Confidentiality constitutes the core of IBDA advisory engagements. We enforce stringent controls aligned with the ISO 27001 Information Security Management benchmark to guarantee that no corporate or personal data entrusted to us is compromised or accessed unlawfully.

We collect only strictly necessary data to deliver consulting, certificate verification, and membership functions, categorized as follows:

• Account & Identity Data: Full name, mobile telephone number, official email address, and single-use verification tokens (OTP).
• Corporate & Project Data: Enterprise trade name, industrial sector, target ISO standard, and operational inputs required for gap analysis and staff enablement.
• Technical & Session Data: IP address, user agent, language locale preference, and secure authentication telemetry.

Collected information is deployed exclusively for legitimate, defined operational purposes:

• Conducting secure authentication and dispatching OTP tokens to prevent unauthorized account access.
• Tailoring ISO implementation roadmaps and assigning specialized senior consultants.
• Direct communication regarding audit timelines, training milestones, and project deliverables.
• Facilitating verifiable inquiry and credential authenticity of ISO and international professional degrees on the official registry.

We implement premier technical and cryptographic safeguards to protect stored data from unauthorized alteration or loss:

• In-Transit Encryption (SSL/TLS): All network transit between user clients and platform servers is secured via 256-bit TLS encryption.
• Role-Based Access Control: Access to project documentation is strictly restricted to assigned lead consultants under signed confidentiality covenants.
• Cryptographic Password Hashing: Passwords are cryptographically salted and hashed; no raw credentials are ever readable by staff.

Corporate data is shared solely to the explicit extent necessary to execute official external accreditation audits:

• Submitting quality manual drafts and audit trails to the selected independent global certification body.
• Complying with binding statutory requirements enacted by competent legal authorities in Egypt.

Every registered member and client retains comprehensive governance rights over their stored records:

• Right of Access & Rectification: Reviewing and correcting personal and contact information via your member dashboard.
• Right of Erasure: Requesting account deactivation and removal of non-regulatory historical data.

We deploy only essential operational cookies required to power core portal features:

• Preserving your selected interface language preference.
• Securing active authenticated session state.

For questions concerning our privacy policy or to exercise your data rights, contact our Data Governance Office directly: