Privacy Policy

Mystic Egypt is a travel company registered in the United Kingdom, operating tours across Egypt with a local team of Egyptian experts. Our website is mysticegypt.net and you can reach us at info@mysticegypt.net.

We collect only the information needed to provide and manage your booking: your name, email address, phone number, billing details, and the details of the tour you book (dates, group size, requested add-ons).

When you use our contact form we collect the details you submit so we can reply to your enquiry.

We never store credit or debit card numbers. Card payments are processed entirely by Stripe, a PCI-DSS compliant payment provider.

We use your personal data to: confirm and manage bookings, communicate about your trip, issue invoices and receipts, respond to enquiries, send service messages and legally required notices, and improve our website and services.

Where you have opted in, we may send occasional travel news and offers. You can opt out at any time by replying to any email or contacting us.

We process personal data on one of these lawful bases: performance of a contract (booking and payment), your consent (marketing and optional analytics), legitimate interest (fraud prevention, website improvements), or compliance with a legal obligation (accounting and tax records).

Card payments are handled by Stripe under its own privacy policy. We receive only confirmation that a payment was successful and basic billing details such as the last four digits.

For bank-transfer bookings you upload a payment receipt, which we review to confirm your booking. We retain minimum necessary records for accounting and anti-fraud purposes.

We share data only with the service providers needed to run the service: Stripe (payments), our email provider (transactional messages and receipts), and our website analytics provider (aggregated, privacy-aware statistics).

We never sell or rent your personal data, and we never share it with third parties for their own marketing.

We keep personal data only as long as necessary: booking and financial records are kept for the period required by law (typically up to 7 years for accounting), and other data is deleted or anonymised when it is no longer needed.

Under the UK GDPR you have the right to access, correct, delete or restrict the processing of your personal data, the right to data portability, and the right to object to processing based on legitimate interest.

To exercise any of these rights, email us at info@mysticegypt.net. We will respond within the timeframe required by law. You may also lodge a complaint with the UK Information Commissioner's Office (ICO).

Your data may be processed by our service providers located outside the United Kingdom. Where this happens, we rely on recognised safeguards such as adequacy decisions or standard contractual clauses.

Our services are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. The current version is always published on this page with its effective date. Material changes will be highlighted on the website.

For any privacy question or request, contact us at info@mysticegypt.net, by phone on +44 7412 880087 (UK) or +20 102 922 6066 (Egypt), or by post at Cleveland Tower, Holloway Head, Birmingham, United Kingdom.