Privacy Policy

Data We Collect

We may collect the following information when an account is created or our website, app, or services are used:

• Full name, phone number, and email address.
• Account and authentication information, including OTP verification codes.
• Booking, viewing-request, and requested-service details, including reference numbers, request status, and appointments.
• Files, photographs, videos, contracts, and invoices uploaded to, or made available through, the customer portal.
• Images of payment receipts or bank transfer confirmations voluntarily uploaded from the user’s photo library.
• Transaction and payment status information, without storing complete bank card details.
• Technical information necessary to operate the website and app, protect accounts, and prevent misuse.

The app does not collect the user’s geographical location and does not request access to the camera.

How We Use the Data

We use personal data to:

• Create user accounts and verify user identity.
• Process, manage, and track bookings and viewing requests, and link them to the customer account.
• Operate the customer portal and provide event details, photographs, videos, contracts, invoices, and private files.
• Process payments and verify payment receipts or bank transfers.
• Send booking confirmations and status updates.
• Send offers and marketing notifications, subject to the permissions available to the user.
• Provide technical support and respond to enquiries.
• Protect accounts and prevent fraud or unauthorised use.
• Comply with legal and regulatory obligations.

Electronic Payments

Electronic payments are processed through Paymob and Fawry.

Bank card information is entered and processed directly by the payment service providers. Arivana does not store complete bank card details within its systems.

Payment processing is also subject to the privacy and security policies of the relevant payment service provider.

Verification Codes

Email or Misr SMS may be used to send OTP verification codes and other messages necessary for signing in and securing user accounts.

A user’s email address or phone number may be shared with the relevant service provider only to the extent necessary to deliver these messages.

Photo Library

The app requests access to the photo library only when the user chooses to upload a payment receipt, bank transfer confirmation, or a file related to their service.

The app does not access photos without the user’s permission and does not use the camera. Users can manage photo access through their device settings.

Notifications

The website or app may send messages and notifications concerning booking confirmations and status updates, as well as promotional offers and marketing communications.

Users may disable app notifications or modify notification permissions through their device settings.

Data Sharing

We do not sell personal data or share it for independent commercial purposes. Necessary data may be shared only with service providers that assist us in operating the service, including:

• Paymob and Fawry for payment processing.
• Misr SMS and email providers for verification codes and service messages.
• Hosting, storage, infrastructure, and technical service providers.
• Governmental, regulatory, or judicial authorities where disclosure is legally required.

Data sharing is limited to what is necessary to provide the service or comply with legal obligations.

Data Retention

We retain account data while the account remains active and thereafter for the periods required under Egyptian law for booking and financial records.

When account deletion is requested, we will begin deleting the account and its associated data within no more than 30 days, except for information that must be retained for legal or accounting purposes, fraud prevention, or dispute resolution.

Account and Data Deletion

Users can request deletion of their account and associated data through the Delete Account option within the app or through the account deletion request page on the official website.

We may verify the identity of the account holder before processing the request. The user will be notified when the request is received or completed.

Account deletion does not require the deletion of records that the company is legally required to retain. Such records will be used only for the legal purposes that require their retention.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, use, alteration, or disclosure.

However, no electronic system can guarantee absolute security. We therefore review and improve our security measures on an ongoing basis.

User Rights

Users may request to:

• Access the personal data held about them.
• Correct inaccurate information.
• Delete their account and associated data, subject to legal retention obligations.
• Withdraw photo or notification permissions through their device settings.
• Contact us with any privacy-related enquiry or complaint.

Age Requirement

The website and app are intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18.

Changes to This Policy

We may update this Privacy Policy when the website or app services or legal requirements change. The revision date at the top of this page will be updated, and users may be notified of material changes through the app or their registered contact details.