Last updated: 19 October 2026
Lovely Egypt Tours is committed to respecting the privacy and data protection rights of individuals who visit our website, inquire about our services, or book tours, excursions, activities, and airport transfers in Egypt.
This GDPR Policy explains how we approach the requirements of the European Union General Data Protection Regulation (EU GDPR) and, where applicable, the United Kingdom General Data Protection Regulation (UK GDPR) and related data protection legislation.
This Policy supplements our Privacy Policy. It applies to personal data processing activities within the scope of the relevant legislation and should be read alongside our Privacy Policy, Cookie Policy, Booking Terms and Conditions, and other applicable notices.
1. Business and Contact Information
Business name: Lovely Egypt Tours
Country of operation: Egypt
Website: https://lovelyegypttours.com/
Privacy contact email: booking@lovelyegypttours.com
Business address: Air port st. Hurghada Egypt
Registered legal entity: Lovely Egypt Tours
For questions or requests relating to this Policy, contact booking@lovelyegypttours.com.
EU representative, where legally required: [Insert representative’s name and contact details, if applicable.]
UK representative, where legally required: [Insert representative’s name and contact details, if applicable.]
The applicability of any representative requirement must be assessed under the relevant legislation.
2. When the GDPR Applies
Lovely Egypt Tours operates from Egypt. The EU GDPR does not automatically apply to every interaction with an individual located in the European Union.
The EU GDPR may apply to our processing of personal data where its territorial scope requirements are met, including where we offer tours or related services to individuals in the EU or monitor their behavior within the EU.
The UK GDPR may apply separately where the relevant UK territorial-scope requirements are met.
Where these laws apply, we will process personal data in accordance with the applicable requirements. Other privacy laws, including Egyptian data protection legislation, may also apply to our operations.
3. Personal Data We May Collect
Depending on the services requested, we may collect the following categories of personal data:
Identity and contact information
- Name and contact details.
- Email address and telephone number.
- Information provided in customer correspondence.
Booking and travel information
- Selected tour, excursion, or transfer.
- Booking dates, participant numbers, and booking reference.
- Airport pickup and drop-off locations.
- Flight details where necessary to coordinate a transfer.
- Relevant requests concerning accessibility, dietary needs, or activity requirements.
Payment and transaction information
- Amounts paid, deposits, outstanding balances, refund records, and transaction references.
- Information required to reconcile a booking or comply with applicable financial obligations.
Payment card details may be processed by an external payment provider. We do not intentionally request full payment card security codes through ordinary website forms.
Technical and website information
- IP address and approximate location.
- Browser, device, and operating-system information.
- Pages viewed and website interactions.
- Cookie identifiers and analytics information, where applicable and lawfully collected.
- Technical and security logs.
We seek to collect only information reasonably necessary for the relevant purposes.
4. Purposes and Legal Bases for Processing
Where the EU GDPR or UK GDPR applies, we will rely on an appropriate legal basis for each processing activity.
Contract performance and pre-contractual steps
We may process personal data to respond to a tour inquiry, provide a quotation, confirm a reservation, arrange transport, communicate itinerary information, and deliver booked services.
Legal obligations
We may process and retain relevant records to comply with applicable tax, accounting, regulatory, and other legal obligations.
Legitimate interests
Where permitted, we may process information for legitimate business interests, including website security, fraud prevention, customer support, service improvement, and the management of business records.
We will consider the individual’s rights and interests when relying on this basis and provide the relevant information where required.
Consent
Where consent is the appropriate legal basis, we will request it before processing and will explain the relevant purpose.
This may include certain non-essential cookies, analytics technologies, or direct marketing activities, where applicable law requires consent.
Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Vital interests and other lawful grounds
In exceptional circumstances, we may process personal data on another legal basis permitted by the applicable legislation, where the conditions for that basis are satisfied.
5. Cookies, Analytics, and Online Tracking
Our website may use essential cookies and similar technologies to support website operation, security, booking functionality, and user preferences.
If analytics services such as Google Analytics are enabled, they may process information about website visits and interactions.
Where required, non-essential cookies and similar technologies will be activated only after valid consent has been obtained. Visitors should be provided with a meaningful choice to accept or reject non-essential technologies and to change their preferences later.
We will not treat continued browsing or silence as consent where the law requires an affirmative choice.
For additional information, please see our Cookie Policy: https://lovelyegypttours.com/cookie-policy/
The precise cookies, providers, retention periods, and purposes depend on the technologies actually installed on the website.
6. Disclosure to Third Parties
We may disclose personal data where necessary to provide our services or operate the business, including to:
- Tour operators, guides, drivers, and activity providers.
- Transport and airport-transfer providers.
- Website hosting, security, maintenance, and technical support providers.
- Booking and customer communication service providers.
- Analytics providers, where enabled.
- Payment processors and financial institutions.
