Last updated 21 October 2026
Who is responsible
BackRoom for Creative Production Services LLC, BackRoom Studio, 12 Example Street, Zamalek, Cairo, Egypt, is responsible for your personal data. Contact us at store@backroom.app about anything in this policy.
What we collect
- Order details: your name, email, mobile number, delivery address and what you bought or rented.
- Rental checks: the ID document you show at handover, which we record for the rental period.
- Payment results: whether a payment succeeded, its reference and the last four digits of the card. We never receive or store full card numbers or CVV codes; these go directly to Paymob.
- Messages: what you send us through the contact form, email or phone.
Why we use it
- To process payments, deliver orders and manage rentals.
- To contact you about your order, returns and refunds.
- To meet our legal, tax and accounting obligations.
- To prevent fraud and protect our equipment.
We do not sell your data, and we only send marketing messages if you ask us to.
Who we share it with
- Paymob, to process your payment securely.
- Delivery partners, who receive your name, phone and address to deliver your order.
- Service providers that host our website, database and email, under agreements to keep your data safe.
- Authorities, when the law requires it.
How long we keep it
We keep order records for as long as Egyptian tax and commercial law requires, currently up to five years. Contact messages are kept for up to two years. Rental ID records are deleted 90 days after the gear is returned, unless there is an open claim.
Cookies and storage
We use your browser's local storage to remember your cart. We do not use advertising cookies. Paymob's payment page may set its own cookies to secure the payment.
Your rights
Under the Egyptian Personal Data Protection Law (No. 151 of 2020) you can ask to see, correct or delete your personal data, or object to how we use it. Email store@backroom.app and we will reply within 30 days.
Security
The store runs over HTTPS, payments are handled by a PCI DSS certified provider, and access to order data is limited to staff who need it.