Legal centre

All the agreements and policies governing your use of the Wthaiq platform, in one organised place.

All documents are governed by the laws of the Arab Republic of Egypt · Effective date: 1 June 2026

Data Retention Policy

Print / PDF
Note: This English text is provided for convenience only. The Arabic version is the authoritative and binding text; in the event of any discrepancy or conflict of interpretation, the Arabic text prevails.
Date of issue: 1 June 2026Date of entry into force and effect: 1 June 2026Last updated: 1 June 2026

Last updated: 1 June 2026

Effective date: 1 June 2026

Chapter One: General Provisions

1. Introduction

This Data Retention Policy (the “Policy”) governs the manner in which Wthaiq retains data, documents and electronic records, the periods for which they are retained, and the mechanisms for their deletion, destruction or archiving, in a manner consistent with legal, operational and security requirements.

This Policy forms an integral part of the Terms and Conditions of Use, the Privacy Policy, the Data Deletion Policy, the User Agreement and the remaining legal documents of Wthaiq.

2. Objectives of the Policy

This Policy aims to:

  • Protect users’ data.
  • Comply with legal and regulatory requirements.
  • Support business continuity.
  • Manage the data lifecycle.
  • Reduce unnecessary retention of data.
  • Strengthen information security.

3. Scope of Application

This Policy applies to all data processed by Wthaiq, including:

  • Account data.
  • Personal data.
  • Contracts and documents.
  • Electronic signature records.
  • System records (Logs).
  • Backups.
  • Technical support data.
  • Subscription and invoicing data.
  • Any other data processed through the Platform.

4. General Principles

Wthaiq adopts the following principles when retaining data:

  • Retaining data only for the period necessary.
  • Minimising the data retained wherever possible.
  • Protecting data throughout the retention period.

Deleting, destroying or anonymising data once the need for it has ceased, unless the law requires it to be retained for a longer period.


Chapter Two: Data Retention Periods

5. Account Data

Account data may be retained throughout the period during which the account is active.

Following closure of the account, certain of its data may be retained for the period necessary in order to:

  • Perform legal obligations.
  • Protect legal rights.
  • Prevent fraud.
  • Settle disputes.
  • Comply with tax or accounting requirements.
  • Meet cybersecurity requirements.

6. Documents and Contracts

Wthaiq retains the documents and contracts created or uploaded by the User in accordance with:

  • The term of the subscription.
  • The account settings.
  • The User’s requests.
  • Legal requirements.
  • The Data Deletion Policy.

Wthaiq bears no responsibility for retaining documents for an indefinite period unless this is stipulated within the Service.

7. Electronic Signature Records

Electronic signature records and the technical data associated with them may be retained for the period necessary in order to:

  • Verify operations.
  • Prove transactions.
  • Handle disputes.
  • Comply with legal requirements.
  • Protect the security of the Services.

8. System Records (Logs)

System records, including sign-in records, IP addresses, and activity and security event records, may be retained for such period as Wthaiq considers appropriate in order to achieve:

  • Protection of the security of the Platform.
  • Investigation of security incidents.
  • Detection of fraud.
  • Performance monitoring.
  • Compliance with legal and regulatory obligations.

These records are not retained for longer than necessary unless the law or a pending dispute requires otherwise.


Chapter Three: Backups

9. Creation of Backups

Wthaiq may create periodic backups of data for the purpose of:

  • Business continuity.
  • Data restoration.
  • Disaster recovery.
  • Protecting the Services against data loss.

10. Retention Period of Backups

Certain data may continue to appear within the backups after being deleted from the operational systems, until the backup cycle has ended or the copies are replaced in accordance with the approved technical procedures.

11. Use of Backups

Backups are not used as a means of restoring deleted data on the basis of individual requests by users, unless this is technically possible and permitted in accordance with the applicable operational and legal procedures.

Chapter Four: Deletion and Destruction of Data

12. Expiry of the Retention Period

Upon expiry of the prescribed retention period, Wthaiq may take one of the following measures, according to the nature of the data and the legal obligations:

  • Permanently delete the data.
  • Destroy the data in accordance with the approved technical procedures.
  • Anonymise the data such that it cannot reasonably be linked to the person to whom it relates.
  • Archive the data where the law or business requirements so require.

13. Methods of Destruction

Wthaiq uses, whenever appropriate, reasonable technical and organisational means to destroy or delete data in a manner that reduces the likelihood of its unauthorised recovery.

The deletion mechanisms may vary according to the type of data and the nature of the storage media used.

14. Deletion at the User’s Request

The User may request the deletion of his data in accordance with the Data Deletion Policy and the Privacy Policy.

Execution of the request is subject to the following:

  • Legal requirements.
  • Contractual obligations.
  • The rights of third parties.
  • Security requirements.
  • Mandatory retention periods.

15. Data Excluded from Deletion

Wthaiq may retain certain data, even after a deletion request, where its retention is necessary in order to:

  • Comply with laws.
  • Enforce or defend legal rights.
  • Prevent fraud or misuse.
  • Comply with judicial or regulatory orders.
  • Protect the security of the Platform or its users.
  • Perform tax or accounting obligations.

Chapter Five: Retention of Specialised Records

16. Technical Support Records

Records of technical support requests, correspondence and fault-handling data may be retained for the period necessary to improve the Services, resolve disputes, or comply with legal obligations.

