Data protection policy

This Data Protection Policy describes how Fixed Egypt For Digital Solutions and Information Security ("FEDIS", "WQ3", "we", "us") protects personal data processed through the WQ3 website and platform, in line with Egyptian Personal Data Protection Law No. 151 of 2020 and its executive regulations.

It applies to account holders, organization users, signers invited to documents, website visitors and anyone who contacts us. It complements our Privacy Policy, which explains in detail what data we collect and why.

For account, billing and website data, WQ3 acts as the data controller.

For the contents of documents and signer details that an organization uploads, the organization is the controller and WQ3 processes that data on its behalf and only on its instructions.

We process personal data lawfully, fairly and transparently; collect it only for specified, legitimate purposes; keep it limited to what is necessary; keep it accurate and up to date; retain it no longer than needed; and protect it with appropriate security.

We process personal data on the basis of: performing our contract with you; your consent where required (for example optional marketing or eKYC account verification); our legal obligations, including keeping signature audit records; and our legitimate interests in securing and improving the platform, balanced against your rights.

Under Law No. 151 of 2020 you have the right to know what personal data we hold about you and to obtain a copy; to correct, update or complete it; to request deletion or restriction of processing where the law allows; to withdraw consent at any time; to object to processing; and to be notified of any breach affecting your data.

To exercise these rights, email legal@fedis.com.eg. We will respond within the period set by law. Some records, such as signature audit trails, may need to be kept to preserve the legal value of signed documents.

WQ3 holds ISO/IEC 27001 certification for its information security management system.

Our measures include encryption in transit (TLS 1.2 or newer) and at rest, SHA-256 document fingerprints, role-based access control, private signer links, activity logging, regular backups, and staff confidentiality and security training.

We keep personal data only as long as needed for the purposes described or as required by law. Account data is kept while the account is active. After an account is closed, documents can be exported for 30 days and are then deleted, except audit records we must keep by law.

We share personal data only with service providers that help us run the platform (such as hosting, email and identity verification), under written agreements that require confidentiality and adequate protection, and with authorities where the law requires. We do not sell personal data.

Where personal data is transferred outside Egypt, we do so only in accordance with Law No. 151 of 2020, including obtaining any required licence or approval and ensuring an adequate level of protection.

If a personal data breach occurs, we will contain it, assess the risk, and notify the Personal Data Protection Centre and affected people within the time limits set by law.

The platform is not intended for people under 18, and we do not knowingly collect their personal data.

We may update this policy and will post the new version here with its effective date. Data protection questions or requests: legal@fedis.com.eg. General enquiries: info@wq3.net.