Privacy Policy

Personal Data

any information relating to an identified or identifiable natural person.

Sensitive Data / Special Category Data

personal data revealing health information, financial account details, national ID numbers, or other categories requiring heightened protection under the Egyptian PDPL or GDPR.

Processing

any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

Data Controller

the entity that determines the purposes and means of processing personal data.

Data Processor

an entity that processes personal data on behalf of, and under the instructions of, a data controller.

Motivus

PC Power’s proprietary software solution for pharmaceutical distribution management, including order processing, inventory, warehouse, delivery, and customer relationship functionality.

Client

an organization that has engaged PC Power for Odoo ERP implementation services and/or a Motivus license or subscription.

5.1 Data From Clients and Prospective Clients

In the course of scoping, contracting, and delivering ERP and Motivus implementation projects, we may collect:

• Contact details of client representatives: name, job title, company name, email address, phone number, and office address;
• Commercial and contractual information: proposals, signed contracts, invoices, payment and billing details, and correspondence;
• Technical and functional requirements shared with us to configure Odoo modules (Accounting, Purchasing, Inventory, Manufacturing, Sales, HR, and others) or the Motivus platform;
• Communications exchanged via email, phone, video calls, or messaging platforms during the engagement.

5.2 Data Processed Through Odoo ERP Implementation Services

When we implement, configure, migrate data into, or provide support for a client’s Odoo environment, we may access or process personal data that resides within that environment, which can include:

• Employee and HR data (names, contact details, payroll-adjacent data, attendance, and organizational role) where a client’s HR or Payroll module is in scope;
• Customer and supplier data maintained in the client’s CRM, Sales, and Purchasing modules (names, contact details, order history, and billing/delivery addresses);
• Financial and accounting records associated with identifiable individuals (e.g. sole proprietors, authorized signatories) within the Accounting module;
• System access credentials and audit logs required to configure and test the client’s Odoo instance.

This data is generally provided to us by the client (as the data controller) for the specific purpose of implementation, migration, configuration, testing, and support, and PC Power processes it as a data processor strictly in accordance with the client’s instructions and the terms of the applicable services agreement.

5.3 Data Processed Through the Motivus Pharmaceutical Distribution Solution

Motivus is used by pharmaceutical distributors, pharmacies, and related supply-chain participants to manage orders, inventory, deliveries, and customer accounts. Depending on how a client configures and uses Motivus, personal data processed through the platform may include:

• Names, contact details, and business/professional information of pharmacy owners, procurement staff, sales representatives, and delivery personnel;
• Order, invoicing, and payment data associated with pharmacies and other business customers;
• Location and route data used for delivery and logistics planning;
• Product-level data (drug names, batch numbers, expiry dates) which, while primarily product data, may in limited circumstances be linked to an identifiable individual (for example, a prescribing or dispensing pharmacist recorded against a transaction).

PC Power does not intend Motivus to process patient-level medical records or clinical health data, and Motivus is designed for business-to-business distribution management rather than direct patient care. If any client configuration results in health-related data of an identifiable natural person being processed (for example, a pharmacist’s professional health-practice information, or data that a client chooses to input beyond the platform’s intended scope), such data is treated as Sensitive Data under Section 8 below, and clients are responsible for ensuring they have an appropriate legal basis (including any applicable healthcare regulatory approvals) before entering such data into the system.

5.4 Website and Communications Data

When you visit pcpower-eg.com, contact us through a web form, or email us, we may collect:

• Identity and contact data you submit voluntarily (name, email, phone number, company, and message content);
• Technical data such as IP address, browser type and version, device type, operating system, referring URL, and pages visited, collected automatically via server logs and, where used, cookies or similar technologies (see Section 13);
• Marketing preferences, such as whether you have subscribed to receive newsletters or updates from us.

5.5 Job Applicant and Personnel Data

If you apply for a role with PC Power, we collect the information contained in your CV/resume, cover letter, and any information provided during interviews or reference checks, including name, contact details, education, employment history, and, where voluntarily provided, other information relevant to the recruitment process.

We use personal data described above for the following purposes:

• To perform our contractual obligations, including scoping, implementing, configuring, migrating, testing, training on, and supporting Odoo ERP and Motivus deployments;
• To communicate with clients, prospects, and partners regarding proposals, contracts, invoices, project status, and support requests;
• To manage and secure user accounts and access permissions within Motivus and client Odoo environments;
• To maintain, troubleshoot, and improve the performance, security, and reliability of our Services;
• To comply with legal, regulatory, accounting, and tax obligations in Egypt and other applicable jurisdictions;
• To respond to inquiries submitted through our website or by email or phone;
• To evaluate job applications and manage recruitment;
• To send marketing communications about our services, where you have consented or where otherwise permitted by law, and always with the option to opt out;
• To detect, investigate, and prevent fraud, unauthorized access, and other security incidents;
• To enforce our agreements and establish, exercise, or defend legal claims.

