Privacy Notice

This Privacy Policy explains what personal information EGYPTIA collects when you visit our website, create an account, book a journey, travel with us, or work with us as a partner; why we need it; who receives it; how we protect it; how long we keep it; and what rights you have. We have written it to be complete rather than short, because a journey to Egypt involves passports, hotels, transport and sometimes health information, and you should be able to see exactly what happens to each of them.

1. Who is responsible and how to contact us

KEMETIA for Touristic Services, trading as EGYPTIA (Egypt), is responsible for the personal information described here. For any privacy question or request, write to info@egyptiatours.com or use the Help page in your account. We answer in writing, and we may ask you to confirm a request from the email address of your account, so that we never give your information to someone else.

2. What we collect

We collect only what we need to arrange your journey safely, to meet our legal duties and to keep accounts secure.

• Your account: name, email address, WhatsApp number, password (stored only as a secure hash), and optionally your country and gender; your choices about WhatsApp messages and news emails.
• Sign-in with Google or Apple: your name, email address and an account identifier from that provider. Apple may give us a private relay email address. We do not receive your Google or Apple password, contacts or other account data.
• Each traveller: name, gender and date of birth as in the passport, nationality, passport number (stored encrypted; the last four digits are kept with the booking), passport expiry date, a photo of the passport page (kept in private storage, encrypted), whether a local SIM card is needed, optional activities, dietary notes, and an emergency contact (name and phone number, stored encrypted).
• Health and mobility notes (optional, stored encrypted), only if you give them and agree to their use; see section 3.
• Children: an adult, who is the child’s parent or legal guardian or has their permission, provides a child’s details, and confirms this when entering them.
• Payments: amounts, currency, payment receipts you upload (kept in private storage, encrypted) and the bank transaction references; never card details. We do not take card payments on the website.
• Messages: emails and, if you agree, WhatsApp messages with us, and requests you send through your account. We keep a copy of the emails our system sends you, so that we can show what was sent and when.
• Recommendations from a partner: if a travel agency or other EGYPTIA partner recommends a journey to you at your request, the partner gives us your name, email address, the journey and optionally the number of travellers and a short note, and confirms that you asked them to. We use these details only to send you that recommendation and to link a booking you make to the partner.
• Technical records: when you accept the terms we keep the time, your IP address and browser; we keep security logs of sign-ins and of staff access to passports. When someone opens a partner’s link, we count one visit for that partner per day, without any name, email or address.

If you are a partner, we also keep your company’s name and contact details, the people who sign in for it, your commission records and withdrawals, and the bank details you give us for payment (stored encrypted, and shown to our staff only as the last four digits unless they open them for a payment, which is recorded).

3. Why we use it, and on what basis

• To create and manage your account and booking, arrange travel, rooms and suppliers, verify payments and communicate about your trip: to perform our contract with you, or steps you ask for before it.
• To keep accounting, tax and booking records: because the law requires it.
• To keep accounts secure and prevent fraud: our legitimate interest, balanced against your rights.
• Health and mobility notes: only with your explicit agreement, given separately when you enter them, and only to arrange the trip safely. You can delete them in your account at any time.
• News about our journeys: only if you tick the separate box; never required to book; you can stop at any time in your account.
• WhatsApp messages about your trip: only if you agree; email is always our main booking channel.
• A partner’s recommendation: because you asked the partner to send it, and to pay the partner the commission agreed with them; we send one recommendation email, and you decide whether to book.
• Partners’ details: to perform our partner agreement and pay commission, and to keep the records the law requires.

We do not use your information for automated decisions that have legal or similarly significant effects on you, and we do not build marketing profiles.

4. Who receives it

We share only what is needed with: Hostinger (website hosting, database, private file storage and backups); Google (Google Workspace for our email, and “Continue with Google” sign-in); Apple (“Sign in with Apple”, if you use it); Meta (WhatsApp Business, only for travellers who agree); CIB, our bank (your transfers); and the hotels, transport companies, guides and activity providers of your trip (names, passport details and the arrangements they need). We do not sell personal information. We use no advertising or analytics trackers.

A partner who recommended you sees only what it needs to follow its recommendation and its commission: your first name and the initial of your last name, the journey and dates, the number of travellers, the status of the booking, and the commission. Partners never see your email address in full, your passport, your health notes, your payments or your messages with us.

Some of these providers store or access information outside Egypt, including in the European Union and the United States. Where the law requires it, we rely on the transfer safeguards and permissions it provides. Ask us for details at info@egyptiatours.com.

We may also disclose information where the law obliges us to, for example to a court or a competent authority, and only to the extent required.

5. How we protect it

• Encryption: passport numbers, health and mobility notes, emergency contacts and partners’ bank details are encrypted in the database with a key that is kept outside the database. Photos of passports, payment receipts and travel documents are encrypted on our server and kept outside the public part of the website, so they cannot be opened by a web address; they are shown only to you and to authorised staff.
• Passwords and codes: passwords are never stored, only a secure one-way hash. One-time sign-in codes are stored only as a protected fingerprint and expire after a short time. The whole website uses an encrypted (HTTPS) connection.
• Staff access: staff sign in with a password and a second step from an authenticator app; each staff member sees only what their role needs; and every opening of a passport, and every change to bank details, payments or bookings, is recorded with the name of the person and the time.
• Least information: lists, exports and partner pages show only the details needed for the task; passport numbers are shown as the last four digits unless a staff member opens them for the trip.

No system is perfectly secure. If a breach affecting your information occurs, we will act at once to contain it and inform you and the competent authority where the law requires it.

6. How long we keep it

• Passport numbers and photos, health and mobility notes and emergency contacts: deleted 90 days after the trip, or when the booking is cancelled or closed; the last four passport digits stay with the booking record.
• Unfinished bookings: closed after 30 days without activity, and their sensitive details deleted; we tell you, and your account stays.
• Booking, invoice and payment records: five years from the end of the financial year, or longer only where a law, a claim or a dispute requires it.
• Your account: until you ask us to delete it. While a booking is open, deletion waits; afterwards sensitive details are deleted and the account is anonymised, keeping only the records we must keep by law.
• Recommendations from partners: kept with the partner’s records while the partner agreement runs and for the period our accounting records require.
• Deleted information can remain in our hosting backups for a limited time until they are overwritten.

7. Your rights

You can ask for a copy of your information, its correction or deletion, or object to its use, through the Help page in your account or at info@egyptiatours.com. Many details can be corrected directly in your account; traveller names and travel details are fixed from 29 days before departure, because our suppliers already hold them, and from then on a correction is made by our team on request. Some requests are limited by legal duties or by an open booking, and we will tell you which and why. You can withdraw consent for news or WhatsApp at any time in your account, and you can delete your health and mobility notes at any time. You can complain to the Personal Data Protection Center in Egypt, or another competent data protection authority where applicable; we would be glad to try to resolve your concern first.

8. Children

Our accounts are for adults. Children travel on a booking made by an adult, who provides the child’s details and confirms that they are the child’s parent or legal guardian or have their permission. We use a child’s details only to arrange that journey, with the same protection and deletion periods as for adults.

9. Cookies

We use only the cookies needed for the website to work; see the Cookie Notice.

10. Changes to this policy

When we change this policy, we publish the new version on this page with its version number and date. If a change materially affects how we use information you have already given us, we will tell you by email before it applies.