Privacy Policy

1. Who we are

Museum Pass Planners Egypt L.L.C. ("we", "us", "our") is an independent planning desk registered in Egypt under Commercial Registry number 341827. Our registered address is 12 Kamel El Shennawy Street, Garden City, Cairo 11451, Egypt. Our Tax Identification Number issued by the Egyptian Tax Authority (ETA) is 638-274-915. We operate the website at museumpass.xyz and provide pass comparison and recommendation services to visitors travelling to Egypt. We do not resell museum passes and do not accept commission from any pass operator or government tourism body. For all data-related matters, we can be reached at [email protected] or by post at the address above.

2. Scope of this policy

This policy applies exclusively to personal data submitted through the contact form on museumpass.xyz. It does not cover data collected by third-party sites to which we may link — for example, the Ministry of Tourism and Antiquities ticketing portal or official pass sales offices. When you leave our website, the privacy practices of those third parties apply and we have no control over them. We recommend you review their policies before submitting personal information to them.

3. What personal data we collect

We collect only the information you voluntarily submit through the enquiry form on our Contact page. Specifically, this is:

• Full name — so we can address our reply to you directly.
• Email address — the channel through which we send our recommendation.
• Travel dates (optional) — provided to allow us to check pass validity windows and seasonal site closures for your specific trip.
• Service type — which of our three plans (Quick Check, Full Itinerary Review, Group & Operator) you have selected.
• Free-text message — the itinerary details, site list, and any questions you include in the message body.

We do not collect payment card data through this website. If a paid plan requires payment, that transaction is handled through a separate, compliant payment processor and is governed by that processor's own privacy documentation.

We do not operate any form of session tracking, behavioural analytics, advertising pixels, or user profiling on this site. No analytics platform (Google Analytics, Meta Pixel, or any equivalent service) is installed. Server logs maintained by our hosting provider may record your IP address, browser type, and pages visited for the purpose of operating the server — these are not accessible to us in individually identifiable form and are not used to identify visitors.

4. Legal basis for processing

We process contact form submissions on the basis of the performance of a contract or pre-contractual steps taken at your request (Article 6(1)(b) of the General Data Protection Regulation, GDPR). When you ask us to analyse your itinerary and provide a pass recommendation, processing your name and email is necessary to deliver that service. For EU/EEA residents, this lawful basis governs the entire processing activity described in this policy. For Egyptian residents and visitors, processing is carried out in accordance with Egypt's Personal Data Protection Law No. 151 of 2020 and its executive regulations, on the equivalent basis of contractual necessity and consent.

5. How we use the information you send

Your contact form data is used for one purpose: preparing and delivering the pass recommendation you requested. We read your message, apply our current rate data to your itinerary, and write a reply. Your name is used to address the response. Your email address is used to send it. Your travel dates and itinerary details are used in the analysis and are not extracted or stored separately after the recommendation has been sent.

Your data is never directed toward advertising, audience segmentation, behavioural targeting, or any form of profile construction. We do not supply your contact details to third parties for the purpose of contacting you, and we do not share your itinerary information with pass operators, tourism boards, or government bodies. The substance of your trip plans is treated as confidential and is used solely to answer your enquiry.

6. Data retention

We retain completed enquiry records — including the message you sent and the recommendation we provided — for a period of 18 months from the date the enquiry was closed. This period exists so that we can refer back to previous correspondence if you contact us again about the same trip or a closely related one, and so that we can resolve any dispute about the advice given. After 18 months, records are permanently deleted from our systems. If you request deletion before that period expires, we will delete your record within 30 days of receiving the verified request (see section 10 on your rights).

7. Data sharing and third parties

We do not sell, lease, or otherwise transfer your personal data to any third party for commercial purposes. Operational service providers — our email delivery service, web hosting provider, and (where applicable) payment processor — may handle data on our behalf as data processors. Each of these providers operates under a data processing agreement that limits their use of your data to the specific service they provide. They are not permitted to use your data for their own purposes.

We may disclose personal data if required to do so by Egyptian law or a valid court order, or to protect the legal rights of Museum Pass Planners Egypt L.L.C. in the event of fraud or a legal dispute. In any such case, we disclose only the minimum information required.

8. Security measures

Our website is served entirely over HTTPS. Contact form submissions are transmitted over an encrypted connection. Email correspondence is handled through a business email service with access controls and two-factor authentication. Access to enquiry records is limited to the staff member handling the relevant correspondence. We conduct periodic reviews of our data handling procedures to ensure they remain appropriate. No method of electronic transmission or storage is completely secure, but we take reasonable and proportionate steps to protect personal data from unauthorised access, alteration, disclosure, or destruction.

9. Cookies and tracking technologies

This website does not use cookies for analytics, advertising, or personalisation. We do not set any first-party tracking cookies. If your browser stores any session-level data during a visit (for example, form field state during a single session), this is handled entirely by your own browser and is not transmitted to or stored on our servers. Because we do not operate any cookie-based tracking, no cookie consent banner is presented — there is nothing to consent to beyond the standard operation of your browser.

10. Your rights

Depending on your country of residence, you may have some or all of the following rights regarding your personal data held by us:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — if any information we hold is inaccurate or incomplete, you may ask us to correct it.
• Right to erasure — you may ask us to delete your personal data. We will comply within 30 days unless we have a legal obligation to retain it.
• Right to restriction — you may ask us to pause processing of your data while a correction or objection request is considered.
• Right to object — you may object to processing where we rely on legitimate interests as a legal basis (we do not currently do so for the processing described in this policy).
• Right to data portability — for data processed by automated means on the basis of consent or contract, you may request a machine-readable copy.
• Rights under Egyptian law — Egyptian residents have rights under Personal Data Protection Law No. 151/2020, including the right to access, correct, and delete personal data held about them, and the right to withdraw consent where consent is the processing basis.

To exercise any of these rights, send a written request to [email protected] with "Data Rights Request" in the subject line. We will respond within 30 days. We may ask you to verify your identity before acting on a request. There is no charge for exercising these rights unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or refuse the request.

11. Children's data

This website and our services are directed at adults planning travel. We do not knowingly collect personal data from children under the age of 16. If you believe a child has submitted personal data to us without appropriate parental consent, please contact us at [email protected] and we will delete the data promptly upon verification.

12. International data transfers

Our primary operations are based in Egypt. If your enquiry is sent from within the European Economic Area (EEA), your data is transferred to Egypt, which is not currently the subject of an EU adequacy decision. In such cases, we rely on standard contractual clauses or equivalent safeguards with any data processors established in the EEA, and we apply EU-equivalent data handling standards to all personal data regardless of origin. If you wish to understand the specific safeguards in place for your data, contact us at the address in section 1.

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our operations, legal obligations, or regulatory guidance. When we make substantive changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our contact form after a policy update constitutes acknowledgement of the updated terms. If a change materially reduces your rights, we will endeavour to notify active enquirers by email before the change takes effect.

14. How to make a privacy complaint

If you believe your personal data has been handled improperly, please contact us first at [email protected] — we aim to resolve all complaints directly and promptly. If you are not satisfied with our response and you are an EU/EEA resident, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence. Egyptian residents may also direct complaints to the Personal Data Protection Centre of Egypt, established under Law No. 151/2020, once its complaint-handling procedures are fully operational. We take all privacy concerns seriously and will co-operate fully with any regulatory investigation.