Privacy Policy | PremastLab

Who we are

Winjii Soft, trading as PremastLab, is a company registered in Egypt. We operate this website and are the data controller for the personal information described in this policy.

We are also the company behind Premast and Maatix. Those are separate services with their own privacy policies and terms, which you accept when you sign up for them — this policy covers https://premastlab.com only.

For anything in this policy, or to exercise any of the rights below, contact us at [email protected].

Information we collect

We keep data collection to what we need to answer you and run the site.

Information you give us — when you submit the contact form or email us: your name, email address, company, budget or timeline details, your project description, and any file you choose to attach.
Information collected automatically — pages visited, referring page, approximate location derived from IP address, device and browser type, and similar analytics data.
Cookies and similar technologies — small files used to keep the site working and to measure traffic. See “Cookies and analytics” below.

We do not ask for special category data such as health, biometric, political, or religious information, and we ask that you do not send it to us.

How we use your information

To respond to your enquiry and discuss a possible engagement.
To prepare proposals, estimates, and contracts.
To deliver and support services you have engaged us for.
To understand how the site is used so we can improve it.
To protect the site against spam, abuse, and security incidents.
To meet accounting, tax, and other legal obligations.

We do not sell your personal information, and we do not add you to a marketing list from a contact form submission without your consent.

Legal bases for processing

We work with clients in the UK and EU, so the UK GDPR and EU GDPR apply to that processing alongside Egyptian data protection law. Our legal bases are:

Legitimate interests — responding to enquiries, securing the site, and understanding aggregate traffic.
Performance of a contract — delivering services you have engaged us for.
Consent — non-essential analytics cookies, where consent is required. You can withdraw it at any time.
Legal obligation — keeping records we are required by law to keep.

Who we share information with

We share personal information only with providers who help us operate the business, and only as far as they need it:

Hosting and infrastructure providers that run this website.
Our workflow automation tool, which receives contact form submissions and routes them onward.
Our email provider, where enquiries are received and answered.
A spreadsheet and our own customer relationship system, where we track enquiries and projects. The CRM is operated by us, not by a third party.
Google Analytics, which measures site traffic.
Professional advisers such as accountants and lawyers, where necessary.

We may also disclose information where the law requires it, or to establish or defend legal claims. If our business is reorganised or sold, information may transfer as part of that transaction, subject to this policy.

International transfers

We are based in Egypt, which has not been the subject of an adequacy decision by the European Commission or the UK government. Where we receive personal information from the UK or European Economic Area, we rely on Standard Contractual Clauses — with the UK Addendum or International Data Transfer Agreement where the UK GDPR applies — together with appropriate technical and organisational safeguards.

Our service providers may also process information in other countries. Where they do, we rely on the transfer mechanisms those providers have in place.

How long we keep information

Enquiries that do not become projects — 12 months, then deleted.
Client and project records — for the duration of the engagement plus the period required for tax and accounting purposes.
Analytics data — according to the provider's standard retention settings.

You can ask us to delete your information sooner, subject to any records we are legally required to keep.

Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Delete your information.
Restrict or object to how we use it, including objecting to processing based on legitimate interests.
Receive your information in a portable format.
Withdraw consent where we rely on it.
Opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined under California law.

To exercise any of these rights, email [email protected]. We will respond within the time the applicable law allows, normally within one month. We will not treat you differently for exercising your rights.

If you are in the UK or EU and believe we have not handled your information properly, you can complain to your local supervisory authority — the Information Commissioner's Office in the UK, or your national data protection authority in the EU.

Cookies and analytics

We use a small number of cookies to keep the site working and to measure how it is used. Essential cookies cannot be switched off. For analytics we currently use Google Analytics, which sets cookies to measure visits and page views.

Analytics cookies are only set if you accept them. Google Analytics does not load until you do, so nothing is measured before you choose. You can change your mind at any time using the Cookie Settings link in the footer of any page — withdrawing consent stops the script loading and clears the analytics cookies already set.

If we add further analytics or advertising tools, we will update this section before they go live.

Most browsers let you block or delete cookies in their settings. Blocking essential cookies may stop parts of the site from working.

Security

We use encryption in transit, access controls, and reputable hosting providers to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but where a breach affects you and the law requires it, we will notify you and the relevant authority.

Children

This website is intended for businesses and professionals. It is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.

Changes to this policy

We may update this policy as our services or the law change. The effective date at the top of this page always reflects the current version, and material changes will be highlighted here.

Contact us

Questions about this policy, or about your personal information: [email protected].