Privacy Policy
Introduction
Mystic Egypt ("we", "our", "us") respects your privacy. This policy explains how we collect, use, and protect your personal data when you use our website and services.
Data We Collect
- Account Data: Name, email address, and encrypted password when you create an account.
- Booking Data: Tour selections, travel dates, add-on preferences, and payment method details.
- Payment Data: Stripe processes all card payments. We never store credit card numbers on our servers.
- Usage Data: Pages visited, search queries, and browser information for analytics.
How We Use Your Data
- To process bookings and deliver tour services.
- To communicate booking confirmations, updates, and support.
- To improve our website and services.
- To comply with legal obligations.
Data Sharing
We share your data only with:
- Stripe: For payment processing (PCI-DSS compliant).
- Tour Operators: Limited booking details to fulfill your tour.
- Resend: For transactional emails (booking confirmations, password resets).
Your Rights
Under UK GDPR, you have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Object to processing of your data.
To exercise these rights, contact us at privacy@mysticegypt.net.
Data Retention
We retain your data for as long as your account is active or as needed to provide services. Booking records are retained for 7 years for tax and legal compliance.
Security
We implement industry-standard security measures including encryption, secure authentication, and regular security audits.
Updates
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.