this Privacy Policy, through a clear affirmative action (e.g. checking a box) โ€” never assumed or pre-selected. You may withdraw consent at any time (see Section 7).

4. How We Use Your Information

We use your information to:

  • Process and fulfill orders, including customized and made-to-order pieces
  • Communicate about order status, shipping, and support
  • Manage your account, Loyalty Rewards points, and Affiliate Program commissions
  • Send newsletters or promotions, only where you’ve opted in
  • Analyze and improve site performance
  • Detect and prevent fraud or misuse
  • Meet our legal, tax, and accounting obligations in Egypt

We do not sell your personal data to third parties.

5. Cookies

We use cookies to keep your cart active, remember preferences, and measure site performance through Google Site Kit (Analytics and, where applicable, AdSense). You can manage or disable cookies through your browser settings; disabling some cookies may affect checkout functionality.

6. Sharing & Cross-Border Data Transfers

We share personal data only with trusted parties necessary to run our business:

  • Payment processors, to handle transactions securely
  • Shipping/courier partners, to deliver your order
  • Google Site Kit (Analytics/AdSense), for analytics and, where applicable, advertising performance
  • Email service providers, for newsletters and order communications
  • Affiliate program partners, limited to data needed to track and pay commissions

Some of these providers (such as Google) may process data on servers located outside Egypt. Under the PDPL’s Executive Regulations, cross-border transfers of personal data are restricted and generally require a PDPC license/permit, an adequacy finding for the destination country, and/or your explicit consent. We take steps to work only with reputable international providers and are actively reviewing our data-transfer practices to align with these requirements as they come into force. If you have questions about a specific transfer, contact us using the details in Section 12.

7. Your Rights

Under the PDPL, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or outdated data
  • Request deletion of your data, subject to legal/accounting retention obligations
  • Object to or restrict certain processing activities
  • Withdraw consent at any time for anything based on consent (e.g. marketing emails, via the unsubscribe link or by contacting us)
  • Lodge a complaint with the Personal Data Protection Centre (PDPC), Egypt’s data protection regulator, if you believe your rights have been violated

To exercise any of these rights, contact us at paragoninnovationseg@gmail.com. We will respond within a reasonable timeframe in accordance with the Executive Regulations.

8. Data Retention

We retain personal data only as long as necessary to:

  • Fulfill the purpose it was collected for (e.g., completing and supporting your order)
  • Meet Egyptian tax and accounting record-keeping requirements
  • Resolve disputes or enforce our agreements

Once data is no longer needed for these purposes, we take steps to securely delete or anonymize it.

9. Data Security & Breach Notification

We apply reasonable technical and organizational measures to protect your data, including secure (HTTPS) connections and restricted access to customer information. In the event of a personal data breach that poses a risk to your rights, we will notify the PDPC within the timeframe required by the Executive Regulations, and will inform affected individuals without undue delay where required by law. No system is 100% secure, and we cannot guarantee absolute protection.

10. Children’s Privacy

Our website and products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Third-Party Links

Our website may link to third-party sites, including our Facebook, Instagram, and TikTok pages. We are not responsible for the privacy practices of external sites and encourage you to review their respective privacy policies.

12. Contact Us

For any questions about this Privacy Policy, your data, or to exercise your rights, contact:

Paragon Innovations 21 Riad Street, Zizinia, Alexandria, Egypt ๐Ÿ“ง paragoninnovationseg@gmail.com ๐Ÿ“ž (03) 5754411 / (+02) 01557502811

You may also contact Egypt’s Personal Data Protection Centre (PDPC), the regulator responsible for overseeing compliance with the PDPL, for independent guidance or to raise a concern.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, our services, or Egyptian legal requirements โ€” particularly as the PDPL’s licensing regime becomes fully enforceable on 1 November 2026. The “Last updated” date above reflects the most recent revision. We encourage you to review this page periodically.

This policy reflects Egypt’s Personal Data Protection Law No. 151 of 2020 and its Executive Regulations (Decree No. 816 of 2025) as generally understood at the time of drafting. Because the Executive Regulations introduce licensing requirements (including for cross-border data transfers and electronic marketing) with a compliance deadline of 1 November 2026, we strongly recommend having this policy โ€” and your underlying data practices โ€” reviewed by a qualified Egyptian legal professional to confirm whether your business requires a PDPC license or Data Protection Officer, and to ensure full compliance before that deadline.