Employee Privacy Notice

This notice is for the people who work at Brands' Lab. It explains what the factory's system records about you, why it records it, who sees it, how it is protected and what you can ask for. You are shown it when you join, and it is linked from the sign-in page you use every day. Customers and visitors have their own Privacy Policy.

1. Who is responsible

Brands' Lab, a garment factory in New Cairo, is your employer and the controller of this data. The system is built and run on our behalf by The Agentic Lab, which acts as our processor under a written agreement. Ask the owner about your data in person or in writing, or write to privacy@brandslabeg.com.

2. What we record about you

• Your record: an employee number in the form BL-0001, your full name as it is written in Arabic, your mobile number, your email if you have one, your role, your start date, and your status — working here, or employment ended with its reason.
• Your card, if you are given one: the same number printed on it, the day it was issued, the last time you signed in, and the browser the card was last used on. The 6-digit code is not stored: only a one-way value the system can check the code against.
• Your work: each line entered for a day — the order, the step, the machine, the pieces, the minutes when they are counted, a short note, and whether the line is work, rework or a stoppage — with the day, the time and the card that entered it. And your attendance for the day: present, away, or in the factory but off the line.
• Your sessions: when a session opened, the card it used, a one-way value for the browser, a one-way value for the network you came from, and the country.

3. What we never record

The system has no field for a national identity number, a date of birth, an address, a gender, a religion, a photograph, a fingerprint or any other biometric, or a copy of any card. None of it is asked for and none of it can be stored. Your mobile number is never published: the company publishes no personal phone numbers on any surface.

4. Why

• To keep the factory's record of who works here, and to run your employment: your name, role, start date and status.
• So the factory can reach you: your mobile number and your email.
• To let only you into the system and to keep it safe: your card, your sign-in record and your sessions.
• To run production and see an order's progress, and to learn how long a step takes: the day's lines and the attendance.

5. The numbers the system learns from your work

Where a line carries both pieces and minutes, the system works out minutes per piece — for the step across the team, and for the step as you do it. It reads the last twelve such lines of that step, drops what sits far from the middle, weighs the newest most, and pulls a thin personal number towards the team's until there is enough of your own work behind it. Nothing older than 120 days counts. A new hand is expected to be 15% slower on the first day, fading to nothing by the seventh. The owner may replace any learned number with one of his own.

These numbers estimate how long work will take and how far an order has got. Nothing in the system acts on them by itself; they are read by the owner, and reports put people side by side only when the numbers behind them rest on enough work to be trusted.

6. Who sees what

• The owner, on his own page: the whole record. The list shows your mobile number and your email masked; opening your record in full writes a line in the company ledger saying which record was opened, by whom and when.
• The supervisor, on the floor screen: the names, roles and attendance of the people in that day, and the day's lines. The floor screen does not read your mobile number or your email at all.
• The Agentic Lab, on its own page: the same day the floor screen shows, and nothing further about you. That page can only read, never write, and it cannot open the owner's pages. Your mobile number and your email are encrypted and are never decrypted for it.
• Cloudflare, which hosts the system and its database in the European Union, and Google, which carries the company's mail.
• No one else, unless the law requires it.

The system sends you no mail. A card issued or a status changed is mailed to the company's own mailbox, not to you.

7. How it is protected

• Your mobile number and your email are encrypted in the database. An address is found by a one-way value, never by reading it.
• Your card code is never stored. The system keeps a one-way value of it and compares in constant time, so a wrong code gives nothing away by how long the answer takes.
• Five wrong codes on one card within fifteen minutes lock that card. A further lock in the same week doubles the wait — fifteen minutes, then thirty, then an hour, and so on up to a day. The owner is told, the lock is written to the ledger, and the owner can lift it. Ten wrong codes on one card from one network block that pair the same way, so one mistaken phone cannot lock the whole floor.
• A session lasts at most 30 days and ends after 7 days without use. It is bound to the browser it was opened on: the same session presented from another browser is refused and ended. Signing in from a new browser is recorded, never blocked — only the owner suspends a card.
• Every connection is encrypted, and the sign-in page is protected by an anti-abuse check and by rate limits.

8. The company ledger

Every write is a line in a chained record that cannot be edited or deleted: a wrong line is corrected by a new line that supersedes it, and the old one stays in the history. The ledger carries identifiers, counts and times — your employee or card number, the ids of the order and the step, your role where it was set — and never your name, your mobile number, your email or free text about you. It is the factory's book and it is kept permanently.

9. What the system deletes, and when

• Sign-in and other system events: 90 days.
• A closed session: 30 days after it ends, or 180 days for the one that keeps a browser trusted.
• The words and contact a stranger leaves on the found-card page: 30 days.

Your record and your work lines are the factory's own records: the system removes nothing from them by itself, and the ledger is permanent.

10. When employment ends

The owner sets your status to ended and records the reason — resigned, dismissed, or contract ended. The same second, your card is suspended, the browser it was bound to is forgotten, and every open session of yours ends. Your record stays.

11. If you lose your card

Tell the owner the same day. A suspended card cannot sign in, and every session on it ends at once; the owner can issue a new code for it, which also ends every open session. If a stranger finds the card, the page printed for it lets them say where they found it and, if they wish, leave a way to be reached; those words go to the owner's mailbox only, are encrypted, and leave the system after 30 days. That page never shows your name — only the card number.

12. Your rights

You have the right to know what we hold about you and to see it, to correct it, to ask for it to be erased or its processing restricted, to withdraw a consent you gave, and to be told if a breach affects your data. Ask the owner in person or in writing, or write to privacy@brandslabeg.com. We answer within the time the law allows, and never later than six working days. You may also complain to the Personal Data Protection Centre.

13. Changes

Each version of this notice carries a date and a version number. A new version replaces the old one as a new document; we never edit a published version in place.

14. Contact

privacy@brandslabeg.com. Brands' Lab, New Cairo, Egypt.