Privacy Notice
This notice explains what happens to your information when you use TAYAA's Opportunity Gateway (enquiry, tender, prequalification, partnership, supplier and careers forms) on this website.
This page is currently part of TAYAA's pre-launch test/staging environment, used to validate this system before public launch. See "Other services involved" below for what actually happens to information submitted here today.
What we collect
The organization or contact name, email address, and optional phone number you provide; and the content of your enquiry (the category you select and the details you type into that category's fields). No form on this website currently accepts a file attachment — see "Document attachments" below.
Why we process it
To review, route, and respond to your enquiry; to check for duplicate submissions; to let you track your enquiry's status using its reference number; and to keep an internal audit trail of how your enquiry was handled. We do not use your information for advertising, and we do not sell it.
How long we keep it
A qualified business enquiry is kept for up to 24 months from its last update. Security and operational logs are kept for up to 90 days. None of these are deleted automatically while TAYAA has placed a specific enquiry under a legal hold (for example, an active dispute or a legal obligation to retain it).
Document attachments
No form on this website currently offers a file-attachment field (for example a CV, a certification, or a tender/package document) — you cannot attach a file through anything you see on this site. Separately, and specific to TAYAA's confirmed public Production environment: TAYAA's server refuses every attachment upload outright there until a real malware-scanning check is active, rather than accepting a file no scanner has actually checked. If this changes, this notice will be updated first to describe how an attachment would be checked, stored, and retained.
Anonymous visit analytics
This website records, for every page you view, which page it was, which language you viewed it in, a coarse device category (mobile, desktop, or unknown — derived from, but not including, your browser's identifying details), and the domain (not the full address) of the page that referred you, if any. No cookie is set, no account or submission is linked to this, and no IP address is stored. This is used only in aggregate, to understand which pages are used and how the site performs — never to identify or track an individual visitor across visits. It is first-party: collected and kept on TAYAA's own hosting and database, with no outside analytics provider receiving it.
Other services involved
Every submission attempt is processed — meaning it is checked against TAYAA's required pre-persistence safeguards (bot-protection via Cloudflare Turnstile, when configured; field validation; and a check for duplicates) in order to decide whether to accept it. Only a submission that passes all of these checks is accepted and stored as a business enquiry, on TAYAA's hosting infrastructure (Hostinger) and in a managed PostgreSQL database. A rejected attempt is never stored in that database as a business enquiry, and the field values you typed are not written to it once an attempt is rejected at one of these checks. This describes TAYAA's own application and database; it does not describe, and TAYAA does not control, any infrastructure-level log a hosting, network, or security service (including Cloudflare) may separately keep on its own — that is outside this notice's scope. Depending on which check caused the rejection, TAYAA's own application may additionally keep a brief technical log entry in its own database recording only that a check failed, and when — never the field values you typed — for security and operational purposes; this falls under "Security and operational logs" above, not under your business enquiry. Where TAYAA has actually configured it (not merely described it here), an accepted submission may also trigger an outbound notification email sent through a standard SMTP mail service. How each of these services itself handles data is addressed as part of the professional legal review named above, not in this sentence. If TAYAA adds a different kind of third-party service in the future, this notice will be updated first to disclose it.
Your rights
You may ask to see the information TAYAA holds about your enquiry, ask us to correct it, object to how it is used, withdraw a consent you previously gave, or ask us to delete it once it is no longer needed for the purpose you provided it for. Contact us using the details below to exercise any of these.
Consent
Where a form asks you to check a consent box before submitting, we record that you gave consent, when, in which language this notice was shown to you, and the reference number of the enquiry it relates to — so that both you and TAYAA have a clear record of what you agreed to.
Contact
For any question about this notice or your information, contact info@tayaa-construction.com.
Notice version 1.3 — 8 October 2026 (corrected: removed inaccurate claims in version 1.0 about document attachments and about third-party/hosting processing; version 1.2 then properly separated "processed" from "stored as a business enquiry" rather than scoping both to accepted submissions only; this version further corrects "Document attachments" to describe the Production-only upload block accurately, narrows the "not retained once rejected" claim to TAYAA's own database rather than infrastructure TAYAA does not operate, and adds a new "Anonymous visit analytics" section disclosing analytics already in use rather than describing it as a future possibility; see "Document attachments," "Anonymous visit analytics," and "Other services involved" below). Drafted with reference to Egypt's Personal Data Protection Law No. 151 of 2020 and its 2025 Executive Regulations; final wording is subject to professional legal review before public launch.