- Professional advisers, regulators, courts, or public authorities where disclosure is lawful or legally required.
We will seek to ensure that relevant third parties process personal data under appropriate contractual arrangements and safeguards where required.
We do not sell personal data as a commercial data-broker product.
7. International Transfers of Personal Data
Lovely Egypt Tours operates from Egypt and may use service providers or suppliers located in other countries.
Where EU GDPR or UK GDPR international-transfer rules apply, we will assess the transfer and use a lawful transfer mechanism where required.
Depending on the circumstances, this may include:
- An applicable adequacy decision.
- Standard Contractual Clauses or another approved safeguard.
- A permitted derogation where the specific legal conditions are met.
Where required, we will assess relevant risks and implement supplementary safeguards.
The countries involved and the transfer mechanisms used depend on the providers and arrangements actually in place. Further information may be requested by contacting booking@lovelyegypttours.com.
8. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal requirements.
Retention periods may depend on:
- The duration of a booking and related customer communications.
- Applicable accounting, tax, and regulatory retention periods.
- The resolution of complaints, disputes, or legal claims.
- Security and technical-log requirements.
- Consent and the purpose of optional processing.
When personal data is no longer required, we will take reasonable steps to delete or anonymize it, unless retention is required or permitted by law.
Specific retention periods may be provided in the relevant privacy notice or upon request where required.
9. Your Data Protection Rights
Where the GDPR applies, you may have the following rights, subject to the applicable legal conditions and exceptions:
Right of access
You may request confirmation of whether we process your personal data and obtain access to the information and related details required by law.
Right to rectification
You may request correction of inaccurate personal data or completion of incomplete information.
Right to erasure
You may request deletion of your personal data where the legal conditions are met. This right is not absolute and may be limited by legal retention requirements or other lawful grounds.
Right to restriction
You may request restriction of processing in circumstances specified by the applicable legislation.
Right to data portability
Where the legal requirements are satisfied, you may request certain personal data in a structured, commonly used, machine-readable format or ask for it to be transmitted to another controller where technically feasible.
Right to object
You may object to processing based on legitimate interests in circumstances provided by law.
You have an absolute right to object to the processing of your personal data for direct marketing purposes, subject to the applicable GDPR provisions.
Rights relating to consent
Where processing relies on consent, you may withdraw your consent at any time.
Rights relating to automated decision-making
Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We will provide the protections required by law if such processing occurs.
Right to lodge a complaint
You may lodge a complaint with the competent data protection supervisory authority, particularly in the EU or UK where the relevant legislation applies.
These rights are not absolute in every circumstance. We will assess requests under the applicable law.
10. How to Exercise Your Rights
To make a request, email booking@lovelyegypttours.com with the subject line “GDPR Data Subject Request.”
Please describe the request and provide enough information for us to identify the relevant records. We may request additional information to verify your identity where reasonably necessary.
We will respond within the period required by the applicable legislation. Under the EU GDPR, the usual response period is one month, subject to permitted extensions for complex or numerous requests. The applicable UK rules will be followed separately where relevant.
We will not charge a fee unless the law permits one in the particular circumstances.
11. Data Security and Personal Data Breaches
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, and misuse.
No online system can be guaranteed to be completely secure.
If a personal data breach occurs, we will assess the incident and take appropriate action. Where the GDPR applies, we will notify the relevant supervisory authority within the required timeframe when the legal notification threshold is met and inform affected individuals where legally required.
12. Children’s Personal Data
Parents or legal guardians should arrange bookings for children where appropriate and provide only information reasonably necessary to deliver the service.
We will handle children’s personal data in accordance with applicable law, including any additional protections or consent requirements that apply to the particular processing activity.
Please contact us if you believe a child’s information has been collected or used improperly.
13. Automated Decision-Making
We do not intend to make decisions about customers solely through automated processing that produce legal or similarly significant effects unless the applicable legal requirements are satisfied.
If such processing is introduced, we will provide the disclosures and safeguards required by law.
14. EU and UK Representatives
Where Article 27 of the EU GDPR or the corresponding UK GDPR requirements apply to Lovely Egypt Tours, we will assess whether a representative must be appointed in the relevant jurisdiction.
If a representative is legally required, the relevant name and contact details will be published here and in the appropriate privacy information.
A representative is not required in every case. The obligation depends on the applicable territorial-scope, exemption, and processing criteria.
15. Changes to This Policy
We may update this Policy to reflect changes in applicable law, our services, our website, or our data-processing practices.
The updated version will be published on this page with a revised date. Where required, we will provide additional notice or seek consent for changes to processing activities.
16. Contact Us
For questions about this GDPR Policy or to exercise your applicable data protection rights, contact:
Lovely Egypt Tours
Email: booking@lovelyegypttours.com
Website: https://lovelyegypttours.com/