Privacy Policy

1. Who we are

Data controller: Flagship Fintech, F-207 Greek Campus, 171 El Tahrir Street, Bab El Louq, Cairo Downtown 11513, Arab Republic of Egypt. For personal data we process on behalf of customers when acting as a processor, the customer is the controller and our Data Processing Addendum applies.

Privacy enquiries: privacy@flagshipfintech.com

2. Scope

This Policy explains how we collect, use, and share personal data when you visit our websites, request information, register for events, use sandboxes or trials we host, or communicate with sales and support. It does not replace customer agreements for production environments governed solely by your contract and DPA.

3. Data we collect

• Contact and account data — name, work email, company, role, phone, and messages you submit via forms or email.
• Technical data — IP address, device type, browser, approximate location from IP, cookies, referral URL, and timestamps.
• Bot-protection signals — when you use our contact form, Cloudflare Turnstile may process client-side signals (such as IP address, TLS fingerprint, User-Agent, site key, and associated origin) solely to distinguish human users from bots. See section 13 below.
• Usage data — pages viewed, documentation topics, and interactions where analytics is enabled and you have consented.
• Support and security — correspondence and logs needed to respond to incidents or abuse reports.

4. Purposes and lawful bases

• Provide the website and respond to enquiries — contract steps / legitimate interests.
• Security, fraud prevention, and abuse detection — legitimate interests and legal obligations.
• Contact-form bot protection via Cloudflare Turnstile — strictly necessary to distinguish humans from bots and protect our website (see section 13).
• Analytics and product improvement — consent where required; otherwise legitimate interests with opt-out where mandated.
• Marketing — only with consent or as permitted by applicable law; unsubscribe in every message.
• Legal compliance — tax, regulatory requests, and law enforcement subject to due process.

5. Sharing and subprocessors

We share personal data with service providers under written data-protection terms, professional advisers, successors in a corporate transaction, and authorities when required by law.

Categories of subprocessors we may use for website and commercial operations:

• Cloud hosting — Infrastructure and application hosting (region as contracted)
• Email delivery — Transactional email and contact-form delivery
• Bot protection (Cloudflare Turnstile) — Human verification on our contact form
• CRM / support — Sales and support ticketing where enabled
• Analytics — Website analytics when you consent via the cookie banner

Enterprise customers may request an updated subprocessor list or notification process under their Agreement.

6. International transfers

Where personal data is transferred outside its country of collection, we use appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful mechanisms required by applicable law.

7. Retention

We retain personal data only as long as needed for the purposes above and applicable statutory periods. Marketing suppression lists may be kept longer to honour unsubscribe requests.

8. Security

We implement technical and organisational measures appropriate to risk, including access controls, encryption in transit for web traffic, logging, and vendor due diligence. No transmission method is completely secure.

9. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict processing, object, data portability, and withdraw consent. Contact privacy@flagshipfintech.com. You may lodge a complaint with a supervisory authority.

10. Cookies

We use essential cookies for security and preferences. Non-essential cookies and analytics load only after you accept via our consent banner where required by law. Cloudflare Turnstile on our contact form uses strictly necessary signals to detect and block bots; these are not used for advertising or profiling. For more information, see section 13 and Cloudflare's Cookie Policy.

11. Children

Our websites and Services are not directed to children under 16 (or a higher age where required). We do not knowingly collect children's personal data.

12. Changes

We post updates here and revise the last-updated date. Material changes may require additional notice or consent where law requires. Last updated: 23 June 2026.

13. Cloudflare Turnstile Privacy Addendum

Turnstile Privacy Addendum last updated: 18 June 2025.This addendum supplements our Privacy Policy and provides additional information about your use of Cloudflare Turnstile on this website. It also applies to personal data processed using Cloudflare's Challenge Platform; references to "Turnstile" include the Challenge Platform. Cloudflare's Privacy Policy continues to apply except where this addendum provides more specific information.

13.1 Introduction

Turnstile, developed by Cloudflare, Inc. ("Cloudflare"), is a pro-privacy website security tool that processes minimal signals ("Signals") solely to protect web properties against malicious activity by distinguishing human users from bots and blocking bot traffic. Flagship Fintech uses Turnstile on our contact form. Cloudflare does not control whether a website chooses to use Turnstile; we enable it to detect and block automated abuse of that form.

13.2 Information Cloudflare collects

Cloudflare Turnstile processes a variety of client-side Signals such as client IP address, TLS fingerprint, User-Agent header, site key, and associated origin. Cloudflare states it does not have the ability to directly identify any individuals from the Signals Turnstile collects, including IP addresses.

13.3 How Cloudflare uses information

(i) Bot detection and blocking — Turnstile evaluates Signals relating to both the website visitor and the website visited to detect and block bots. The purpose is not to identify, profile, or target individuals but solely to detect and block bots. Cloudflare processes these Signals as a data processor on our behalf when providing the Turnstile service to secure our website. If you have questions or wish to exercise data protection rights regarding Cloudflare's processing for this purpose, contact us at the privacy email in section 1.

(ii) Improving Turnstile — Cloudflare also processes Signals to improve Turnstile's bot-detection capabilities, including refining algorithms and responding to evolving bot threats. For this purpose Cloudflare acts as an independent data controller, governed by this addendum and Cloudflare's Privacy Policy.

13.4 Notice to EU and UK residents

To the extent Turnstile data qualifies as personal data: when Cloudflare processes it as a processor to protect our website, Flagship Fintech (as controller) determines the lawful basis and Cloudflare processes under our instructions; when Cloudflare processes it as a controller to improve Turnstile, Cloudflare relies on its legitimate interests in improving bot-detection effectiveness.

13.5 Cookies and strictly necessary processing

The Signals collected by Turnstile are strictly necessary to detect and block bots so visitors can use our contact form safely. For more information see Cloudflare's Cookie Policy and Turnstile developer documentation.

13.6 Contact for privacy concerns

For questions about Turnstile on this website, contact privacy@flagshipfintech.com. For questions about Cloudflare's processing of Turnstile data, contact Cloudflare's Data Protection Officer at dpo@cloudflare.com.