Last updated: September 2026
Ahmed Mamdouh & Co. — Kreston Egypt (“we”, “us”, “the Firm”) is committed to protecting the personal data entrusted to us. This policy explains what we collect through this website and in the course of our professional work, why we hold it, who we share it with, and the rights available to you under Egyptian law.
We are a professional accounting and auditing firm registered in Egypt and an independent member of the Kreston Global network. Our registered office is Rihana Plaza Tower, 10th Floor, Zahraa El Maadi, Cairo, Egypt.
1. Scope of this policy
This policy applies to personal data we process as a data controller: information collected through krestonegypt.com, enquiries and correspondence, recruitment applications, and the administration of client relationships.
It does not extend to personal data we process on a client’s behalf in the course of an engagement — for example, payroll or accounting records supplied to us by a client. In those cases the client remains the controller and its own privacy notice governs, while our handling is set out in the engagement letter and in section 6 below.
2. Information we collect
Visitors to this website
Our servers record standard technical information: IP address, browser type and version, operating system, referring page, the pages visited and the time of each visit. This is used to keep the site secure and to understand which content is useful.
Enquiries
When you submit the contact form we collect your name, email address, telephone number, company name, the service you are interested in, the nature of your enquiry and the content of your message. All of these except telephone and company name are required in order to respond.
Job applicants
Our careers form collects the personal and educational details it displays at the point of entry, and we receive curriculum vitae and covering letters sent to our human resources address. Please send only the information relevant to your application; we ask that you do not include health data, religious affiliation, or other sensitive categories unless a specific role requires it and we have asked for it.
Clients and prospective clients
Before accepting an engagement we are required to verify identity. This normally includes identification documents, proof of address, ownership and control information, and screening against sanctions and politically-exposed-person lists. These checks are a legal obligation under Egyptian anti-money-laundering legislation, not a commercial choice.
3. Why we use your information
- To respond to you. Answering enquiries, arranging meetings, and providing the information you have asked for.
- To deliver our services. Performing audit, tax, accounting and advisory engagements, and administering the client relationship.
- To meet legal and professional obligations. Client due diligence, anti-money-laundering checks, quality and independence monitoring, and responding to lawful requests from regulators and authorities.
- To recruit. Assessing applications and, where an offer is made, preparing employment records.
- To improve the site. Understanding how the site is used and keeping it secure.
We rely on your consent for the contact form and for non-essential cookies, on the performance of a contract for engagement administration, on our legal obligations for regulatory checks and record retention, and on our legitimate interest in operating and securing the website.
4. Cookies and analytics
This site uses cookies that are necessary for it to function — session handling, security, and remembering your language and display-mode preference. These cannot be switched off without the site ceasing to work correctly.
We also use Google Analytics, through Google Site Kit, to understand aggregate usage. These cookies are set only where analytics are enabled and you can refuse them without losing access to any part of the site. Most browsers allow you to block or delete cookies in their settings.
5. Who we share it with
We do not sell personal data, and we do not share it for third-party marketing.
We disclose it only in these circumstances:
- Within the Kreston Global network, where an engagement requires expertise in another market. Member firms are separate legal entities; we share only what the referral requires and we tell you before we do it.
- To service providers who act on our instructions — hosting, email delivery, and IT support — under contractual confidentiality obligations.
- To regulators, courts and authorities where disclosure is required by law, including under anti-money-laundering and tax legislation.
- To professional advisers and insurers where necessary to establish or defend legal claims.
6. Professional confidentiality
Beyond data protection law, we are bound by the confidentiality obligations of our profession. Information obtained in the course of an engagement is not disclosed outside the Firm without the client’s authority, unless there is a legal or professional duty to disclose. That duty survives the end of the engagement.
7. International transfers
Egypt’s Personal Data Protection Law restricts transfers of personal data abroad. Where an engagement requires us to share information with a Kreston member firm or a service provider outside Egypt, we do so only with an adequate legal basis and appropriate safeguards, and only to the extent the work requires.
8. How long we keep it
Audit and engagement files are retained for the period required by Egyptian company, tax and anti-money-laundering law — generally five years from the end of the relationship, and longer where a matter remains open or a statutory period requires it.
Enquiries that do not lead to an engagement are held for up to two years. Unsuccessful job applications are held for up to one year so that we can consider you for future openings, unless you ask us to delete them sooner.
9. Your rights
Under the Personal Data Protection Law (Law No. 151 of 2020) you may:
- ask to know what personal data we hold about you and obtain a copy;
- ask us to correct data that is inaccurate or incomplete;
- ask us to erase data we no longer have a lawful reason to keep;
- withdraw consent where we rely on it, without affecting processing carried out before you withdrew it;
- object to processing carried out on the basis of our legitimate interests;
- ask us to restrict processing while a dispute about accuracy or lawfulness is resolved.
These rights are not absolute. Where data forms part of an audit file or is held to satisfy a statutory retention or anti-money-laundering obligation, we may be unable to erase it — we will explain the reason if that is the case.
To exercise a right, write to us using the details below. We will respond within the period the law allows.
10. Security
We apply technical and organisational measures appropriate to the sensitivity of the information we hold, including encrypted transmission, access controls limiting information to those who need it, and confidentiality undertakings from every member of staff. No system is completely secure, but we take these obligations seriously and review them regularly.
11. Children
This site is directed at businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us information, please contact us and we will delete it.
12. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The date at the top shows when it was last revised. Material changes will be brought to your attention.
13. Contact us
Questions, requests and complaints about how we handle personal data should be addressed to:
Ahmed Mamdouh & Co. — Kreston Egypt
Rihana Plaza Tower, 10th Floor
Zahraa El Maadi, Cairo, Egypt
Email: info@krestoneg.com
Telephone: 002 01126639119
If you are not satisfied with our response, you may complain to the Egyptian Personal Data Protection Centre established under Law No. 151 of 2020.