Privacy Policy

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

It is issued in line with Egypt’s Personal Data Protection Law No. 151 of 2020 and its Executive Regulations (Ministerial Decision No. 816 of 2025), and with the rules of the Financial Regulatory Authority (FRA) for insurance brokers, including FRA Decree No. 198 of 2025 on digital insurance brokerage.

We use Your Personal Data only to provide and improve the Service and for the purposes explained below. Where the law requires Your consent, We ask for it clearly before We use Your data, and You can withdraw it at any time.

This Privacy Policy is available in Arabic, English and French. If these versions differ, the Arabic version prevails.

The Service is provided by Hadbrok Insurance Brokers S.A.E, 4 Street 203, Maadi, Cairo, Egypt (Degla Medical Center / Degla Square), an insurance broker licensed by the Financial Regulatory Authority (FRA), licence No. 17, and approved by the FRA for digital insurance brokerage.

Hadbrok decides why and how Your Personal Data is used, and is therefore the “controller” of Your Personal Data under Law No. 151 of 2020.

Privacy contact: Cyril Haddad, Regional Managing Director · info@hadbrok.com · +20 (122) 235 2235

Hadbrok has applied to the PDPC for its licence as a controller of Personal Data.

Data Protection Officer: registration with the PDPC applied for; the officer’s name and registration code will be published here once issued. Until then, write to info@hadbrok.com.

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Company (referred to as either "the Company", "Hadbrok", "We", "Us" or "Our" in this Privacy Policy) refers to Hadbrok Insurance Brokers S.A.E, 4 Street 203, Maadi, Cairo, Egypt (Degla Medical Center / Degla Square).
• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• Country refers to: Egypt
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Sensitive Data means the categories of Personal Data that the law treats as sensitive, including health data and data about children.
• PDPC means the Personal Data Protection Center, Egypt’s data protection authority.
• Service refers to the Website, our online quote app (hadbrok-app.onrender.com) and Policy Screening.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website refers to Hadbrok, accessible from www.hadbrok.com
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

We collect only the Personal Data We need for the service You ask for.

Personal Data You give Us

• Contact details: first name and last name, email address and phone number.
• Quote details: for medical cover, Your age or date of birth, the family members You add and where You want cover; for company medical cover, the number of people and their average age, or a staff list (names, dates of birth, relationship) if You upload one; for motor cover, the car’s brand, model, year and value and the main driver’s age.
• Policy Screening: Your name, company, work email and mobile number, the insurance policies and documents You upload and any note You add. These documents may contain Personal Data about Your employees or other people.
• Policies and claims: the information an insurer needs to issue Your policy and handle claims. For medical cover this can include health data, which is Sensitive Data. We collect Sensitive Data only when it is needed and only with Your explicit written consent.
• Your messages: what You tell Us by phone, email or other channels.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages and other diagnostic data. We use it to keep the Service secure and working.

The Service uses only the Cookies and similar technologies it needs to work:

• Necessary / Essential Cookies. Administered by: Us. Staff who log in to Our systems receive a security Cookie that keeps them logged in. These Cookies are needed for the Service and do not require consent.
• Language preference. The quote app remembers the language You choose in Your browser, so You do not have to choose it again.

We do not use advertising Cookies, analytics Cookies, web beacons or Flash Cookies, and We do not track You across other websites. The emails sent by the quote app contain no open or click tracking. If We ever add Cookies that are not strictly necessary, We will ask for Your consent first and update this Privacy Policy.

The Company uses Personal Data only for the following purposes, each with its legal basis:

We may also analyse how the Service is used to improve it, using data that does not identify You. We do not sell Your Personal Data and We do not use it for advertising profiles.

• Your documents reach Us over an encrypted (HTTPS) connection and are kept in Our secure document storage, not on the Website.
• We use them only to screen Your policies and prepare Your report.
• Our AI reads the pages needed for the screening. It runs from Our own servers through an AI service that works for Us under contract (see “Who We Share Your Personal Data With”). A named Hadbrok broker checks and signs every report.
• Only Your named broker, Our screening team and that AI service see Your documents.
• If You send documents that contain other people’s data, such as a staff list, You confirm that You are allowed to share them with Us for this purpose.
• If no business follows, We delete Your documents within 90 days.
• Your report is confidential. We never share it without Your written approval.

