Privacy & Policy

1. Introduction

Welcome to the EGPI CRM System, operated by the Egyptian Group for Pharmaceutical Industries and powered by World Health Management. This Privacy & Policy outlines how we collect, use, store, and protect your personal information when you use our Customer Relationship Management platform.

By accessing or using the EGPI CRM System, you agree to the terms described in this policy. If you do not agree with any part of this policy, please refrain from using the system.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, username, user type, phone number, and employment details (line, territory, division).
• Authentication Data: Login credentials and session information necessary for secure access.
• Visit & Activity Data: Planned visits, visit reports, GPS coordinates (start and end locations), visit duration, client interactions, and product discussions.
• Location Data: Real-time GPS coordinates collected during visit execution to verify field activities. This includes location accuracy, provider type, and timestamps.
• Device Information: Device type, operating system, and app version when accessing the system via the mobile application.
• Communication Data: Notes, feedback, and reports submitted through the platform.

3. How We Use Your Information

Your information is used for the following purposes:

• Authenticating and authorizing access to the CRM system based on user roles.
• Managing and tracking sales representative field visits, planned schedules, and coverage reports.
• Generating performance reports, KPIs, and analytics for management review.
• Verifying visit execution through location data to ensure accountability.
• Facilitating communication between medical representatives, field managers, and senior management.
• Processing job applications submitted through the public application form.
• Improving system functionality and user experience.

4. Location Data & GPS Tracking

The EGPI CRM System collects GPS location data during visit execution to verify that field visits are conducted at the designated locations. This data includes:

• Start and end coordinates of each visit.
• Location accuracy and provider information.
• Distance calculations between the representative's location and the assigned account.
• Mock location detection for data integrity purposes.

Location data is collected only during active visit execution and is not continuously tracked outside of working activities. You may review the location data associated with your visits through the system.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encrypted data transmission using HTTPS/TLS protocols.
• Secure authentication with hashed passwords and session management.
• Role-based access control ensuring users can only access data relevant to their role.
• Regular system backups and database security measures.
• API token-based authentication for mobile application access.

6. Data Sharing & Disclosure

We do not sell your personal information. Your data may be shared in the following circumstances:

• Within the Organization: With authorized managers, supervisors, and administrators as required by your role hierarchy.
• Service Providers: With World Health Management as the technical platform provider, under strict data protection agreements.
• Legal Requirements: When required by applicable Egyptian laws, regulations, or legal proceedings.

7. Data Retention

We retain your personal data for as long as your account is active and as necessary to fulfill the purposes outlined in this policy. Visit reports and activity logs are retained for performance evaluation and regulatory compliance purposes. Upon account deactivation, your data may be retained in anonymized form for analytical purposes.

8. Your Rights

As a user of the EGPI CRM System, you have the right to:

• Access your personal data stored in the system.
• Request correction of inaccurate information through your manager or system administrator.
• Understand how your data is being used and who has access to it.
• Request deletion of your personal data through our Data Deletion Request Form.
• Report any concerns about data privacy to the system administrators.

9. Mobile Application

When using the EGPI CRM mobile application, additional data may be collected including device identifiers, offline sync data, and push notification tokens. The mobile app may store limited data locally for offline functionality, which is synchronized with the server when connectivity is restored.

10. Cookies & Sessions

The CRM system uses essential cookies and session tokens to maintain your login state and remember your preferences. These are strictly necessary for the system to function and cannot be opted out of while using the platform.

11. Changes to This Policy

We may update this Privacy & Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. Continued use of the system after changes constitutes acceptance of the revised policy.