Last updated: 12 November 2026
Ilboum ("we," "us," "our") provides cybersecurity services to businesses in Egypt. This Privacy Policy explains what personal data we collect through our website (ilboum.com), why we collect it, who we share it with, and your rights. We are committed to handling your data in line with Egypt's Personal Data Protection Law No. 151 of 2020 (the "PDPL").
1. Who we are
Ilboum is a cybersecurity firm based in Ismailia, Egypt.
- General contact: [email protected]
- Privacy and data-protection matters: [email protected]
- Address: Ground Floor, Nakheel Mall, Othman Ahmed Othman Street, Ismailia, Ismailia Governorate, Egypt
Ilboum processes personal data in compliance with the Egyptian Personal Data Protection Law (Law No. 151 of 2020) and its Executive Regulations, under the supervision of the Personal Data Protection Center (PDPC). We have appointed a Data Protection Officer (DPO) to oversee our data protection strategy and compliance. To exercise your statutory rights (access, rectification, deletion, restriction, or withdrawal of consent), or for any question about this policy, you may contact our DPO directly:
- Title: Data Protection Officer
- Email: [email protected]
- Address: Ground Floor, Nakheel Mall, Othman Ahmed Othman Street, Ismailia, Ismailia Governorate, Egypt
2. What data we collect
a) Information you give us through our contact form:
- Your name
- Your company name
- Your work email address
- Your phone number (optional)
- The domain name you ask us to check (for a Free Exposure Check)
- Your confirmation that you are authorized to request a check for that domain
- For a Free PDPL Readiness Check: your sector, company size, and your answers about the personal data you hold, cross-border transfers, your use of cloud services, whether you have a DPO, and your audit readiness
- Any message you send us
- A record of the consent you give (including your consent to the transfer and storage of your data outside Egypt)
b) Information we generate when you request a Free Exposure Check: At your request, and only for a domain you confirm you are authorized to submit, we gather information that is already publicly available or exposed on the internet relating to that domain. This may include publicly visible internet-facing services, email-security configuration, and references to the domain or its email addresses appearing in known public data breaches or on the dark web. We do not access your systems, and we do not store leaked passwords themselves — our report refers only to the fact, type, and approximate date of an exposure.
c) Technical information and cookies: We use Cloudflare Web Analytics, which is privacy-focused and does not use cookies or track you across other websites. It gives us aggregate, anonymous statistics (such as page views and country-level location). We do not build advertising profiles, and we do not use marketing or advertising cookies.
To keep the site secure and working, our providers set a small number of strictly necessary cookies and similar tokens. In particular, Cloudflare and Cloudflare Turnstile (our spam and bot protection) may set functional or security cookies and tokens, for example to tell humans from bots and to protect the site from attack. These are required for the site to function and are not used for advertising or cross-site tracking. You can block cookies in your browser, but some features (such as the contact form's spam check) may then not work.
3. Why we use your data (lawful basis)
- To respond to your enquiry and provide the service you asked for (including preparing and discussing a Free Exposure Check report). Basis: steps taken at your request / your consent.
- To contact you about your request, typically within one business day.
- To follow up on your enquiry and the specific service you requested.
- To protect our website from spam and abuse (via Cloudflare Turnstile).
- To understand and improve our website (aggregate analytics).
We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you.
4. Who we share data with (our processors)
To provide reliable, secure, and modern services, Ilboum uses trusted third-party infrastructure providers located outside the Arab Republic of Egypt. By providing your explicit consent (via the consent checkbox on our form), you acknowledge and agree that your personal data may be transferred to, stored, or processed in the following jurisdictions:
- Cloud productivity & internal storage (European Union): We use Microsoft 365 to manage internal communications and business records, with data hosted in Microsoft's European Union data centers.
- Email delivery (Ireland / EU): We use Resend to send service emails, which processes recipient email addresses and message metadata on servers located in Ireland. Resend's account metadata and logs may be stored in the United States.
- Web hosting, security & content delivery (Global / United States): We use Cloudflare to host, accelerate, and protect our website against cyber threats. Cloudflare does not store our primary records but temporarily processes technical data (such as IP addresses and routing metadata) across its global edge network and infrastructure in the United States.
All international transfers are governed by the providers' Data Processing Agreements (DPAs) and industry-standard encryption in transit and at rest, in accordance with Articles 14 and 15 of the PDPL.
We may also disclose data if required by law, or to establish, exercise, or defend legal claims.
5. How long we keep your data
We keep contact-form submissions and any Free Exposure Check report we generate for up to 3 months, after which we delete or anonymize them, unless:
- you have become a customer (in which case we keep records for the duration of our engagement and as required by Egyptian commercial and tax law), or
- we are required to keep information longer by law, or to handle a dispute.
6. How we protect your data
As a cybersecurity company, we apply appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls on our mailbox (multi-factor authentication), and keeping the data we hold to the minimum necessary.
If a personal data breach occurs that affects your data, we will notify you and the Personal Data Protection Center as required by the PDPL.
7. Your rights
Subject to the PDPL, you have the right to:
- ask what personal data we hold about you and request a copy,
- ask us to correct inaccurate data,
- ask us to delete your data,
- withdraw consent at any time (where we rely on consent),
- object to or restrict certain processing, and
- complain to the Egyptian Personal Data Protection Center.
To exercise any of these, contact our DPO at [email protected]. We will respond within the period required by law.
8. Children
Our website and services are intended for businesses, not for children. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date shows the current version. Material changes will be reflected on this page.
10. Contact
Questions about this policy or your data: contact our DPO at [email protected]. General enquiries: [email protected]. Ground Floor, Nakheel Mall, Othman Ahmed Othman Street, Ismailia, Ismailia Governorate, Egypt.