7.1 Under the Egyptian Personal Data Protection Law

We process personal data on one or more of the following bases recognized under the Egyptian PDPL: your explicit consent; the necessity of processing to perform a contract to which you are a party or to take steps prior to entering into a contract; compliance with a legal obligation to which PC Power is subject; and PC Power’s legitimate business interests in operating, securing, and improving its Services, provided such interests do not override your fundamental rights and freedoms.

7.2 Under GDPR (For Data Subjects Located Outside Egypt)

Where the GDPR applies — for example, because a client, its customers, or its employees are located in the European Economic Area, the United Kingdom, or Switzerland — we rely on the following legal bases, as applicable: performance of a contract (Article 6(1)(b)); compliance with a legal obligation (Article 6(1)(c)); our legitimate interests, such as maintaining and improving our Services and ensuring network and information security (Article 6(1)(f)); and, where required, your consent (Article 6(1)(a)), which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

For any other jurisdiction in which our clients or their end users are located, we seek to apply an equivalent standard of lawful basis, purpose limitation, and data minimization consistent with local law.

Because our Motivus solution operates in the pharmaceutical distribution sector, we recognize that data handled by our clients may be adjacent to, or perceived as, health-related information. We apply heightened safeguards to any Sensitive Data that we process, including:

• Limiting collection of health-related or special category data to what is strictly necessary for the business-to-business distribution functions Motivus is designed to perform;
• Requiring an explicit legal basis (such as explicit consent, an applicable legal obligation, or another basis recognized under the Egyptian PDPL or GDPR Article 9) before any Sensitive Data is processed;
• Applying additional access controls, encryption, and logging to Sensitive Data where it exists within a client’s environment;
• Not using Sensitive Data for marketing, profiling, or any purpose beyond that for which it was originally provided.

PC Power does not knowingly collect patient clinical records, prescriptions tied to identifiable patients, or other individual patient health data through Motivus. Clients that operate in regulated healthcare or pharmaceutical contexts remain responsible, as data controllers, for ensuring their own use of the platform complies with applicable healthcare, pharmacy, and data protection regulations, including obtaining any patient consents required under local law.

9.1 Service Providers and Sub-processors

We share personal data with carefully selected third-party service providers who support our operations, including cloud hosting and infrastructure providers, email and communication platforms, accounting/invoicing software providers, and IT support contractors. These providers are contractually bound to process personal data only on our instructions, to maintain appropriate security measures, and to keep the data confidential.

9.2 Odoo S.A. and Third-Party Software Providers

Where a client’s Odoo deployment is hosted on Odoo S.A.’s own infrastructure (Odoo.sh or Odoo Online) rather than on-premise or on infrastructure managed directly by PC Power, personal data entered into that Odoo instance is also processed by Odoo S.A. (or its affiliates) in accordance with Odoo’s own privacy policy and data processing terms. PC Power recommends that clients review Odoo S.A.’s privacy and data processing documentation directly, and PC Power will assist clients, on request, in understanding the data flows applicable to their specific deployment.

9.3 Regulatory, Legal, and Law Enforcement Disclosures

We may disclose personal data where required to do so by Egyptian law, court order, or a competent regulatory or governmental authority (including, where applicable, pharmaceutical or healthcare regulators), or where necessary to protect the rights, property, or safety of PC Power, our clients, or others.

9.4 Business Transfers

If PC Power is involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring or surviving entity, subject to that entity’s commitment to honor the terms of this Privacy Policy or to provide equivalent protections.

PC Power does not sell personal data to third parties for their own independent marketing purposes.

Because PC Power serves clients both inside and outside Egypt, and because some of our infrastructure or software partners (such as Odoo S.A., headquartered in Belgium) operate internationally, personal data may be transferred to, stored in, or accessed from countries outside Egypt, including countries that may not have data protection laws equivalent to those in Egypt or the data subject’s home jurisdiction.

