Skip to main content
schengenie
Legal

Privacy policy

How Schengenie handles the personal data you send us on WhatsApp or by email, and your rights under Egyptian law.

Draft — under legal review

This text is awaiting legal review and may change.

Draft version 0.4

This policy explains how VisaFlow ("Schengenie", "we") handles personal data when you visit our website, book a call or contact us by WhatsApp or email. It follows Egypt's Personal Data Protection Law No. 151 of 2020 and its Executive Regulations, issued by Decree No. 816 of 2025 of the Minister of Communications and Information Technology.

Our website has no accounts, no sign-in and no uploads. You give us personal data only when you choose to book a call or to send it to us on WhatsApp or by email.

1.Who we are

Schengenie is the controller of your personal data, which means we decide why and how it is used.

2.What this policy covers

This policy covers our website, the calls you book with us and our conversations with you on WhatsApp and by email.

It does not cover websites and apps run by others, such as embassies, consulates, visa centres or WhatsApp itself. Their own privacy policies apply when you use them.

3.The personal data we collect

We collect only what we need to answer you and to provide the service you ask for. Most of it is what the consulate requires for a visa application. If you do not give it, we cannot prepare the application.

  • Website visits

    What it includes
    IP address, browser and device type, pages requested and the time.
    Where it comes from
    Your browser, through our hosting provider Cloudflare
  • Advertising measurement (Meta Pixel)

    What it includes
    The pages you view, your clicks on our WhatsApp buttons, your IP address, browser and device information, and Meta cookies such as _fbp. See our Cookie policy.
    Where it comes from
    Your browser, through the Meta Pixel on our website
  • Language choice

    What it includes
    Arabic or English, kept in a cookie in your browser when you choose a language yourself. See our Cookie policy.
    Where it comes from
    You
  • WhatsApp conversations

    What it includes
    Your mobile number, the name on your WhatsApp profile, your messages and the files you send
    Where it comes from
    You
  • Call bookings

    What it includes
    Your name, email address, mobile number and the time you chose
    Where it comes from
    You
  • Emails

    What it includes
    Your email address, your name, your messages and their attachments
    Where it comes from
    You
  • Your case

    What it includes
    Service, destination, purpose and dates of travel, visa-centre city, the fee we quoted, appointment date, time and place, and the visa decision if you tell us
    Where it comes from
    You and us; appointment confirmations from the visa centre
  • Travellers

    What it includes
    Names as printed in the passport, sex, date of birth, nationality, passport number and its issue and expiry dates, mobile number, employment status, earlier Schengen visas and fingerprints, answers the destination asks for, whether the traveller is under 18, and the name and relationship of a child's parent or guardian
    Where it comes from
    You
  • Documents

    What it includes
    Passport copies, photos, bank statements and other financial documents, employment and salary letters, your job offer or employment contract and the employer's documents (work visas), travel insurance, reservations, invitation letters, birth certificates and other family documents for children, signed guardian consent forms, and any other document the consulate requires
    Where it comes from
    You
  • Consents

    What it includes
    What you agreed to, when, in which message, and the version of the text you agreed to
    Where it comes from
    You
  • Requests about your data

    What it includes
    The type of request, its dates and our answer
    Where it comes from
    You

Please send documents only when we ask for them, and only the ones your application needs.

4.Sensitive personal data

The law treats some data as sensitive. In our work this means:

  • financial data, such as bank statements and salary letters;
  • all data about children, meaning travellers under 18;
  • health data, only if you choose to send medical documents for a trip made for treatment;
  • passport photos, which we treat as sensitive as a precaution.

We handle sensitive data only under our licence from the Personal Data Protection Center (PDPC), only for your application, and only with your explicit written consent. You give that consent in a WhatsApp message or an email before we start work on your file. For a child, the parent or legal guardian gives it.

5.Why we use your data, and our legal basis

  • Answering your questions on WhatsApp and by email

    Legal basis under Law No. 151 of 2020
    Your request and your consent
  • Preparing your application: checking documents, filling in forms, booking appointments and submitting online forms in each traveller's own name

    Legal basis under Law No. 151 of 2020
    Necessary for our contract with you; your explicit written consent for sensitive data; a parent's or guardian's consent for each child
  • Keeping you informed about your case on WhatsApp and by email

    Legal basis under Law No. 151 of 2020
    Necessary for our contract with you
  • Keeping our website working and secure, for example protecting it from attacks

    Legal basis under Law No. 151 of 2020
    Our legal duty to protect personal data, and our legitimate interest in running a secure service
  • Meeting our legal duties, such as tax, consumer protection and data protection rules, and lawful requests from authorities

    Legal basis under Law No. 151 of 2020
    Legal obligation
  • Measuring visits to our website and clicks on our WhatsApp buttons, to measure and improve our advertising on Facebook and Instagram (Meta Pixel)

    Legal basis under Law No. 151 of 2020
    Our legitimate interest in measuring our advertising
  • Establishing or defending legal claims

    Legal basis under Law No. 151 of 2020
    Permitted by Article 6 of the law

We do not sell personal data. Apart from the Meta Pixel described above, we do not use it for advertising, and we do not make decisions about you by automated means alone.

We do not send marketing messages at present. If we start, we will first ask for your separate consent and will hold the licence the law requires for electronic marketing.

6.Children

Only a parent or legal guardian can ask us to help with an application for a traveller under 18. They must:

  • give consent, by WhatsApp or email, for each child; and
  • send us a signed guardian consent form before we prepare the file.

This consent lasts until we delete the child's details under section 10, no later than 90 days after the application is closed or cancelled. The parent or guardian can withdraw it earlier; we will then stop working on that child's application and delete the child's documents.

