Legal
How we handle personal data when you use thurix.com or contact us through the site.
Last updated: 26 July 2026
Thurix ("we", "us") operates the website thurix.com and related marketing pages. We act as the controller of personal data described in this policy for those activities.
For privacy requests or questions, contact us at alaa@thurix.com. We have not appointed a data protection officer.
This policy covers personal data collected through thurix.com, including the contact form and optional analytics cookies if you accept them.
When we deliver custom software, AI systems, or consulting for a client, processing of end-user or employee data is governed by our contract with that client and may be covered by a separate privacy notice.
When you submit the contact form, we collect the fields you enter: name, email address, optional company name, optional "what do you need" selection, and your message. We also record the site language (Arabic or English) you were using.
We use a hidden honeypot field to reduce spam. If that field is filled, we treat the submission as spam and do not rely on the other fields.
We use this information to read your inquiry, reply with a scoped plan and price, and follow up on a potential engagement. We do not sell contact form data.
After you submit the contact form, we send a short confirmation to the email address you provided. The message states that we received your inquiry and aim to reply within one business day.
That email is operational communication linked to your request, not marketing. You can still ask us to delete your data as described under "Your rights".
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the General Data Protection Regulation (GDPR):
Where Egyptian law applies, we process personal data in line with Law No. 151 of 2018 on Personal Data Protection and its executive regulations, including processing on lawful grounds such as your consent, performance of pre-contractual steps, or legitimate purposes compatible with the law.
We do not publish a company registration number or trade register excerpt on this site. If you need corporate identity documents for procurement, request them directly at alaa@thurix.com.
We may enable Google Analytics 4 (GA4) on thurix.com when an analytics measurement ID is configured in our deployment. GA4 does not load until you accept analytics in the cookie banner. If you decline, no request is made to Google’s analytics endpoints for measurement.
When enabled and accepted, GA4 may store and read cookies or similar identifiers on your device and collect event data such as pages viewed, approximate geography derived from IP address, browser and device characteristics, and referral source. Google processes this data as our processor under Google’s terms.
We configure GA4 for site-level statistics. We do not intentionally combine analytics identifiers with contact form content to profile identified individuals.
Google’s privacy information: https://policies.google.com/privacy
We use service providers to operate the site and contact flow. They process data only on our instructions and for the purposes described here:
Our team is based in Cairo, Egypt. Email and analytics providers may process data in the European Union, the United States, or other countries where they operate.
We have not listed a single datacenter region for thurix.com hosting in this policy because it depends on the hosting account in use. Ask us at alaa@thurix.com if you need the current hosting location for a vendor review.
Where GDPR requires safeguards for transfers outside the EEA/UK, we rely on mechanisms available under applicable law (such as standard contractual clauses offered by processors) when relevant.
Contact form submissions and related email threads: up to twenty-four (24) months after our last meaningful contact, unless a longer period is needed for an active contract, legal claim, or legal obligation.
Analytics data: retained according to the retention settings in our GA4 property (typically up to fourteen (14) months for standard event data unless we change configuration).
Cookie consent choice: stored locally in your browser until you clear site data or change preferences via "Cookie preferences" in the footer.
Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing, and to data portability where applicable. You may withdraw analytics consent at any time via "Cookie preferences"; withdrawal does not affect processing that already occurred.
To exercise rights regarding contact form data, email alaa@thurix.com with enough detail for us to locate your inquiry. We respond within timeframes required by applicable law.
If GDPR applies, you may lodge a complaint with your local supervisory authority. If Egyptian law applies, you may contact the Egyptian Personal Data Protection Center when a complaint mechanism is available to you.
We use reasonable technical and organizational measures appropriate to a small studio website, including transport encryption (HTTPS) and access limits on systems that hold inquiries.
We may update this policy. We will post the new version on this page with an updated date. Material changes may also be noted on the site where practical.