Lamma

Privacy Notice

Last updated: October 24, 2026

We collect the minimum we need to make your piece, deliver it and stay in touch with you. This notice explains what we collect and why, how long we keep it, and your rights under Egypt's Personal Data Protection Law No. 151 of 2020 and its executive regulations.

It applies to the Express YourShelf website, the Lamma line and your accounts with us.

Who is responsible for your data

The data controller is [LEGAL NAME], owner of the Express YourShelf and Lamma trademarks, commercial register no. 986-55-750, address Egypt, Alexandria, Egypt.

For any request or question about your data: info@express-yourshelf.com, or WhatsApp from the Contact page.

What we collect and why

When you order

• Your name, a WhatsApp number or e-mail, the delivery address, and the pieces or design requested.
• Purpose: to confirm, make, deliver and invoice the order and to contact you about it.
• Legal basis: performance of the contract between you and us, and our legal duty to issue invoices.

When you create an account

• An e-mail or WhatsApp number, a hashed password, your saved designs, your orders and the record of Lamma pieces you own.
• Purpose: to let you follow your orders, keep your designs and redesign later.
• Legal basis: your consent when creating the account, and performance of the contract.
• Phone numbers are stored encrypted, and we match them only through a keyed digest that does not reveal the number.

Room photos

• If you upload a photo of your room to preview a Lamma design in it, the photo is stored encrypted in a private area. It is visible only to you and never enters the site's public media library.
• Purpose: to show your design in place, nothing else.
• Legal basis: your consent; you can delete the photo at any time.

Reviews and shared photos

• A review or a photo of your piece that you choose to share.
• Purpose: to show it on the website and our social accounts, only after your explicit consent.
• Legal basis: your consent, which you can withdraw at any time.

Contact

• The content of your messages on WhatsApp, by e-mail or through the contact form.
• Purpose: to answer you and follow up your requests.
• Legal basis: our legitimate interest in serving you, and performance of the contract.

Analytics

• We use no analytics or advertising tools today. If we add an analytics tool in the future, we will say so here and ask for your consent before setting any non-essential cookie.

How long we keep your data

• Contact details for guest orders: 24 months after the last order, then deleted.
• Requests that were never confirmed (we could not reach you, or you did not reply): 90 days, then deleted.
• Room photos: until you delete the linked design or the photo itself, and at most 24 months after last use.
• Account data, saved designs and the record of owned pieces: for as long as your account exists; deleted when you ask us to delete the account.
• Records of confirmed orders and invoices: for the period required by tax and commercial law, even after account deletion, with restricted access.
• Published reviews: until you withdraw your consent.
• Contact messages: 24 months after the last message.

Who we share your data with

We do not sell or rent your data, and we do not share it with anyone for marketing.

We share only the minimum needed with:

• Transport companies that help us deliver outside Alexandria: your name, address and phone number, for delivery only.
• Our own assembly technician for an assembly visit: the address and the appointment time.
• Public authorities where the law requires it.

WhatsApp is a service provided by Meta and is governed by its own privacy policy. Choosing to contact us on WhatsApp means your messages pass through its servers.

Where your data is stored

The website and its database are hosted in Egypt. If that location is outside Egypt, your data is transferred there in accordance with the Personal Data Protection Law and its executive regulations, and we inform you of it here. Phone numbers and room photos remain encrypted wherever they are stored, and the encryption key is kept outside the database.

Your rights

You have the right, at any time, to:

• Know what data we hold about you and receive a copy.
• Correct inaccurate data.
• Have your data deleted, except what the law obliges us to keep.
• Withdraw your consent to processing based on consent, such as reviews and room photos, without affecting what was done before.
• Object to a specific processing.
• Be informed if your data is affected by a breach that touches your rights.

Send your request to info@express-yourshelf.com or by WhatsApp. We may ask you to confirm your identity in a simple way, such as replying from the registered e-mail or number. We respond within 15 days of receiving the request.

You also have the right to complain to Egypt's Personal Data Protection Centre.

Cookies

We use only the cookies needed for the site to work: keeping you signed in, remembering your chosen language, and protecting forms from automated submission. We use no advertising cookies and no cross-site tracking. If we add analytics in the future, we will give you a clear choice before enabling them.

Children

Our website is intended for adults. We do not knowingly collect data from anyone under 18. If we learn that a child has created an account without a guardian's consent, we delete it.

Security

We protect your data with encryption in transit and, for sensitive data, at rest; with hashed passwords we cannot read; and with limited access rights for our team. No method is perfectly secure, but we review our measures regularly.

Changes to this notice

We may update this notice when our services or the law change. The date of the last update appears at the top of the page. If a change is material, we tell account holders by e-mail or WhatsApp.