Privacy policy

1. Who is responsible for your data

The data controller is BAZAAR, Cairo, Egypt. For any question or request about your data, write to info@bazaar.help or message us on WhatsApp through the button on this site. The same contact handles data-protection requests.

2. Data we collect from workers

When you register as a skilled worker we collect:

• your full name and WhatsApp number;
• your Egyptian national ID number (14 digits), from which we derive your date of birth, gender and governorate;
• where you live now, whether you hold a passport, your trade or trades, years of experience, skills, preferred countries and the date you are available from;
• optionally: your email address, certificates, past employers, photos and videos of your work and a CV;
• the consents you gave and the time you gave them, the language you used and a hashed (irreversible) form of your IP address.

Your national ID number is used only to prevent duplicate registrations and to pre-fill your profile. It is never shown to employers and is masked inside our own tools.

Registration is free and open only to people aged 18 or older.

3. Data we collect from employers

When you send a request or contact us we collect the company or project name, your name, country, email address, phone or WhatsApp number, the requested trades and headcount, the start date, your message, the time you gave consent, your browser type and a hashed form of your IP address.

4. Why we use your data

We use workers' data to create and verify a profile, to contact you on WhatsApp, to book skills tests, to propose you to employers who look for your trade and, if an employer selects you, to arrange the contract, attestation, visa, medical examination and travel. We use employers' data to answer the request, prepare a shortlist and follow up on the placement.

We also use data to keep the records that Egyptian overseas-employment regulations require, to protect the site against abuse (fair-use limits and bot protection) and to understand how the site is used through aggregated statistics.

Our legal bases are your consent (each consent on the registration form is separate and can be withdrawn), the performance of the placement service you asked for, our legal obligations as a licensed agency and our legitimate interest in keeping the site secure.

5. Who can see your data

Inside BAZAAR, only our own staff can open profiles and requests; every change is recorded in an audit log.

• Employers: only with your consent and only after your profile has been checked, we share your profile (profile code, name, trade, experience, skills, certificates, work photos and videos, CV) with employers outside Egypt who are looking for your trade. Employers never receive your national ID number. Your contact details are shared only when a placement with that employer is being arranged.
• Our website: with your separate consent, your first name, trade, years of experience and one work photo may appear in the profile cards on our home page.
• Authorities: the Egyptian Ministry of Labour and the authorities of the destination country, where contract attestation, work permits or visa processing require it.
• Service providers who process data for us: Google Cloud (hosting and backups, data centre in the United States, encrypted in transit and at rest), Cloudflare (Turnstile bot protection, which processes your IP address and browser signals), WhatsApp by Meta (our messages with you follow WhatsApp's own terms), Namecheap (email), Google Analytics and PostHog (usage statistics, see the cookies section).

We do not sell personal data and we do not use it for advertising.

6. International transfers

The site and its database are hosted on Google Cloud in the United States. Worker profiles are shared, with consent, with employers in Europe, the Gulf and other destination countries. These transfers rely on your explicit consent and on contractual safeguards with our service providers.

7. How long we keep data

• Worker profiles: while you are available for work and for up to 24 months after our last contact. After that the profile is anonymised: name, phone number, email, national ID number, documents, photos and videos are removed; the profile code and dates are kept for statistics.
• Employer requests: up to 24 months after the request is closed.
• Deletion requests: handled within 30 days. One line stays in the audit log (profile code, date and the fact that the profile was anonymised) so we can prove the deletion.
• Backups: overwritten within 30 days, so deleted data may remain in a backup for up to 30 days.
• Technical logs with hashed IP addresses: up to 30 days, to enforce fair-use limits.

8. Your rights

You can ask us at any time to see the data we hold about you, to correct it, to delete it, to receive a copy of it, to stop a particular use or to withdraw a consent. Withdrawing a consent does not affect what was done before it. To protect your data we may ask you to confirm a request from the WhatsApp number you registered with. We answer within 30 days.

Workers can also use the "Request deletion of my data" link on the registration page.

If you are not satisfied with our answer you can complain to the Personal Data Protection Centre in Egypt. Residents of the European Union or the United Kingdom also have the rights of the GDPR, including the right to complain to their local supervisory authority.

9. Cookies and analytics

The public site sets one cookie, and only when you choose a language with the language selector: it remembers the language you picked and is deleted when you close your browser. Our administrators also receive a login session cookie.

We measure site usage with Google Analytics 4 configured without cookies, without advertising features and with anonymised IP addresses, and with PostHog, which stores a random identifier in your browser's local storage (not a cookie) to count visits and understand how pages are used. Neither tool is used for advertising, which is why the site shows no cookie banner. You can reset this identifier by clearing the site data in your browser.

10. Security

The site is served over HTTPS only. Data is encrypted at rest and in transit. Access to profiles is limited to named administrators with strong passwords and bot protection on login, every change is logged, national ID numbers are masked, forms are protected by fair-use limits and verification, and the database is backed up daily to encrypted storage.

11. Children

Our services are for adults only. We do not knowingly collect data from anyone under 18, and we delete any such profile as soon as we become aware of it.

12. Changes to this policy

When we change this policy we update the date at the top of the page. For important changes we also add a notice on the site.

13. Contact

BAZAAR, Cairo, Egypt. Email info@bazaar.help, or message us on WhatsApp through the button on this site.