Privacy Policy

Effective Date: 19-10-2025

1. Introduction

This Privacy Policy sets out how NAD (“we”, “us”, “our”) collects, processes, stores, shares, and protects your personal data when you visit our website, interact with us online or offline, or engage with NAD’s projects and services.

NAD operates across Egypt, the Gulf Cooperation Council (GCC), and international markets. Our privacy commitments comply with:

• Egyptian Personal Data Protection Law No. 151 of 2020,
• Executive Regulations issued by the Egyptian Data Protection Centre,
• General Data Protection Regulation (EU/UK GDPR),
• and applicable international privacy frameworks governing cross-border data handling.

By accessing our website or providing your information to NAD, you agree to the terms set forth in this Privacy Policy.

2. Who We Are

NAD is a real estate development company headquartered in Cairo, Egypt, with strategic operations across the Gulf and MENA region.
NAD’s mission is to deliver premium, sustainable developments and world-class experiences to clients and investors while maintaining the highest ethical and governance standards.
This Privacy Policy governs all digital properties owned or operated by NAD, including:

• NAD’s official website: www.nad.com.eg
  
• Digital project microsites and landing pages
• Email campaigns, CRM systems, and related mobile or online services

3. Types of Information We Collect

NAD collects only the data required to provide services, improve user experience, and comply with legal obligations.
The data we collect falls under three main categories:

a. Personal Data Provided by You

You may voluntarily share information when:

• Requesting information about NAD projects or properties
• Registering interest in a development or investment
• Signing up for newsletters, digital updates, or events
• Contacting NAD through our website, email, or phone
• Participating in surveys, forms, or marketing activities

Such data may include:

• Full name, title, and gender
• Contact details (email, phone number, address)
• Country of residence and nationality
• Occupation, company, or business title (for B2B engagements)
• Property preferences, investment interests, or project details
• Any information voluntarily provided in open communication

b. Data Collected Automatically

When you visit NAD’s website, certain data is automatically recorded by our servers or analytics tools, including:

• Internet Protocol (IP) address and geolocation
• Device information, operating system, and browser type
• Date, time, and duration of visit
• Referring URLs and navigation paths
• Clickstream data, search history, and interaction patterns

This helps NAD maintain performance, security, and user experience analytics.

c. Cookies and Tracking Technologies

NAD uses cookies, web beacons, and analytical tags to:

• Recognize returning visitors and remember preferences
• Monitor website performance and traffic patterns
• Deliver tailored marketing and advertising content
• Enhance security through fraud detection mechanisms

You may adjust cookie settings through your browser. However, disabling cookies may affect the site’s functionality.

4. Purpose of Data Collection

NAD uses your personal data for legitimate and defined purposes, including:

1. Client Communication: To respond to enquiries, provide project details, and deliver requested services.
2. Marketing and Updates: To send information about upcoming projects, promotions, and events, only where consent has been granted.
3. Service Improvement: To analyse user behaviour and improve NAD’s website, design, and communications.
4. Contractual Performance: To fulfil agreements related to project registration, investment follow-up, and post-sales services.
5. Legal Compliance: To meet obligations under Egyptian, GCC, and international data laws, tax, and audit requirements.
6. Fraud Prevention and Security: To verify identities, prevent unauthorised access, and protect NAD’s systems.
7. Business Intelligence and Analytics: To evaluate engagement metrics, customer satisfaction, and commercial growth opportunities.

NAD does not use personal data for automated decision-making or profiling that produces legal or significant effects without explicit consent.

5. Legal Grounds for Processing

NAD processes personal data under one or more of the following lawful bases:

• Consent: When you have explicitly agreed to receive marketing or communication materials.
• Contractual Necessity: When processing is required to provide a service or execute a transaction.
• Legal Obligation: When mandated by Egyptian or international law.
• Legitimate Interests: When processing supports NAD’s operational, security, or commercial objectives without infringing individual rights.
• Vital Interest: When processing is necessary to protect an individual’s safety or data integrity.

6. Data Sharing and Third Parties

NAD does not sell or lease personal data.
However, we may share limited information under controlled conditions with:

• Service Providers: Firms that support NAD’s operations such as marketing, web hosting, data analytics, CRM management, and communication services.
• Affiliated Companies: NAD subsidiaries or regional offices that assist in project delivery.
• Legal and Regulatory Authorities: When required by law, court order, or investigation.
• Business Partners: Contractors or consultants involved in legitimate NAD collaborations or investment projects.
• Professional Advisors: Lawyers, auditors, and compliance specialists assisting in governance and reporting.

