Privacy Policy

Gorcel is an operations consultancy. We help project-based businesses find where capital leaks through process friction and design systems that stop it. Our public website and engagement tools may collect limited personal and business information so we can respond to inquiries, deliver contracted services, and operate the site securely.

Controller contact: Gorcel · Cairo, Egypt · Serving MENA · Email: info@gorcel.com.

This policy covers personal data and business contact data processed in connection with:

• Browsing gorcel.com and related marketing pages
• Submitting triage, contact, or booking forms
• Using the leak calculator and related readouts
• Scheduling and conducting discovery or triage calls
• Entering into statements of work, engagement letters, NDAs, and diagnostic or implementation contracts
• Delivering the 14-Day Operational Diagnostic and follow-on systems work
• Invoicing, payment, and engagement administration

We collect only what we need to respond, contract, and deliver. Categories include:

• Identity and contact data — name, work email, company, role, phone if provided
• Business context — team size, industry, approximate revenue band, stated operational pain
• Calculator inputs — operating-profile figures you enter (revenue, team, collection days, rework, founder hours, and similar). These are business metrics, not special-category personal data, but may be linked to your submission if you later book a call
• Engagement materials — process maps, SOPs, tool inventories, sample invoices, org charts, recordings or notes from interviews, and other documents you choose to share under contract or NDA
• Contract and billing data — company legal name, billing address, tax identifiers when required, payment references
• Technical data — IP address, device/browser type, pages visited, approximate location derived from IP, and security logs needed to protect the site
• Communications — emails, messages, and call notes related to your inquiry or engagement

We collect information directly from you (forms, email, calls, shared workspaces), automatically through standard website logs and security tooling, and from parties you authorize (for example a colleague you loop into an engagement). We do not buy marketing lists for cold outreach as a primary acquisition channel.

We use the information above to:

• Respond to triage and contact requests and schedule diagnostics
• Qualify fit, prepare proposals, and negotiate contracts
• Deliver diagnostics, audits, implementation plans, and systems work
• Operate, secure, and improve the website and calculator
• Send transactional messages about your inquiry or engagement
• Comply with legal, accounting, and tax obligations
• Establish, exercise, or defend legal claims related to our services

Where applicable privacy law requires a lawful basis, we rely on one or more of: performance of a contract or steps prior to contracting; legitimate interests in operating a B2B consultancy and securing our systems (balanced against your rights); consent where we ask for it; and legal obligation for accounting, tax, or regulatory retention.

We operate from Egypt and serve MENA clients. Where Egypt’s Personal Data Protection Law (Law No. 151 of 2020) or other applicable rules apply to a processing activity, we intend to process personal data in line with those requirements. Cross-border transfers may occur when tools or teammates sit outside Egypt; we take reasonable contractual and organizational measures appropriate to the risk.

We do not sell personal data. We may share information with:

• Service providers who host email, forms, calendaring, document storage, analytics, or payment tooling under confidentiality obligations
• Professional advisers (legal, accounting) when required for an engagement or dispute
• Authorities when required by law or to protect rights, safety, or security
• A successor entity in a reorganization or sale, under continued privacy commitments

During a diagnostic or implementation, you may share operational data about your company, customers, or staff. That material is handled under the engagement agreement and any NDA. We use it only to deliver the contracted work unless you approve another use in writing. You remain responsible for having the rights and notices needed to share that data with us.

We do not treat client operational datasets as a product training corpus for unrelated public marketing without your written permission.

Inquiry and calculator-linked submissions are kept as long as needed to respond and for a reasonable follow-up window, then deleted or minimized unless an engagement begins.

Contract, invoice, and engagement records are retained for the life of the relationship and thereafter for the period required by accounting, tax, or legal needs (typically several years).

Security logs are retained for a limited period appropriate to threat detection and incident review.

We use reasonable technical and organizational measures: access controls, encrypted transport (HTTPS), least-privilege access to engagement materials, and vendor diligence proportional to risk. No method of transmission or storage is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and regulators as required by applicable law and contract.

Subject to applicable law, you may request access, correction, deletion, restriction, or a copy of personal data we hold about you, and you may object to certain processing. To exercise these rights, email info@gorcel.com with enough detail for us to verify and locate your request. We may decline or limit requests where an exemption applies (for example, legal retention or third-party rights).

You may opt out of non-essential marketing emails using the unsubscribe link or by emailing us. Transactional messages about an active inquiry or contract are not marketing.

We may use strictly necessary cookies or local storage for security and basic site function, and limited analytics or performance tooling to understand how the site is used. Where consent is required for non-essential cookies, we will request it. You can control cookies through your browser settings; blocking some cookies may affect site features.

Our services are directed at businesses and adult professionals. We do not knowingly collect personal data from children. If you believe we have done so, contact us and we will delete it promptly.

We may update this policy as our services or legal requirements change. The “Last updated” date at the top of this page will change when we do. Material changes will be highlighted on this page or communicated to active clients where appropriate.

Privacy questions and requests: info@gorcel.com. Gorcel · Cairo, Egypt · Serving MENA.

This page is a privacy notice for our consultancy website and engagements. It is not legal advice.