Legal
Privacy Policy
How Hisham Labib & Co. collects, uses, shares and protects personal data gathered through this website and our advertising campaigns.
Last updated:
This Privacy Policy explains how Hisham Labib & Co. (“we”, “us”, “our”) collects, uses, discloses and safeguards personal data when you visit hishamlabib.com, submit a form, apply for a role, or interact with our advertising on Meta platforms (Facebook and Instagram).
We process personal data in accordance with Egypt’s Personal Data Protection Law No. 151 of 2020 and, where it applies to visitors in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR).
Who we are
Hisham Labib & Co. is an audit, tax and advisory firm established in 1995 and registered in the Arab Republic of Egypt. We are the data controller for the personal data described in this policy.
- Address: 19 Mohamed El Maqreef Street (8th Floor), Nasr City, Cairo, Egypt
- Email: info@hishamlabib.com
- Telephone: +20 2 22735032
The data we collect
We only collect data that we need for a clearly defined purpose.
- Enquiry data — the name, company, work email, telephone number, service of interest and message you enter in our consultation form.
- Recruitment data — the name, email, position of interest, covering note and CV you submit through the careers form.
- Advertising and lead data — where you respond to one of our campaigns on Meta platforms, the contact details you provide in that lead form, together with the campaign, ad set and advertisement the response came from.
- Technical data — IP address, browser type, device type, referring page, and the pages you view. Some of this is collected automatically by our web server for security and availability purposes.
- Cookie data — see our Cookie Policy for the full list and for how to change your choices.
We do not knowingly collect data from anyone under 18, and we do not ask you for special-category data (such as health, religion or political opinions) through this website. Please do not include such information in a free-text message or CV unless it is genuinely necessary.
How and why we use your data
- To respond to your enquiry and provide the professional services you request — on the basis of your consent and of taking steps at your request prior to entering into a contract.
- To assess your job application and communicate with you about it — on the basis of your consent and our legitimate interest in recruiting staff.
- To measure and improve our marketing, including campaigns run through Meta — on the basis of your consent, given through our cookie banner.
- To keep the website secure, prevent abuse of our forms and detect fraudulent activity — on the basis of our legitimate interest in protecting our systems.
- To meet our own legal, regulatory and professional obligations as a registered audit firm — on the basis of legal obligation.
We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects concerning you.
Meta (Facebook and Instagram) advertising
We advertise our services on Meta platforms and may collect enquiries through Meta lead forms. Where you have accepted marketing cookies, the Meta pixel on this website reports events such as page views and completed enquiries back to Meta so we can measure which campaigns are effective and reach comparable audiences.
- The pixel is not loaded until you accept analytics and marketing cookies. If you choose “Essential only”, no pixel is placed and no data is sent to Meta from this website.
- Where a lead is submitted through a Meta lead form, Meta collects that data on its own platform under its own privacy policy, and passes it to us so that we can respond.
- For pixel data, we and Meta Platforms Ireland Limited act as joint controllers for the collection and transmission of the event data; Meta’s subsequent processing is governed by its own terms.
- You can review and change your advertising preferences in your Facebook or Instagram account settings, and you can withdraw your cookie consent here at any time.
Who we share data with
We share personal data only where it is necessary, and only with parties bound to protect it:
- our web hosting, email and IT service providers, acting on our instructions;
- Meta Platforms, as described above, where you have consented to marketing cookies;
- our professional advisers, auditors and insurers, where required;
- regulators, courts or public authorities, where we are legally obliged to disclose.
Some of these providers operate outside Egypt. Where personal data is transferred internationally, we take reasonable steps to ensure an adequate level of protection, including contractual safeguards with the recipient.
How long we keep it
- Enquiries — up to 24 months from our last contact with you, unless you become a client.
- Client records — for the period required by Egyptian tax, commercial and professional-practice rules, which is generally at least five years after the engagement ends.
- Job applications — up to 12 months after the recruitment process closes, unless you ask us to remove them sooner.
- Website and security logs — a short rolling period, typically no more than 12 months.
How we protect your data
This website is served over an encrypted connection. Our forms are protected against automated abuse, uploaded CVs are checked and are not left in a publicly reachable folder, and access to enquiry data inside the firm is limited to the people who need it. No system can be guaranteed completely secure, but we take our confidentiality obligations as auditors seriously and apply them to your data as well.
Your rights
Subject to the conditions in the applicable law, you have the right to:
- know what personal data we hold about you, and obtain a copy of it;
- have inaccurate or incomplete data corrected;
- ask us to erase data we no longer have a lawful basis to keep;
- object to, or ask us to restrict, certain processing;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- lodge a complaint with the Egyptian Personal Data Protection Centre, or with your local supervisory authority.
To exercise any of these rights, write to info@hishamlabib.com. We will respond within the period required by law and may ask you to confirm your identity first.
Changes to this policy
We review this policy periodically and will publish any updated version on this page with a new “last updated” date. Material changes will be highlighted on the website.
Contact us
Questions about this policy or about how we handle your data can be sent to info@hishamlabib.com, or by post to 19 Mohamed El Maqreef Street (8th Floor), Nasr City, Cairo, Egypt.