Privacy Policy

Who we are

This Privacy Policy explains how شركة الليثي للاستيراد والتصدير (“Ellithy”, “we”, “us”) collects, uses, shares and protects your personal data when you use the Ellithy mobile application, the website ellithy.com, and any related services (together, the “Platform”).

We process personal data in accordance with Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations issued under Decree No. 816 of 2025.

By creating an account or using the Platform, you confirm that you have read and understood this Policy.

• Data controller — شركة الليثي للاستيراد والتصدير
• Commercial registry / Tax ID — 23086 / 29862117
• Registered address — 17 El Nozha St, Cairo, Egypt
• Privacy contact / DPO — [email protected]
• Phone — 19383

Services covered by this Policy

Ellithy is an automotive marketplace in Egypt. This Policy covers:

• Browsing new and used car listings
• Publishing a car listing for sale (free listings)
• Expressing interest in a specific car
• Requesting a financing / installment plan through partner banks and financing companies
• Requesting a motor insurance quote through partner insurers and brokers
• Account creation, notifications, customer support and marketing communications

Vehicle inspection

Vehicle inspection is not currently offered on the Platform. If we introduce an inspection service in the future, we will update this Policy before collecting any data related to it and, where the law requires it, ask for your consent.

How a used-car listing is handled

When you submit a used car for sale, the following happens, and by submitting a listing you agree to it:

• Our used-cars team reviews the listing. Every listing submitted to Ellithy is visible to our internal used-cars team, including the contact number you provided, whether or not it is publicly published.
• We may contact you with a direct purchase offer. Our team may call or message you to offer to buy the car from Ellithy directly.
• If you do not accept the offer, or do not respond, the listing is published to all users of the Platform in the normal way.
• A listing stays live for 30 days from the date it is published, after which it expires. You can republish, edit or remove it at any time from your account.

Average market price

Where we display an average or estimated market price for a car, this figure is indicative only. It is generated from aggregated market data, including listings published on the Platform and other market sources. It is not an offer, a valuation or a guarantee, it is not a mandatory basis for any listing or sale, and it may change over time or differ from the price actually agreed between a buyer and a seller. You remain free to set your own asking price.

If you would prefer not to be contacted with a purchase offer, tell us at [email protected] or in your listing notes, and we will publish the listing without the offer call.

Data you give us directly

• Account data — full name, mobile number, email address, password, city / governorate, profile photo. Collected at registration and login.
• Listing data — car make, model, year, mileage, condition, price, photos and videos of the vehicle, plate or chassis details if you choose to provide them, listing location, your contact number. Collected when you publish a car for sale.
• Interest / enquiry data — the car you enquired about, your name, phone number, preferred contact time, notes. Collected when you submit an interest request.
• Financing request data — name, mobile number, the car you want to finance, requested down payment and tenor, and preferred bank. Collected when you request an installment plan.
• Insurance request data — name, mobile number, vehicle details, year of manufacture, estimated value, coverage type. Collected when you request an insurance quote.
• Support and communications — messages, complaints, call notes, and, where we notify you in advance, call recordings. Collected when you contact us.

Data collected automatically

• Device model, operating system and version, app version, language and device identifiers
• Advertising identifiers (IDFA / Google Advertising ID), subject to your permission on iOS and Android
• IP address, approximate location derived from IP, and network operator
• Usage data: pages and listings viewed, searches, filters, taps, session duration, referral source
• Crash reports, diagnostic logs and performance data
• Cookies and similar technologies on the website — see “Cookies and similar technologies” below

App permissions

The app will ask for the following permissions. You can refuse or withdraw any of them from your device settings; refusing a permission only disables the related feature.

• Camera — photographing your car directly inside the app when creating a listing
• Photos / storage — uploading images and videos of your car to your listing
• Location — showing nearby listings and pre-filling your governorate; precise location is optional
• Notifications — alerts about your listing, replies to your requests, price drops and offers
• Phone — placing a call to a seller or to our support team from inside the app

We do not access your contacts, SMS messages, call log or files unrelated to the above.

Sensitive data

We do not collect your national ID number, salary details, bank statements or any other financial documents. A financing request submitted through Ellithy is an expression of interest only. Once you consent to it being passed on, the bank or financing company contacts you directly and collects whatever identity and income documents it requires under its own procedures and its own privacy policy. Ellithy is not a party to that stage and does not receive those documents.

We do not knowingly collect data revealing health, religious belief, political opinion or biometric data. Please do not include such information in listing descriptions, photos or messages.

Why we use your data, and our legal basis

• Creating and managing your account, authentication, OTP verification — performance of the service you requested
• Publishing, moderating and displaying your car listing — performance of the service you requested
• Reviewing submitted listings internally and contacting you with a direct purchase offer from Ellithy — our legitimate interest, and the terms you accept when submitting a listing
• Producing aggregated average market price estimates from listing and market data — our legitimate interest
• Connecting you with a seller, or a seller with an interested buyer — performance of the service you requested
• Passing a financing request to a bank or financing company — your explicit consent
• Passing an insurance request to an insurer or broker — your explicit consent
• Fraud prevention, detecting fake or duplicate listings, platform safety — our legitimate interest, and legal obligation
• Customer support and complaint handling — performance of the service you requested
• Analytics, measuring performance, improving the app — our legitimate interest, and your consent where required
• Marketing messages by SMS, WhatsApp, email or push — your consent, withdrawable at any time
• Advertising and audience measurement on Meta, Google, TikTok, Snapchat — your consent
• Complying with Egyptian law, tax obligations and lawful requests — legal obligation

