Legal
How Nilescope Heritage Advisors collects, uses, and protects information you share through Egypt Pass. Last updated: 2 June 2026.
This Privacy Policy applies to Nilescope Heritage Advisors ("we", "our", "us"), a company registered in Egypt under GAFI Commercial Registry number 482936, with Egyptian Tax Authority Tax ID 643-817-205. Our registered office is at 14 Talaat Harb Street, 3rd Floor, Cairo 11511, Egypt. We operate the website egypt-pass.sbs (the "Site"), an independent informational guide to Egypt's archaeological sites, museums, and cultural heritage destinations.
We can be reached at [email protected] or by post at the address above. For general enquiries, write to [email protected] or call +20 2 2578 4391 during office hours (Monday to Friday, 09:00–17:00 Cairo time).
This Policy describes our practices for personal data collected through the egypt-pass.sbs website — including its contact forms, membership enquiry flows, and any correspondence you initiate with us by email or telephone. It does not govern third-party websites linked from our pages; we have no control over the data practices of those sites and encourage you to read their own privacy notices.
We do not operate advertising trackers, retargeting pixels, or analytics platforms on this Site. We do not use Google Analytics, Meta Pixel, Google Tag Manager, Firebase, or any equivalent service. Our pages set no third-party cookies and transmit no visitor data to external advertising networks.
We collect only the information you voluntarily provide to us. The categories and specific fields we may hold are set out below.
When you complete the enquiry form on our Contact page you are asked to supply your full name, email address, telephone number (optional), your preferred membership plan, and a free-text message describing your enquiry. This information is transmitted to us by secure POST submission and stored on our internal correspondence system. We do not use GET-method forms; your data does not appear in URLs or browser histories on our server side.
If you write to us directly at [email protected] or telephone +20 2 2578 4391, we retain the content of that correspondence and any personal details you share within it. Telephone calls are not recorded. Email threads are retained for up to 36 months following the resolution of your enquiry.
Members of our Explorer, Scholar, or Expedition plans provide their name, contact details, travel dates, passport number (where required for site permit applications), institutional affiliation where applicable, and payment information. Payment data is processed by a PCI-DSS-compliant payment processor and is not stored on our own servers beyond a transaction reference number.
Our web hosting provider automatically records standard server-access data: the IP address from which a request originates, the date and time of the request, the URL requested, and the HTTP response code. These logs are retained for 30 days for security and uptime monitoring purposes. We do not correlate server logs with individual identities unless required to investigate a security incident.
We use the personal data we collect for the following purposes, and only for these purposes:
We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or trade personal data to any third party. We do not use your data for direct marketing unless you have separately and explicitly consented to receive such communications in writing.
Our processing of personal data is based on the following legal grounds, consistent with Egyptian Personal Data Protection Law No. 151 of 2020 and its executive regulations:
We share personal data with third parties only to the extent strictly necessary and only in the following circumstances:
We do not transfer personal data outside Egypt to third countries unless (a) you have explicitly consented, (b) the transfer is necessary to perform a service you have requested and the receiving country provides an adequate level of protection, or (c) we have implemented appropriate contractual safeguards.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and thereafter for such period as we are required to keep it by law. Our standard retention periods are:
At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to an identifiable individual.
Under Egyptian Personal Data Protection Law No. 151 of 2020 you have the following rights with respect to personal data we hold about you:
To exercise any of these rights, write to [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may need to verify your identity before processing a request. There is no charge for exercising your rights in ordinary circumstances.
Egypt Pass does not use cookies for tracking, analytics, or advertising. We do not deploy any third-party JavaScript libraries that set tracking cookies. Our website does not integrate with social-media platforms in ways that share your browsing activity with those platforms.
Certain browsers or devices may store session-state data locally (for example, in sessionStorage) to support in-page functionality such as form progress. This data never leaves your device and is automatically cleared when you close your browser tab.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Our website is served exclusively over HTTPS. Access to our internal correspondence systems is restricted to authorised personnel, who are bound by confidentiality obligations. Payment data is never stored on our servers and is handled entirely by our PCI-DSS-compliant payment processor.
No method of electronic transmission or storage is completely secure. If you believe a security incident has affected your data, contact us immediately at [email protected].
Our services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has submitted personal data to us without your consent, contact us immediately at [email protected] and we will delete that data promptly.
Our pages may contain links to external websites — for example, the official websites of Egyptian museums, the Supreme Council of Antiquities, or independent archaeological publications. These links are provided for your convenience and information only. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy notices of any site you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. When we make material changes we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of the Site after a change takes effect constitutes acceptance of the updated Policy.
Questions about this Privacy Policy or how we handle your personal data should be directed to our privacy contact:
Nilescope Heritage Advisors — PrivacyIf you are not satisfied with our response, you have the right to complain to the Egyptian Personal Data Protection Center (PDPC), the competent supervisory authority under Law No. 151 of 2020, at their published contact address.