• Insurers: the insurers We approach for quotes or to place Your cover and, where needed for Your policy or claim, reinsurers, claims administrators and loss adjusters they appoint.
• Partner brokers abroad: for example members of the Brokerslink network, only when cover is placed outside Egypt and with Your consent.
• Service Providers working for Us under contract: hosting of Our quote app and database (Render, data centre in Frankfurt, Germany); document storage (Cloudflare; Western Europe); the AI service used for Policy Screening (Anthropic, United States); email sending and Our mailbox (HostGator, United States); hosting of www.hadbrok.com (HostGator, United States). They may use Your Personal Data only to provide their service to Us and must keep it confidential and secure.
• For business transfers: in connection with any merger, sale of Company assets, financing or acquisition of all or part of Our business, with notice to You as described above.
• Authorities: the FRA, the PDPC, courts or other public authorities when the law requires it or in response to valid requests.

We do not share Your Personal Data with anyone else without Your consent.

Some of Our Service Providers process Personal Data outside Egypt, including in Germany and the United States.

We transfer Personal Data outside Egypt only as Law No. 151 of 2020 and its Executive Regulations allow: under a licence or permit from the PDPC, and either to countries and recipients with a level of protection not lower than Egypt’s or with Your explicit consent, always with technical and organisational safeguards to keep Your data secure. For Policy Screening, We ask for Your explicit consent to the transfer of Your documents to Our AI service in the United States on the upload form.

We have applied to the PDPC for this licence.

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, or as long as the law requires.

When the period ends, We delete Your Personal Data or make it anonymous. Deleted data are also removed from Our backups within a further 6 months.

Under Law No. 151 of 2020 You have the right to:

• know what Personal Data We hold about You, and obtain access to it;
• withdraw Your consent at any time (this does not affect processing carried out before);
• ask Us to correct, update, complete or delete Your Personal Data;
• ask Us to restrict the processing of Your Personal Data;
• be informed of any breach affecting Your Personal Data;
• object to processing that conflicts with Your fundamental rights and freedoms, and to direct marketing at any time.

To use any of these rights, contact Us at info@hadbrok.com or +20 (122) 235 2235. We may ask You to confirm Your identity. We will answer within the time limits set by the law and its Executive Regulations.

If You are not satisfied with Our answer, You can complain to the Personal Data Protection Center (PDPC): portal.pdpc.gov.eg.

The security of Your Personal Data is important to Us. In line with the FRA’s rules, We keep client data on secure servers and treat it as confidential:

• encrypted connections (HTTPS) for the Website, the quote app and uploads;
• personal staff logins with roles, so each person sees only what their job needs;
• each broker’s data kept separate. We test the security of Our systems regularly, as the FRA requires.

No method of transmission over the Internet, or method of electronic storage, is 100% secure. If a breach puts Your Personal Data at risk, We will notify the PDPC within 72 hours of becoming aware of it and inform You within three working days of that notification, as the Executive Regulations require.

The law treats data about children as Sensitive Data. We do not collect Personal Data directly from children.

When a parent or legal guardian adds a child to a family quote or policy, We use the child’s details only for that quote or policy, and only with the parent’s or legal guardian’s explicit written consent, as the law requires.

If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us and We will delete it. For quotes, the quote app asks only for a child’s age, never their name; full details are collected only when a policy is placed, with the parent’s or legal guardian’s written consent.

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy, or want to use Your rights, You can contact us:

• Privacy contact: Cyril Haddad, Regional Managing Director
• By email: info@hadbrok.com
• By phone: +20 (122) 235 2235 · +20 (2) 330 44 664
• By mail or in person: Hadbrok Insurance Brokers S.A.E, 4 Street 203, Maadi, Cairo, Egypt (Degla Medical Center / Degla Square)