Who we share your data with

We do not sell your personal data. We share it only in the following cases:

• Banks and financing companies — your name, mobile number and the details of the car and plan you asked about, so they can contact you directly about your installment request. From that point each bank acts as an independent controller under its own privacy policy.
• Insurance companies and brokers — the data in your insurance request, to issue a quote.
• Other users of the Platform — your listing content, first name and the contact number you chose to display, so that buyers can reach you. Anything you publish in a listing becomes publicly visible.
• Our used-cars team, showrooms, sales agents and call centre — your listing details and contact number, including for listings not yet published, and your enquiry details, to review listings, make you a direct purchase offer, and follow up on your enquiry. See “How a used-car listing is handled” above.
• Technology service providers — hosting, cloud storage, database, SMS/OTP gateways, WhatsApp Business provider, analytics and crash reporting, CRM, email delivery, to operate the Platform, under written contracts limiting their use of the data.
• Advertising and analytics platforms — hashed identifiers, app events, advertising IDs, for measurement and remarketing, subject to your permission.
• Authorities, regulators and courts — only what is legally required, to comply with a valid legal request.
• Acquirer or successor — relevant account data, in the event of a merger, acquisition or restructuring, with notice to you.

A current list of our main processors is available on request from [email protected].

Transfers outside Egypt

Some of our service providers store or process data on servers located outside Egypt. Where this happens, we transfer data only in line with the conditions set out in Law No. 151 of 2020 and its Executive Regulations, including obtaining the required approval from the Personal Data Protection Centre and putting appropriate contractual safeguards in place with the receiving party.

How long we keep your data

• Account data — for as long as your account is active, then 12 months after deletion or closure
• Car listings — live for 30 days from publication, then archived for 12 months for fraud prevention and dispute handling
• Financing and insurance requests — 24 months from submission, or longer where a partner or regulator requires it
• Support tickets and call records — 24 months
• Technical logs and analytics — 12 months
• Data required for tax and accounting — 5 years, as required by Egyptian law

After these periods, data is deleted or irreversibly anonymised.

Your rights

Under Egyptian data protection law you have the right to:

• Know what personal data we hold about you and how it is processed
• Access your data and obtain a copy of it
• Correct, update or complete inaccurate data
• Request erasure of your data, subject to our legal retention obligations
• Withdraw your consent at any time, without affecting processing carried out before withdrawal
• Object to processing carried out on the basis of our legitimate interest
• Object to receiving marketing messages, at any time and free of charge
• Object to decisions based on automated processing that produce legal effects for you

How to exercise your rights

To exercise any of these rights, contact [email protected] or use the in-app privacy settings. We respond within the period specified by law.

Deleting your account: you can delete your account and associated listings directly from the app under Settings → Account → Delete account, or by writing to [email protected].

Marketing opt-out: turn off push notifications in the app or in your device settings, use the unsubscribe link in emails, or reply with the stop keyword to SMS and WhatsApp messages.

If you believe your rights have been infringed, you may lodge a complaint with the Personal Data Protection Centre in Egypt.

Cookies and similar technologies

On ellithy.com we use:

• Strictly necessary cookies — login sessions, security, load balancing. These cannot be disabled.
• Functional cookies — language preference, saved searches, recently viewed cars.
• Analytics cookies — understanding how the site is used, in aggregate.
• Advertising cookies and pixels — measuring campaign performance and showing you relevant ads.

You can manage non-essential cookies through the consent banner on first visit, or in your browser settings. The mobile app uses SDKs that perform equivalent functions, governed by the app permissions described above.

Analytics and session recording

We use Google Analytics 4 to measure how the service is used, and Microsoft Clarity, which records browsing sessions — pointer movement, scrolling and taps — so we can see where the interface causes difficulty.

Neither is loaded until you accept them in the cookie banner. If you decline, or have not answered yet, no request is made to either company and no recording exists. You can change your answer at any time from Cookie settings in the footer.

Where they do run, form fields are masked: the name, email, phone number and one-time code you type are not captured in a recording. Both services receive a device identifier and usage data, and both are operated by their providers under their own privacy policies.

Separately, and not covered by that banner, we count visits and which listings drew interest using an identifier stored in your browser. That count stays on our own servers, is not shared with anyone, and tells us how many people used the site — not who they are. We rely on our legitimate interest for it.

Security

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit (HTTPS/TLS), encryption of passwords, role-based access control, restricted administrative access, activity logging, regular backups, and contractual security obligations on our providers.

No system is completely secure. If a personal data breach occurs that is likely to affect you, we will notify the Personal Data Protection Centre and, where required, notify you, within the timeframes set by law.

Children

The Platform is intended for users aged 18 and over. We do not knowingly collect data from children. If we learn that we have collected data from a person under 18 without the consent of their guardian, we will delete it. If you believe a child has provided us with data, contact [email protected].

Third-party links

Listings, advertisements and partner pages may link to websites we do not control, including bank and insurer pages. This Policy does not apply to them. Please review their own privacy policies before submitting data.

Changes to this Policy

We may update this Policy as our services develop, including when we launch new services such as vehicle inspection. We will publish the updated version here with a new “Last updated” date, and where the changes are material we will notify you in the app or by email before they take effect.

Contact us

For any question about this Policy or about how your data is handled, contact our privacy team at the address below.

• شركة الليثي للاستيراد والتصدير
• 17 El Nozha St, Cairo, Egypt
• Email: [email protected]
• Phone: 19383