Privacy notice.

Ventures Valley® is the controller of the personal data described in this notice. Our registered details are [Registered company name and number], [Registered address].

For anything in this notice, including the rights in section 8, write to [email protected].

We collect only what you give us through the forms on this site, plus a small amount of technical data needed to keep the site secure.

• Contact, brief and sponsor-access forms: your name, email, company, phone number, role, company website and the message you write.
• Cartouche™ athlete registration: your name, date of birth, gender, nationality, city, contact details, sport, results, club, social accounts, approximate audience size, current deals, and any photos you choose to upload. If you are a para-athlete and tell us your classification, that is health-related data and we treat it as sensitive.
• Applicants under 21: the name, relationship, mobile number and email of a parent or guardian, and a record of their consent.
• Technical data: a one-way hashed form of your IP address, used to limit repeated submissions, and the result of the Cloudflare Turnstile check that tells people from automated traffic.

We do not ask for payment details on this site.

• To reply to your message, brief or request.
• To assess an athlete’s application, prepare a profile and media kit, and represent the athlete with brands once an agreement is signed.
• To review requests for sponsor access and, if approved, give access to full profiles.
• To prepare proposals, contracts and delivery reports for the people involved in a deal.
• To keep the site and our systems secure and to prevent abuse.
• To meet our legal, tax and accounting obligations.

We do not sell personal data. We do not use it to build advertising profiles, and we do not share it with brands without the athlete’s or club’s agreement.

Every form on this site asks for your consent before it can be sent. That consent is our main legal basis. We also process data where it is needed to take steps you have asked for before a contract, to perform a contract, or to meet a legal obligation.

Sensitive data, such as a para-athlete classification, is processed only with your explicit consent and only for the purpose you gave it for.

You can withdraw your consent at any time by writing to [email protected]. Withdrawing does not affect what we did before you withdrew.

If an applicant is under 21, the registration form asks for a parent or guardian’s details and consent. No profile goes live without that consent, which we store with its version and the time it was given.

Personal data about minors is never shown on the public site. We collect only what is needed to assess and represent the athlete.

Personal data is stored on servers in the region, in a database that only authorised members of our team can reach. Uploaded files are kept in private storage.

We use a small number of service providers who process data on our behalf and only on our instructions:

• Zoho Mail, for sending and receiving email, including the confirmations you receive after a form.
• Cloudflare, for security, protection against automated traffic (Turnstile), content delivery and cookieless web analytics.

Some of this processing can take place outside Egypt, for example when an email passes through a provider’s network. We transfer data only where the law permits and with the safeguards it requires. [Cross-border transfer position to be confirmed by counsel.]

• Messages, briefs and access requests that do not lead to an agreement: up to 24 months after our last contact.
• Athlete applications we do not take forward: up to 12 months, so we can look again next season, unless you ask us to delete them sooner.
• Data linked to an agreement: for the life of the agreement and then for as long as the law requires us to keep contract, tax and accounting records.
• Security records, such as hashed IP addresses: up to 90 days.

When the period ends, we delete the data or make it anonymous.

Under Law No. 151 of 2020 you can ask us to:

• Access: tell you what personal data we hold about you and give you a copy.
• Correction: correct data that is wrong or incomplete.
• Deletion: delete your data when we no longer need it or you withdraw consent.
• Objection: stop or restrict a use of your data you object to.
• Withdrawal: withdraw any consent you have given.

Write to [email protected] from the email address you used with us. We may ask you to confirm who you are, and we will reply within the period the law sets. A parent or guardian can make these requests for an applicant under 21.

If you are not satisfied with our answer, you can complain to Egypt’s Personal Data Protection Center.

Data travels encrypted between your browser and our servers. Access inside our systems is limited by role and recorded in an audit log, and administrator accounts use two-factor sign-in. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

We use only cookies the site needs to work. Our analytics are cookieless. The cookie notice lists them.

When we change this notice, we will publish the new version here with a new date. If the change affects how we use data you have already given us, we will tell you before it applies.