Skip to Content

English | العربية

Privacy Policy

Last updated: 5 November 2026

This policy explains how we collect, use, share and protect your personal data when you use dr-baker.com, or when you contact us. We do so in line with the Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations issued by Ministerial Decree No. 816 of 2025.

1. Who we are

The party responsible for your data (the controller) is: Dr.Baker, an Egyptian limited liability company, Commercial Registry No. 4535 (Gamasa Investment Commercial Registry Office), Unified Registry No. 11090 02000 04535, Tax Registration No. 753-611-961, head office: Al-Sananiya, Old Ras El Bar Road, opposite the power station, Damietta Markaz, Damietta. You can reach our data-protection contact about anything related to your data at: Email info@drbaker.de and phone/WhatsApp +20 115 122 2223.

2. Data we collect and where it comes from

  • Account data: name, phone number and email, and company details for business customers.
  • Order data: delivery address, order contents, value and date, payment method, and your messages with us about the order.
  • Business dealings: company name and contact-person details, quotation requests, orders and supply terms, and documents you send us such as your commercial register and tax card.
  • Payment data: the bank-transfer details shown on the transfer receipt you send us.
  • Conversations: the content of messages you send us through WhatsApp, Facebook, Instagram and our contact forms and website chat (text, photos, voice notes and files), and your name and account ID as the messaging platform shows them to a business account.
  • Technical data: IP address, device and browser type, and usage data collected by the cookies and measurement tools described in this policy.

We receive this data from you directly when you use our services or contact us; from social media platforms (account name and ID). We do not ask you for sensitive data such as health or religious data. If you tell us something about your health, such as an allergy to an ingredient, we use it only to serve your order.

3. Why we use your data

  • To create and manage your account.
  • To process and deliver your orders and provide after-sales service.
  • To prepare quotations and perform contracts and orders with businesses.
  • To take payment and issue invoices, including electronic invoices and receipts for the Egyptian Tax Authority where required.
  • To answer your questions, messages and complaints.
  • To use artificial-intelligence tools that help us understand and answer your messages and the photos you send.
  • To operate and secure the website and prevent fraud.
  • To measure use of the website with cookies, only after you accept.
  • To send marketing messages, only with your consent.
  • To comply with the law and respond to requests from competent authorities.

4. Legal basis for processing

We process your data on one of the following bases:

  • Performance of a contract: to fulfil your order, your account or our agreement with you.
  • Legal obligation: such as tax, e-invoicing and consumer protection.
  • Legitimate interest: to operate, secure and improve our services and to keep in business contact with companies, without overriding your rights.
  • Consent: for marketing messages, non-essential measurement tools and any case where the law requires your consent. You can withdraw your consent at any time.

5. Sharing your data

We do not sell your personal data. We share it only as needed with:

  • Competent government bodies where the law requires it, including the Egyptian Tax Authority for e-invoicing.

We also share it with service providers that process data on our behalf, under confidentiality obligations:

  • Hetzner: hosting of our servers, databases, email and backups (Germany and Finland).
  • Backblaze: storage of encrypted backup copies of our data (United States).
  • Google (Google Fonts): loading the website fonts; your device's IP address reaches Google when a page opens (United States).
  • Google (Google Analytics): measuring visits to the website and how it is used (United States).
  • Google (Gemini): an artificial-intelligence model that helps us understand and answer your messages (United States).
  • Perplexity: automated search that helps us prepare answers to some questions; it receives the text of the question (United States).
  • TypeSafe: automated classification of the photos you send in a chat.
  • AcruxLab (ApiChat) and Meta (WhatsApp): connecting WhatsApp conversations to our customer-service system.
  • Meta (Facebook and Instagram): receiving and answering messages and comments on our pages (United States).
  • Metabase: internal management reports built from our systems' data.
  • Contentsquare (Hotjar): measuring how website pages are used, only after you accept (the European Union or the United States, depending on the account setting).

When you message us on WhatsApp, Facebook or Instagram, Meta also processes your messages under its own policy. We do not use the content of Facebook, Instagram or WhatsApp messages for advertising.

6. Transfers outside Egypt

Your data is stored on servers outside the Arab Republic of Egypt and is transferred to the following countries:

  • Germany and Finland: the Hetzner servers that run our systems, and their backups.
  • United States: encrypted backup copies at Backblaze, and the services of Google, Perplexity and Meta.