7.Applying for other adults

If you apply for another adult, you must have their permission and show them this policy before you give us their details. They can contact us directly to use their rights under section 12.

8.Who we share data with

Service providers that process data for us. They may use it only on our instructions.

  • Cloudflare, Inc.

    What they do for us
    Delivers our website, protects it from attacks and forwards emails sent to our addresses
    Where the data is
    Cloudflare's worldwide network
  • Google LLC

    What they do for us
    Google Calendar and Google Meet: hold your call booking, send your invitation and run the call
    Where the data is
    May be outside Egypt
  • Our email provider

    What they do for us
    Hosts the inbox that receives the emails you send us
    Where the data is
    May be outside Egypt

Others who receive data for their own purposes:

  • Meta Platforms, through the Meta Pixel on our website: the visit and click data described in section 3. Meta uses it under its own privacy policy, including to show and measure ads.
  • WhatsApp (Meta), when you choose to message us there. WhatsApp's own terms and privacy policy apply to your messages.
  • Consulates, embassies and visa centres (for example VFS Global, TLScontact and BLS International). When we book an appointment or fill in an online form for you, we enter the travellers' data on their websites. They use it under their own rules and the law of the destination country.
  • Authorities, when the law requires us to share data.
  • Our lawyers and accountants, who must keep it confidential.

9.Transfers outside Egypt

Our website is delivered through Cloudflare's worldwide network, the Meta Pixel sends visit and click data to Meta outside Egypt, and Google, WhatsApp and our email provider may process your bookings and messages outside Egypt, as section 8 shows.

We transfer data outside Egypt only:

  • with your consent, which you give when you ask us to start work on your application; and
  • with safeguards: contracts with each provider and strict limits on who can see your data.

Data that we enter on consulate and visa-centre websites goes to the destination country's authorities. We send it because you asked us to apply on your behalf, and with your explicit consent.

10.How long we keep data

  • Documents you send us

    How long we keep it
    Deleted from our WhatsApp, our email and any copy we made 30 days after the application is closed or cancelled
  • Traveller details and signed guardian forms

    How long we keep it
    Removed 90 days after the application is closed or cancelled
  • Record of a closed application (reference, service, destination, dates, status and fee, without any traveller's name, passport details or documents)

    How long we keep it
    As long as tax and accounting law requires
  • Questions that did not lead to an application

    How long we keep it
    Deleted after 365 days
  • Call bookings

    How long we keep it
    Deleted after 365 days, unless the call leads to an application
  • WhatsApp messages with us

    How long we keep it
    Set to disappear after 90 days
  • Emails with us (other than documents)

    How long we keep it
    As long as we need them to answer you or to handle your application
  • Website visit records kept by our hosting provider

    How long we keep it
    As set by our hosting provider, Cloudflare
  • Consent records

    How long we keep it
    As long as we keep the data they cover. When traveller details are removed, we keep only the type, version and time of the consent.
  • Requests about your data

    How long we keep it
    As long as we need to show that we handled them

When we delete your documents or details under this schedule, we will tell you by WhatsApp or email. If a dispute, a complaint or a request from an authority requires it, we may keep the relevant data longer, only for that purpose and only as long as needed.

11.How we protect your data

  • Only the staff who work on your case can see your data, and each only what their role needs.
  • Our website is served over an encrypted connection (HTTPS).
  • We delete documents and traveller details on the schedule in section 10.
  • Staff are bound by confidentiality and trained in data protection.
  • We only contact you from the WhatsApp number and email address shown on this website. Do not send documents to anyone who claims to be Schengenie from another number or address.

12.Your rights

Under Article 2 of the law, you have the right to:

  1. know what personal data we hold about you, see it and get a copy;
  2. withdraw your consent;
  3. have your data corrected, completed, updated or deleted;
  4. limit our processing to a specific scope;
  5. be told about any breach of your personal data;
  6. object to processing, or to its results, where it conflicts with your fundamental rights and freedoms.

How to use your rights: message us on WhatsApp or email us at hello@schengenie.com, from the number or address you used with us.

We may ask you to confirm who you are. We answer within 6 working days of receiving your request, as Article 32 of the law requires. If we cannot do what you ask, we explain why and tell you how to complain. Requests are free of charge.

Some limits apply. We may have to keep data the law requires us to keep. If you ask us to delete data while an application is in progress, we will have to stop working on it. We cannot delete data a consulate or visa centre already holds; you can contact them directly.

You can withdraw your consent at any time by WhatsApp or email. Withdrawing does not affect what we did before. If the consent was needed for your application, we will have to stop working on it, and we will delete the data unless the law requires us to keep it.

14.Complaints

Please contact us first, and we will try to put things right. You can also complain to the Personal Data Protection Center. The PDPC decides complaints within 30 working days (Article 33 of the law). You may also go to court.

15.If a data breach happens

If a breach affects your personal data, we will notify the PDPC within 72 hours of becoming aware of it. We will tell you within 3 working days of notifying the PDPC, by WhatsApp or email, and explain what we have done about it.

16.Cookies

Our website sets one cookie of its own, only when you choose a language yourself: it remembers your language. It also uses the Meta Pixel, which sets Meta cookies such as _fbp to measure visits and WhatsApp-button clicks for our advertising. Our Cookie policy explains both, and how to opt out.

17.Changes to this policy

The version of this policy is shown at the top. If we change it in a way that matters, we will publish the new version on this page, tell clients with an open application by WhatsApp or email and, where the law requires, ask for consent again.

18.Contact

Book a callWhatsApp (opens WhatsApp)