Privacy policy

Who is responsible

Chessawy is run by an individual in Egypt (the “controller” in the law); the owner’s name will be added here before launch. Our contact address is at the bottom of this page. Egypt’s Personal Data Protection Law (Law No. 151 of 2020, “PDPL”) applies to us, and the EU’s GDPR also applies to visitors in the European Economic Area. We make no decisions about you by automated means.

What we store

If you join the course waitlist we store:

• your email address (required), saved in lower case;
• your name (optional);
• the language of the page you used (Arabic or English);
• your country, from a short list (optional);
• your level (beginner, intermediate or advanced) and the topics you are interested in (optional);
• your consent to receive email about the courses, and the time you gave it;
• where you came from: a campaign tag or page path, up to 100 characters.

Other people’s details

Coaches and tournament organisers who ask us to list them give us contact details (name, phone, email, WhatsApp, photo). We publish only what they agree to show, and keep the rest private. Staff who edit the site have an account with an email address. If you write to us, your message stays in the mailbox that receives it. All of this is handled under this policy, and you have the same rights over it.

What we do not store

Browsing the site needs no account, and we set no cookies of our own. There is no advertising, no tracking pixel and no profile of you. We plan to measure visits with Cloudflare Web Analytics, which does not use cookies and does not store a personal identifier. Our providers (below) may set technical cookies of their own, for example to tell people from bots. We do not store payment details: there is nothing to buy yet.

Why we use it, and our legal basis

We use waitlist details for one purpose: to tell you about Chessawy courses (when they open, what they cost) and to understand what players want from them. Our basis is your consent, which you give with a tick box on the form. Withdrawing it is as easy as giving it. We never sell or rent your details and never use them for advertising by others.

Protection against abuse

The form uses Cloudflare Turnstile to check that a person, not a script, is signing up, and your IP address is used briefly to limit repeated sign-ups. This is our legitimate interest in keeping the site safe, and you may object to it. Our hosting providers and Cloudflare may keep short-lived technical logs that include IP addresses. We do not save your IP address in your waitlist entry.

How long we keep it

Until you ask us to delete it or you unsubscribe, and in any case no longer than 24 months after you joined or after our last email to you, whichever is later. If we close the waitlist without launching, we delete the list.

Who can see it, and where it is kept

Only the site owner and editors the owner trusts can read the list. We use these services to run the site: Cloudflare (the website and Turnstile), Netlify (the content system) and Neon (the database, in the United States). So your details are processed outside Egypt and the EEA. We send these providers only what is needed and rely on the safeguards that the PDPL and the GDPR require for transfers.

Your rights

You can ask us to: tell you what we hold about you, correct it, delete it, stop using it, or give you a copy. You can withdraw your consent at any time, and every email we send about the courses will include a way to unsubscribe. Write to the address below from the email you used to sign up. We answer within 30 days, and deletion usually takes a few days. Under the PDPL you can also complain to Egypt’s Personal Data Protection Center; if you are in the EEA you can complain to your national data protection authority.

Children

The waitlist is for adults. If you are under 18 please ask a parent or guardian to sign up for you. If you think a child has joined without permission, write to us and we will delete the entry.

Keeping it safe

The list is not public and cannot be read through the website. Access is limited to named accounts, and the system rejects duplicate sign-ups. Anyone could type your email address, so if someone signed you up without you knowing, tell us and we will remove it. No system is perfect: if a breach would put you at risk we will tell you and the authorities as the law requires.

Changes

If we change this page in a way that matters, we will update the date above and announce the change on this page. If you are on the waitlist, we will also email you before it applies.