Privacy policy

Effective 27 June 2026. Museum In Giza Guides LLC ("we", "us") processes personal data under Egypt Personal Data Protection Law No. 151 of 2020 and its executive regulations.

1. Data controller

Museum In Giza Guides LLC, 15 Pyramids Road, Giza 12556, Egypt. Tax ID (ETA): 764-293-518. GAFI Registry: 478362. Email: [email protected]. Phone: +20 2 3587 4420.

2. Scope

This policy covers data collected through museum-in.cyou, email, telephone and in-person consultations at our Giza office. It applies to visitors requesting plateau planning services and users browsing our informational content.

3. Categories of data we collect

Identity and contact: name, email, phone number, country of residence. Trip details: travel dates, party size, hotel district, mobility information, monument preferences. Transaction data: tier selected, payment reference, invoice records. Communication records: form messages, email threads, call notes. Technical data: server logs including IP address, browser type, pages viewed and timestamps when you access our website.

4. Sources of data

Directly from you via the contact form, email, phone or walk-in visit. From payment processors when you pay planning fees. Automatically from web server logs when you browse our site. We do not purchase visitor lists or receive data from third-party brokers.

5. Purposes and lawful bases

Contract performance: preparing and delivering planning files you purchase. Legitimate interest: responding to pre-contract enquiries, improving site content, preventing fraud and documenting disputes forwarded to authorities. Legal obligation: retaining invoices and tax records per Egyptian commercial and tax law. Consent: where you tick the form checkbox for processing beyond contract delivery; you may withdraw consent by email without affecting prior lawful processing.

6. How we use trip and mobility data

Mobility answers determine interior pyramid recommendations in your planning file. We do not share health-related notes with camel operators or guides unless you explicitly request introduction and consent in writing. Trip dates trigger quota research and seasonal advice—not marketing unrelated to Giza travel.

7. Cookies and tracking

This site does not use Google Analytics, Meta Pixel, advertising cookies or third-party marketing trackers. Server logs are retained for security. No cookie banner is displayed because we do not set non-essential cookies on visitors' browsers.

8. Data sharing

Licensed guides receive only briefing fields you approve when choosing Coordinator tier introduction. Payment processors receive billing details necessary to complete transfer. Egyptian Tax Authority receives data required on invoices. Tourist police liaison receives dispute documentation only with your written consent. We do not sell personal data.

9. International transfers

Primary storage is in Egypt. PayPal or email providers may process data on servers outside Egypt; we use providers offering contractual safeguards consistent with Law 151/2020 requirements for cross-border transfer where applicable.

10. Retention periods

Planning files and enquiry emails: three years after last contact unless longer retention required for dispute. Invoices and payment records: ten years per tax law. Server logs: ninety days. Consent records: duration of processing plus three years.

11. Security measures

Office systems use password-protected access. Planning PDFs transmit over TLS email. Paper intake forms are shredded after digitisation within thirty days. Staff receive annual data handling briefing covering Law 151/2020 principles.

12. Your rights under Law 151/2020

You may request access, correction, deletion, restriction of processing, objection to legitimate-interest processing and portability where technically feasible. Submit requests to [email protected] with identity verification. We respond within thirty days unless extension is permitted by law. You may lodge a complaint with the Egyptian Personal Data Protection Centre when operational.

13. Children

Services are directed at adults planning travel. We do not knowingly collect data from children under sixteen without parental authority. School group enquiries should be submitted by institutional contacts.

14. Changes to this policy

We publish updates on this page with a revised effective date. Material changes affecting active clients are communicated by email when address is on file.

15. Contact for privacy matters

Email [email protected] with subject "Privacy request". Postal: Museum In Giza Guides LLC, 15 Pyramids Road, Giza 12556, Egypt. Include full name and enquiry reference if available.

16. Processing records and audit

We maintain a processing activity record listing contact form data, planning file delivery, invoice retention and guide referral logs. Internal audits occur annually before peak season opening. Subprocessors include email hosting and PayPal; contracts require confidentiality consistent with Law 151/2020.