Some of the service providers listed may also process data in other countries where their servers are located. The Personal Data Protection Law and its Executive Regulations require a licence or permit from the Personal Data Protection Center for these transfers. We have applied for it, and until it is issued we transfer only what is needed to provide the service.

7. How long we keep your data

We keep your data for as long as needed for the purpose we collected it for, and then for the periods required by law, such as tax and commercial law. After that we delete the data or remove what identifies you.

8. Security

We take technical and organisational measures to protect your data against loss, misuse and unauthorised access, including:

  • Encryption of the connection between your device and our websites over HTTPS.
  • Administrative access to our servers over SSH is by key only.
  • Encrypted backups.
  • Access rights set for each user according to their work.

9. Your rights

The law gives you the following rights:

  • To know what data we hold about you, to see it and to obtain it.
  • To withdraw your consent to processing at any time.
  • To have your data corrected, changed, added to or updated.
  • To have your data erased.
  • To restrict processing to a specific scope.
  • To object to processing or its results where it conflicts with your fundamental rights and freedoms.
  • To be informed of any breach of your personal data.

Withdrawing consent does not affect processing carried out before it. We may keep some data after an erasure request where the law requires us to.

10. How to exercise your rights

Send your request to our data-protection contact at: Email info@drbaker.de and phone/WhatsApp +20 115 122 2223. We may ask you for proof of identity before we act on a request, so that we do not give your data to someone else. We answer your request within six (6) working days of receiving it. If you messaged us on Facebook, Instagram or WhatsApp, you can ask us to delete your data and message history by sending a request from the same email or phone number you used to contact us to info@drbaker.de with the subject "Data Deletion". We delete the data within the same period, except what the law requires us to keep.

11. Complaints

If you believe our processing of your data breaks the law, you have the right to complain to the Personal Data Protection Center in Egypt. We ask you to contact us first so that we can try to solve the problem.

12. Data breach notification

If a breach of your personal data occurs, we notify the Personal Data Protection Center within seventy-two (72) hours of becoming aware of it, and we also notify you if you are affected, as the law requires, explaining what happened and what we have done.

13. Cookies and measurement tools

We use essential cookies to run the website, for example to keep you signed in, keep your shopping cart and remember your language; these do not need your consent. We also use the following analytics and advertising tools:

  • Google Analytics: sets cookies that measure visits, the pages you open and where the visit came from.
  • Hotjar (by Contentsquare): sets cookies and measures how pages are used, such as clicks and scrolling, and may record your interaction with the page.

On your first visit a cookie banner shows two equal buttons: "Accept" and "Reject". Before you choose, no analytics or advertising cookies are stored on your device and no identifiers are used. Google tags run in Consent Mode v2 with every permission denied (analytics_storage, ad_storage, ad_user_data and ad_personalization), and Google may receive limited signals without cookies, such as a page load and your approximate country. Measurement with cookies and advertising tools start only after you press "Accept". After you accept, data from these tools reaches Google in the United States. Hotjar data reaches Contentsquare in the European Union or the United States, depending on the account setting, and Hotjar starts only after you accept. If you choose "Reject", they stay off and you can still use the website. You can change your choice at any time from the "Cookie settings" link at the bottom of the page; we keep your choice in your browser for 12 months. The website also loads Google Fonts from Google's servers, so your device's IP address reaches Google when a page opens.

14. Electronic marketing messages

We send you marketing messages by text message, WhatsApp or email only after your prior consent. Every marketing message clearly shows Dr.Baker as the sender. You can stop these messages at any time by contacting us at: Email info@drbaker.de and phone/WhatsApp +20 115 122 2223. We stop them free of charge. Service messages, such as order confirmations, are sent because they are needed to provide the service.

15. Children

Our services are not directed at people under 18, and we do not knowingly collect their data without a guardian's consent. If you learn that a child has sent us their data, contact us so that we can delete it.

16. Changes to this policy

We may change this policy from time to time. We publish the updated version on this page with its "Last updated" date. If a change is material, we tell you about it in a suitable way before it takes effect.

17. Contact

Dr.Baker — Al-Sananiya, Old Ras El Bar Road, opposite the power station, Damietta Markaz, Damietta. Email info@drbaker.de and phone/WhatsApp +20 115 122 2223.