17. Financial Records

Invoices, payment records, subscription records and financial entries may be retained for the period imposed by tax, accounting or regulatory laws.

18. Cybersecurity Records

Security event records, incident reports, access attempt records and fraud detection records may be retained for as long as this is necessary to protect the Platform or to comply with the law.

19. Compliance Records

Records relating to legal, regulatory or contractual compliance, including records of consents, acknowledgements and data subject requests, may be retained for the period necessary to demonstrate compliance or to perform legal obligations.


Chapter Six: Data Following Termination of the Account

20. Expiry of the Subscription

The expiry of the subscription or the closure of the account does not automatically result in the immediate deletion of all data.

Wthaiq may continue to retain certain data during a transitional period or for the periods imposed by law or required by operational requirements.

21. Data Export

The User may, where the Service so permits, download or export his data before terminating the account.

The User bears responsibility for saving any data he wishes to keep before access to the account ceases to be possible.

22. Non-Recoverable Data

After the expiry of the retention periods and the deletion of the data in accordance with this Policy, it may no longer be possible to recover it.

Wthaiq bears no liability for data loss resulting from the implementation of the deletion policies or the expiry of the published retention periods.

23. Continuation of Certain Records

Even after deletion of the account, records relating to financial transactions, electronic signature records, security records, or any other records that the law or a legitimate interest requires to be retained may be retained, within the limits and for the period permitted by law.

Specifically, signed contracts, the audit trail associated with them and the financial movements are preserved for a period of 15 years from the date of deletion of the account, and are then permanently erased. This is because a signed contract is not the property of one party alone — the other party to the contract has an independent right in it — and because any amendment to the content of the document in order to conceal the identity of one of the parties invalidates the digital fingerprint (Hash) computed over it and defeats its legal probative force. As for personal data not linked to a contract (such as the name, the email address, the mobile number, unsigned drafts, and the stored signature and seal), it is deleted or anonymised immediately upon execution of the account deletion request.

Chapter Seven: Data Security During Retention

24. Protection of Retained Data

Wthaiq undertakes to apply reasonable technical, administrative and organisational measures to protect data throughout the period of its retention, commensurate with the nature of the data and the risks associated with its processing.

These measures may include:

  • Encryption, where appropriate.
  • Control of access permissions.
  • Logging of access to the systems.
  • Security monitoring.
  • Backups.
  • Periodic security reviews.

25. Access to Data

Access to retained data is confined to those employees, contractors or service providers whose work so requires, and such access is granted in accordance with the principle of least privilege and in a manner consistent with contractual and legal obligations.

26. Review of Retention Periods

Wthaiq conducts periodic reviews of data retention periods in order to confirm the continuing need to retain the data, and to delete, archive or destroy data for which there is no longer a legitimate need for retention, unless the law provides otherwise.


Chapter Eight: Legal Compliance

27. Compliance with Data Protection Regulations

Wthaiq undertakes, to the extent applicable to it, to retain and destroy data in a manner consistent with the laws and regulations governing the protection of personal data in the countries in which it provides its services.

28. Judicial and Regulatory Orders

Where an order is issued by a competent court or by a regulatory or governmental authority requiring the retention of particular data or the suspension of its deletion, Wthaiq may retain that data for the entire period necessary to give effect to that order.

29. Suspension of Deletion by Reason of Disputes

Where data is the subject of judicial proceedings, an investigation, or a legal or regulatory claim, its deletion may be suspended until those proceedings have concluded, even if the original retention period has expired.


Chapter Nine: General Provisions

30. Amendment of the Policy

Wthaiq may amend the Data Retention Policy where operational, legal or security necessity so requires.

Amendments take effect from the date of their publication or from the date specified therein, and continued use of the Services thereafter is deemed acceptance of them, to the extent permitted by law.

31. Severability of Provisions

If any provision of this Policy is found to be invalid or unenforceable under the law, this shall not affect the validity or enforceability of the remaining provisions.

32. Integration with Other Policies

This Policy shall be construed together with the Privacy Policy, the Data Deletion Policy, the Terms and Conditions of Use, the User Agreement and the remaining legal documents of Wthaiq as an integrated legal framework.

33. Contact

Should the User have any enquiries or requests relating to data retention periods or to the deletion of data, he may contact Wthaiq through the official means of communication published on the website.

The Platform may request additional information in order to verify the identity of the applicant before executing any request relating to data.

34. Survival of Certain Provisions

The provisions relating to the retention of records, legal compliance, financial rights, the settlement of disputes, information security, and any provisions the purpose of which requires their continuation, remain in force after deletion of the account or the cessation of use of the Services, to the extent necessary.

35. Entry into Force

This Data Retention Policy enters into force as of the date set out at its beginning, and remains in effect until it is amended or replaced in accordance with its provisions.

36. Final Acknowledgement

The User acknowledges that he has reviewed the Data Retention Policy, has understood the bases upon which Wthaiq retains, deletes and destroys data, and agrees to its application when using the services of the Platform, to the extent permitted by law.


Applicable Law and Jurisdiction

This document is governed by and construed in accordance with the laws of the Arab Republic of Egypt, and jurisdiction lies with the competent Egyptian courts to determine any dispute arising out of or relating to it; likewise, any arbitration — should the two parties agree upon it — shall be conducted within the Arab Republic of Egypt and in accordance with its laws, without prejudice to any mandatory rights conferred upon the User under the applicable laws of his country of residence.