Skip to content

Privacy Policy

Last updated: October 13, 2026 • Touch — Egypt

Touch (“we”, “us”) respects your privacy. This policy explains what we collect when you use www.lamsa1.tech, how we use it, and your rights under Egypt’s Personal Data Protection Law No. 151 of 2020. Contact us at abdallahahmedmohamed.dev@gmail.com.

1. Data We Collect

We collect only what is necessary to process your order and provide our services:

  • Order information: name, phone number, email (optional), governorate/city/address, order items, payment method, and InstaPay transaction ID — to fulfill and ship your order.
  • Payment proof: InstaPay receipt/screenshot uploaded by you — stored temporarily to verify payment, deleted after verification and within 90 days.
  • Contact messages: name, phone, message content when you email or use the contact form.
  • Technical data: IP address, device type, browser, and pages visited via essential cookies — for security and fraud prevention.

2. Dynamic QR Accounts

If you create a Dynamic QR account, we additionally store:

  • Account data: your email address and a securely hashed password (we never store plain-text passwords). If you sign in with Google, we receive your email and profile name from Google — see section 9.
  • Your QR codes: titles, short codes, and the destination URLs you set. You can export this data anytime from your dashboard (“Export my data”) and delete your account (“Delete my account”). Deleting a QR code or your account breaks printed codes — they will show a “not found” page instead of redirecting.

3. QR Scan Analytics

When someone scans one of your QR codes, we record a scan event so we can show you counts. Each scan stores: timestamp, device type, operating system, browser, country and city (from network geo headers), a keyed, daily-rotating HMAC hash of the IP address, and the referrer without query strings. We do not store raw IP addresses or full user-agent strings for scans. Bots and link-preview prefetches are not counted.

4. Legal Basis for Processing

We process your data based on:

  • Contractual necessity: to fulfill your order, run your QR account, and deliver your products.
  • Legal obligation: to maintain order records for accounting and tax purposes under Egyptian law.
  • Consent: you explicitly agree to data collection by checking the consent box before placing your order or by accepting the Terms when creating a QR account.

5. How We Use Your Data

  • Process, ship, and support your orders (COD and InstaPay)
  • Verify InstaPay payments using your transaction ID and uploaded receipt
  • Operate your QR account, redirects, and scan analytics
  • Screen destination links for known malicious sites and handle abuse reports
  • Reply to inquiries and provide customer service
  • Improve our products, site performance, and SEO
  • Prevent fraud and ensure security
  • Comply with legal obligations in Egypt

We do not sell, rent, or trade your personal data to third parties.

6. Payment Data

When you choose InstaPay as your payment method:

  • You send payment directly through your InstaPay app — we never see or store your card details.
  • You provide a transaction ID and optionally upload a payment screenshot for verification.
  • Payment screenshots are stored with access restricted to the admin only, and are automatically deleted after 90 days.
  • We do not process credit/debit card data on our servers, which exempts us from PCI DSS card-data obligations.

7. Data Storage & Security

  • All data is transmitted over HTTPS (encrypted in transit).
  • Data is stored in managed PostgreSQL databases (Neon, AWS Frankfurt, EU) with encryption provided by the hosting platform.
  • Passwords are stored only as one-way bcrypt hashes — never in plain text.
  • Payment proof screenshots have access restricted to the admin.
  • Admin access requires authentication plus a secret admin token.
  • Rate limiting protects order, admin, QR creation, login, and abuse-report endpoints.

8. Data Retention

  • Order data: kept for up to 5 years for accounting/legal compliance, then anonymized or deleted.
  • Payment proof screenshots: deleted within 90 days of order completion or rejection.
  • Contact messages: kept for up to 2 years.
  • Technical logs (IP, browser): kept for up to 90 days for security purposes.
  • QR scan events: kept while your QR code exists; deleting a QR code deletes its scan history. Deleting your account deletes your codes and their scan history.

9. Third-Party Services

We share data only with services necessary to operate the store and the QR service:

  • Hosting: Vercel (servers in EU/US) — serves the site and the QR redirect.
  • Databases: Neon PostgreSQL (AWS Frankfurt, EU).
  • Error monitoring: Sentry — receives error reports with IPs, emails, and URL query strings scrubbed, and reduced sampling in production.
  • Sign-in: Google OAuth — if you choose “Continue with Google”, Google shares your email and profile name with us.
  • Link screening: Google Safe Browsing — destination URLs you submit may be checked against Google’s threat list (only when configured).
  • Shipping carriers: to deliver your order (name, phone, address only).

All third-party providers are contractually bound to protect your data. We do not share data with marketing or advertising services.

10. Children

Our site is not directed to children under 13. We do not knowingly collect their data. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

11. Your Rights

Under Egypt’s Data Protection Law No. 151 of 2020, you have the right to:

  • Access your personal data we hold
  • Correct inaccurate or incomplete data
  • Request deletion of your personal data (QR owners: use “Delete my account” in the dashboard)
  • Export your QR data (QR owners: use “Export my data” in the dashboard)
  • Object to processing of your data
  • Withdraw consent at any time
  • File a complaint with the Egyptian data protection authority

To exercise any of these rights, contact us at abdallahahmedmohamed.dev@gmail.com or WhatsApp +20 155 788 6491. We will respond within 14 business days.

12. Cookies

We use essential cookies for cart functionality, session management, language preference, and security. We do not use tracking or advertising cookies. You can block cookies in your browser settings, though some features may not work properly.

13. Changes to This Policy

We may update this policy and will post the new date above. Significant changes will be notified via the site. Continued use means you accept the changes.

14. Contact & Data Requests

For any privacy questions, data access requests, or deletion requests:
Email: abdallahahmedmohamed.dev@gmail.com
WhatsApp: +20 155 788 6491
Contact form: /contact