Where such transfers occur, PC Power takes steps designed to ensure an adequate level of protection, which may include: entering into data processing or data transfer agreements incorporating standard contractual clauses or equivalent safeguards; relying on the data subject’s explicit consent to the transfer; relying on the necessity of the transfer to perform a contract with the data subject; and/or verifying that the receiving party maintains appropriate technical and organizational security measures.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, tax, or reporting requirements. In general:

• Client contractual and financial records are retained for the duration of the business relationship plus the period required by Egyptian commercial, tax, and accounting law (generally at least five years after the relevant financial year, unless a longer period applies);
• Personal data processed within a client’s Odoo or Motivus environment is retained in accordance with the client’s own retention instructions and settings, as the data controller for that data;
• Website inquiry and marketing data is retained until you unsubscribe or request deletion, or for a reasonable period of inactivity, whichever is earlier;
• Job applicant data is retained for the duration of the recruitment process and for a limited period thereafter in case of related queries or future opportunities, unless you request earlier deletion.

When personal data is no longer required, we securely delete, anonymize, or archive it in accordance with our internal data retention and disposal procedures.

PC Power implements technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, appropriate to the nature and sensitivity of the data. These measures include, as applicable to a given engagement:

• Role-based access controls limiting access to personal data to personnel who need it to perform their duties;
• Use of encryption in transit (e.g. HTTPS/TLS) and, where supported by the hosting environment, encryption at rest;
• Secure authentication practices for administrative and support access to client Odoo and Motivus environments;
• Confidentiality obligations imposed on PC Power employees and subcontractors with access to client data;
• Logging and monitoring of access to production systems, and periodic review of access rights;
• Secure software development and configuration practices when customizing Odoo modules or the Motivus platform.

No method of transmission or storage is completely secure, and PC Power cannot guarantee absolute security. We encourage clients and users to also adopt strong password practices, restrict internal access appropriately, and promptly report any suspected security concerns to us.

Our website may use cookies and similar technologies (such as web beacons or local storage) to operate core site functionality, remember preferences, and understand how visitors use our site, including through analytics tools. Cookies used may include:

• Strictly necessary cookies required for the website to function correctly;
• Analytics/performance cookies that help us understand site usage in aggregate (e.g. via tools such as Google Analytics), where enabled;
• Preference cookies that remember choices you make, such as language settings.

Where required by applicable law, we will request your consent before setting non-essential cookies and will provide a mechanism to manage your cookie preferences. You can also control cookies through your browser settings, including blocking or deleting cookies, though this may affect site functionality.

14.1 Rights Under the Egyptian Personal Data Protection Law

Subject to the conditions and exceptions set out in the Egyptian PDPL and its executive regulations, you have the right to: be informed about the processing of your personal data; access your personal data held by us; request correction of inaccurate or incomplete data; withdraw consent to processing that is based on consent; request that we stop or restrict processing in certain circumstances; request destruction or erasure of your personal data when it is no longer needed for the purposes collected; and object to certain processing, including for direct marketing.

14.2 Rights Under GDPR (Where Applicable)

If GDPR applies to the processing of your personal data, you additionally have the right to: obtain a copy of your personal data in a structured, commonly used, machine-readable format (data portability); lodge a complaint with your local supervisory authority; and object to processing based on legitimate interests, including profiling, on grounds relating to your particular situation.

14.3 How to Exercise Your Rights

You may exercise any of the above rights by contacting us at support-esc@pcpower-eg.com. We may need to verify your identity before responding to a request. We will respond within the timeframe required by applicable law (generally without undue delay, and in any event within one month under GDPR, extendable in certain circumstances). If your personal data is processed by PC Power on behalf of a client as a data processor, we may direct your request to the relevant client or assist the client in responding, as appropriate.

Our website and Services are directed at businesses and professionals and are not intended for use by children. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete such data promptly.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, PC Power will assess the incident, take reasonable steps to contain and remediate it, and notify affected clients and, where legally required, the competent supervisory authority and affected data subjects, without undue delay and in accordance with the timelines required under applicable law (including the Egyptian PDPL and, where applicable, GDPR).

Our website or communications may contain links to third-party websites or services that are not operated by PC Power. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements. The “Effective Date” and “Last Reviewed” dates at the top of this document indicate when it was last updated. Material changes will be communicated to clients through reasonable means, such as email notice or a notice on our website, prior to taking effect where required by law.

This Privacy Policy is governed by the laws of the Arab Republic of Egypt, including the Personal Data Protection Law No. 151 of 2020, without prejudice to any mandatory data protection rights you may have under the laws of your own country of residence where those laws apply to the processing of your personal data. Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Egypt, unless otherwise required by applicable mandatory law.

If you have questions, concerns, or requests regarding this Privacy Policy or PC Power’s data practices, please contact us at: