SASaudi Arabia SAREGEgypt EGP
EN
Order a design

Privacy Policy

Last updated: 30 October 2026

This policy explains how Sammimli (sammimli.mega-egy.com) handles your personal data. Sammimli is a product of the MEGA brand, operated by its owner Mohamed Abdelfattah Elgafarawy, and serves customers in the Kingdom of Saudi Arabia and the Arab Republic of Egypt.

We aim to handle data in a way that takes into account the Saudi Personal Data Protection Law and Egypt's Personal Data Protection Law No. 151 of 2020, as applicable in each case. This page describes our practices and is not legal advice.

1. Data we collect

Account data

When you create an account to order a design, we collect your name, email address and mobile number (Saudi or Egyptian). We do not ask you for a password: you sign in with a link sent to your email, valid once for 20 minutes.

Order data

  • The design type, sizes, style and colours you choose.
  • The texts you write to be printed on the design, such as the title, names, date, venue, verses and supplications.
  • The description of your idea and the revision requests you write.
  • Your messages with the designer in hand-made design orders, and any files you attach to them.
  • The resulting designs and their final files.

Photos you upload

You can upload a reference photo, such as a photo of your product, your logo or the space you want visualised. We accept PNG, JPG and WEBP images only, and we re-encode the image on upload, which removes hidden metadata such as EXIF data, including location if present. We also extract the two most prominent colours from the image to use in the design's palette.

If the photo shows people, you must confirm that they have consented to its use, and we store this confirmation with the order. Do not upload photos you do not have the right to use.

Payment data

Payment is currently made by transfer: bank transfer in Saudi Arabia, and in Egypt bank transfer, InstaPay or mobile wallet depending on the methods available. After transferring, you upload a photo or PDF of the receipt and may optionally enter the sender's name and a note. We keep the receipt and the transaction details, such as amount, currency, tax, reference and status, to review and confirm the payment.

If online card payment is enabled later, your card details will be entered directly with the payment provider, and Sammimli does not store your card number. We receive from the provider only what is needed to confirm the transaction, such as its status, reference and amount.

Wallet and referrals

We record your wallet activity, such as balance, design bundles and coupons. If you arrive through a referral link, we store the referral code in a cookie for 30 days, and when you create your account we link it to the customer who referred you so the reward can be credited.

Technical data

We record your IP address when an order is created, when you accept the terms and in the order's event log, and we also use it to limit the number of attempts allowed in order to prevent abuse. We record the date and version of the terms you accepted, and downloads of final files.

If a request is rejected for breaching the content rules, we keep a short excerpt of the text, the reason for rejection and the IP address in the moderation log.

We use your browser's language and time zone only to guess your country and show prices in the right currency; we do not store the time zone.

Contact via WhatsApp

If you contact us on WhatsApp, the conversation takes place on the WhatsApp app and is subject to its privacy policy; we use what you send us to reply to you and fulfil your request.

2. Why we use your data

  • To fulfil your order: producing the designs and revisions and delivering the final files.
  • To manage your account, sign you in and show your orders.
  • To review and confirm payments, and manage the wallet, coupons and referrals.
  • To send notifications about your order, such as the sign-in link, design readiness and the result of the transfer review.
  • To moderate content and prevent inappropriate material, the use of others' logos, and images of real people without their consent.
  • To protect the site against abuse and fraud, and meet accounting and tax requirements.
  • To prepare aggregated internal reports on revenue and costs.

We do not sell your data, and we do not use it for targeted advertising.

3. AI and service providers

Occasion designs are currently produced by a design engine running on the site's own server. From time to time we may use external providers to generate images with artificial intelligence; the provider varies according to the site's settings and the type of design.

When an external provider is used, we send it a description of the requested image based on your idea, style and colours, and we may send the reference photo you uploaded for designs that rely on it, such as architectural visualisations. Printed texts such as names and verses are added to the design on our server and are not sent for image generation.

If an automated content-moderation service from an external provider is enabled, the order texts and uploaded photo may be sent to it for checking only.

If automated WhatsApp notifications are enabled, your mobile number and order link will be sent through the WhatsApp Business platform.

Emails are sent through the mail service used by the site's hosting. We take care to send each provider only the minimum data it needs to do its job.

4. Who we share your data with

  • The Sammimli team: the owner and the designer assigned to your order, each seeing what is needed to carry it out.
  • The service providers mentioned above, to the extent needed to provide the service.
  • People you share the share link with: after approving a design you can create a share link that lets anyone who has it view the shareable version of your design.
  • Official authorities, when required by law.

Final files are available to the order owner only.

5. Data retention

We keep your account data, orders and their files for as long as your account exists, so you can return to your orders and download your files, unless you ask us to delete them. We may keep payment and invoice records for the period required by accounting and tax regulations.

File download links are temporary and expire, and the sign-in link is valid for 20 minutes. Currency cookies last one year, and the referral cookie 30 days.

6. Data security

  • Order files, including uploaded photos, receipts and designs, are stored in a private folder that cannot be accessed directly from the internet.
  • Files can only be downloaded through temporary signed links, and final files and uploads open only for the order owner, the administration or the assigned designer.
  • Connection keys for service providers are encrypted in the database.
  • We limit the number of attempts to create orders, upload files and sign in.

No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

7. Cookies and browser storage

Sammimli does not use third-party analytics or advertising tools. We use only the following:

  • smm_cur: stores the country and currency used to display prices (Saudi riyal or Egyptian pound) for one year.
  • smm_cur_m: records that you chose the country yourself so automatic detection does not change it, for one year.
  • smm_ref: stores the referral code for 30 days if you arrive through a referral link.
  • The standard WordPress sign-in cookies, to keep your session after you sign in.
  • Browser local storage (localStorage) to keep a copy of the country and currency choice, and session storage (sessionStorage) to avoid repeated page reloads when the currency is corrected.

You can delete these from your browser settings; the site will then go back to guessing your country automatically.

8. International data transfers

We serve customers in Saudi Arabia and Egypt, and data may be stored and processed on hosting servers or by service providers in a country other than your country of residence. In doing so, we aim to take into account the regulations applicable to cross-border data transfers and to take reasonable measures to protect the data.

9. Your rights

Subject to the applicable regulations, you have the right to:

  • Know how we collect and use your data.
  • Access your data and obtain a copy of it.
  • Correct or update your data.
  • Request deletion of your data or account, subject to what must be retained by law.
  • Withdraw your consent where processing is based on it.
  • Lodge a complaint with the data protection authority in your country.

How to request deletion of your data

Send your request via WhatsApp or the email address listed at the end of this page, from the mobile number or email registered on your account, and mention the order number if any. We may ask for proof that you own the account, and we will respond as soon as possible and within the period set by the applicable regulations.

10. Children

Sammimli is not directed at children, and we do not knowingly collect children's data. If you learn that a child has sent us their data, contact us so we can delete it.

11. Changes to this policy

We may update this policy when our services or the regulations change, and we will publish the updated version on this page with the date of the last update.

12. Contact us

For any privacy question or request, contact Sammimli (MEGA):