All recipients are bound by contractual confidentiality and data protection obligations consistent with NAD’s standards.

7. Cross-Border Data Transfers

NAD may transfer personal data to countries outside your residence, including Egypt, GCC states, the United Kingdom, and the European Union.
Such transfers are protected through:

• Standard Contractual Clauses (SCCs) and international agreements.
• Data transfer adequacy decisions (e.g., UK/EU recognition).
• Explicit user consent where legally required.
• Encrypted transmission and restricted-access protocols.

These measures ensure that your data receives equivalent protection regardless of its location.

8. Data Retention and Deletion

Personal data is retained only for as long as necessary to:

• Fulfil the purpose for which it was collected.
• Meet contractual and regulatory requirements.
• Maintain records for accounting, auditing, or dispute resolution.

Retention periods vary depending on jurisdiction and purpose.
When data is no longer required, NAD securely deletes or anonymizes it using internationally recognized destruction standards.

9. Data Security

NAD employs a multi-layered cybersecurity framework designed to prevent data breaches, unauthorized access, or loss. Measures include:

• SSL/TLS encryption for all online communications.
• Firewalls and intrusion prevention systems.
• Strict access control with multi-factor authentication.
• Secure backup and recovery mechanisms.
• Regular vulnerability assessments and penetration testing.
• Employee confidentiality agreements and annual training on data ethics.

In the unlikely event of a breach, NAD will notify affected individuals and authorities as required by law.

10. Your Rights and Choices

You have the following rights under Egyptian law and international privacy frameworks:

1. Access: Obtain confirmation of whether NAD holds your data and request copies.
2. Rectification: Correct inaccurate or outdated information.
3. Erasure: Request deletion where data is no longer necessary.
4. Restriction: Limit the processing of certain data categories.
5. Data Portability: Receive data in a machine-readable format.
6. Objection: Oppose data processing for direct marketing or legitimate interest.
7. Withdrawal of Consent: Revoke consent at any time without affecting prior lawful processing.

Requests can be made via [email protected] or through NAD’s Data Protection Office.
Verification may be required to confirm your identity before fulfilling your request.

11. Marketing and Communications

NAD will only send marketing materials where prior consent has been explicitly given.
You can unsubscribe from email campaigns at any time by using the “unsubscribe” link or by contacting [email protected].
Unsubscribing will not affect transactional or legally required communications.

12. Children’s Data Protection

NAD’s services and websites are intended for users aged 16 years and above.
We do not knowingly collect data from minors. If such data is identified, it will be deleted immediately. Parents or guardians may contact us to request removal.

13. Third-Party Links

NAD’s website may contain links to third-party websites or social media platforms. These sites operate independently, and NAD is not responsible for their content or privacy practices.
We encourage reviewing third-party privacy policies before sharing information.

14. International Compliance

NAD ensures global data protection alignment by adopting:

• EU/UK GDPR principles: Lawfulness, fairness, transparency, purpose limitation, and integrity.
• Egyptian Data Protection Law compliance: Registration with the Egyptian Data Protection Centre and adherence to cross-border data regulations.
• GCC Data Protection Guidelines: Especially under the UAE Federal Decree-Law No. 45 of 2021 concerning Personal Data Protection.

This framework ensures NAD’s practices meet both regional and international expectations for privacy and digital ethics.

15. Data Protection Officer (DPO)

For any concerns, complaints, or inquiries regarding data handling, contact:

Data Protection Officer
NAD – Corporate Governance & Compliance Division
Email: [email protected]
Head Office: Mall of Arabia, First 6th of October, Giza Governorate 3236220, Egypt
Website: www.nad.com.eg

If you are based in the UK or EU, you may also contact the Information Commissioner’s Office (ICO) or your local Data Protection Authority (DPA) regarding complaints.

16. Policy Updates

NAD may revise this Privacy Policy from time to time to reflect changes in technology, law, or company practices.
Any updates will be posted on www.nad.com.eg with an updated “Last Revised” date.
We recommend reviewing this page periodically.

17. Governing Law and Jurisdiction

This Policy is governed by Egyptian law, in alignment with applicable international privacy frameworks.
Any dispute arising under this Policy shall be subject to the jurisdiction of Cairo courts, unless otherwise required by local law.

18. Acknowledgment

By using NAD’s website or providing personal data, you confirm that you have read, un