17. Data minimisation in practice

We do not ask for passport numbers, national ID copies or payment card details through the website form. Payment card data is entered only on processor-hosted pages. Trip messages should exclude unnecessary health diagnoses—mobility summaries suffice for interior recommendations.

18. Breach notification

If a personal data breach likely affects your rights, we notify the Personal Data Protection Centre and affected individuals without undue delay when required by law, describing nature of breach, likely consequences and mitigation steps taken.

19. Lawful basis summary table

Activity	Basis	Retention
Planning file delivery	Contract	3 years
Enquiry emails	Legitimate interest / consent	3 years
Invoices	Legal obligation	10 years
Guide referral	Contract + consent	1 year after trip
Server logs	Security interest	90 days

20. Your responsibilities

Provide accurate travel dates and contact email. Notify us of address changes before PDF delivery. Do not forward planning files publicly—they contain timed advice that becomes outdated. Report unauthorised use of our invoice templates impersonating our desk.

21. Marketing communications

We do not send newsletter marketing. Post-trip emails are limited to dispute follow-up or voluntary satisfaction check— one message unless you reply. No data sold to hotel chains or tour operators.

22. Automated decision-making

We do not use automated profiling or algorithmic pricing. Every planning file is assembled by staff reviewing your form answers and current gate data.

23. Third-party links

Our site links to official Antiquities portals when URLs stable; we are not responsible for third-party privacy practices. Payment occurs on processor-hosted pages with their own policies.

24. Governing law

Egyptian law governs this policy and data processing. Courts of Giza govern disputes unless mandatory consumer protection in your country of residence requires otherwise.

25. Specific data fields in contact form

Name and email identify you for reply. Phone optional for SMS quota updates on Coordinator tier. Package selection records contract tier. Dates and message store trip parameters. Consent checkbox timestamp stored in email archive as proof of Law 151/2020 basis for pre-contract communication.

26. Archival and deletion requests

Request deletion after retention period expires early only when no legal hold applies— unpaid invoices or open disputes block deletion until resolved. Anonymised queue statistics may remain in aggregate research without identifiers.

27. Supervisory authority contact

Egypt Personal Data Protection Centre is the supervisory body under Law 151/2020. Contact them for unresolved complaints after our thirty-day response window. Our registration details: Museum In Giza Guides LLC, ETA 764-293-518, GAFI 478362, data controller address 15 Pyramids Road, Giza 12556.

28. Version history

Policy version 2026-06 effective 27 June 2026 replaces informal 2019 office notice. Material changes emailed to active clients with open files.

29. Data protection officer function

No separate DPO appointed— founder Youssef El-Masry handles privacy enquiries for our small organisation under Law 151/2020 SME provisions. Contact [email protected] marking Privacy request. Response within thirty days.

30. Cookies and server logs detail

Essential session cookies absent on static site. Server logs capture IP, user agent, requested URL, timestamp for ninety days for security analysis only— not linked to marketing profiles.

31. Joint controllers

No joint controllership arrangements. Guides hired separately become independent controllers of any data they collect during commentary— confirm their practices directly.

32. Data subject access procedure

Email [email protected] from the address on file with subject Access request. We verify identity via reply confirmation. Provide copy of form data, planning PDF metadata, and invoice history within thirty days unless extension legally permitted.

33. Complaints escalation

Unresolved privacy complaints after our thirty-day response may go to Egypt Personal Data Protection Centre when fully operational. Document reference numbers we provide in closure emails. For non-privacy service disputes use contact form with invoice number— separate process from data rights.

34. Contact summary

Data controller: Museum In Giza Guides LLC, [email protected], +20 2 3587 4420, 15 Pyramids Road, Giza 12556. ETA 764-293-518. GAFI 478362. Effective 27 June 2026.

This policy applies to all channels through which you interact with our planning desk including telephone notes taken during walk-in consultations— those notes digitise within forty-eight hours and follow same retention rules as email.

We do not profile visitors for advertising networks. No sale of personal data. No automated decision-making with legal effect. Questions: [email protected] with subject Privacy.

Printed copies available at office on request for clients preferring paper policy acknowledgement before signing Coordinator tier guide introduction forms.