Privacy Policy

What this Privacy Notice covers

The data controller is Nile-Cruise-Egypt.com (referred to in this Notice as “we” or “us”), part of the Touresanta Group. We are committed to doing the right thing when it comes to how we collect, use and protect your personal data.

Your privacy matters to us, so please take the time to read this Privacy Notice, which explains what types of personal data we collect and why; when and how we may share personal data within the Touresanta Group and with other organisations; and the choices you have, including how to access and update your personal data.

We have tried to keep this Notice as simple as possible, but if you are not familiar with terms such as data controller or special categories of personal data, you can read about these and others in Key terms.

Personal data we collect

When you register for any of our services, you may provide us with:

• Your personal details, including your address, email address, phone number and date of birth.
• Your account login details, such as your username and the password you chose.

When you browse our websites or use our mobile apps, we may collect:

• Travel preferences and information about your browsing behaviour on our websites and apps.
• Information about when you click on one of our adverts, including those shown on other organisations' websites.
• Information about how you access our digital services, including operating system, IP address, online identifiers and browser details.
• Social preferences, interests and activities.

When you buy our products online, we may collect:

• Passenger information, passport details and other ID document details.
• Insurance details.
• Relevant medical data and any special dietary, religious or disability requests.
• Information about your purchases, including what you bought, when and where, how you paid and payment information.
• Information about your browsing behaviour, advert clicks, how you access our digital services, and your social preferences, interests and activities.

When you contact us, or take part in promotions, competitions, surveys or questionnaires, we may collect:

• Personal data you provide when you connect with us — by email, post, phone or social media — such as your name, username and contact details.
• Details of emails and other digital communications we send you that you open, including any links you click on.
• Your feedback and contributions to customer surveys and questionnaires.

Other sources of personal data

• We may use personal data from other sources, such as specialist companies that supply information, retail partners and public registers.
• Your insurance company, its agents and medical staff may exchange relevant personal data (and special categories of personal data) with us where we or they need to act on your behalf, in the interest of other customers, or in an emergency.
• If you log in using your social network credentials (for example Facebook, Google or Twitter), you agree to share your user details with us — such as your name, email address, date of birth, location and any other information you choose to share.
• We may use CCTV images, IP address and browser details collected in or in the immediate vicinity of our premises, other buildings and cruise ships.

Personal data you provide about other individuals

We use personal data about other individuals that you provide, such as the other people on your booking. By providing other people's personal data, you must be sure that they agree to this and that you are allowed to provide it. Where appropriate, you should also make sure they understand how their personal data may be used by us.

Using your personal data

We use your personal data in a variety of ways, as explained in the sections below.

To provide the products and services you request

We need to process your personal data so that we can manage your account or booking, provide you with the products and services you want to buy, and help you with any orders and refunds you may ask for.

To manage and improve our products, services and operations

We use personal data to manage and improve our products, websites, mobile apps, customer recognition programmes and other services.

We monitor how our services are used to help protect your personal data, and to detect and prevent fraud, other crimes and the misuse of services. This helps us make sure that you can safely use our services.

We may use personal data to respond to and manage security operations, accidents or other similar incidents, including for medical and insurance purposes. We also use personal data to carry out market and internal research and development, and to improve our product range, services, IT systems, security and the way we communicate with you. We use CCTV images to help maintain the safety of anyone working in or visiting our premises, and for the prevention, detection and prosecution of criminal offences; we may also rely on these images to establish, exercise or defend our legal rights.

To personalise your experience

We want to ensure that marketing communications about our products and services, and those of our suppliers, retail partners and the Touresanta Group — including online advertising — are relevant to your interests.

To do this, we may use your personal data to better understand your interests so that we can try to predict what other products, services and information you might be most interested in. Looking at your browsing behaviour and purchases helps us understand you as a customer and allows us to provide personalised offers and services. We may also measure your responses to marketing communications so that we can offer products and services that better meet your needs.

If you do not want to receive a personalised service from us, you can change your preference online, over the phone or by writing to us (for example by email) at any time. We will update our records as soon as we can.

To make contact and interact with you

If you contact us — for example by email, post, phone or social media — we may use personal data to provide clarification or assistance to you.

We need to process your personal data so that we can manage any promotions and competitions you choose to enter, including those we run with our suppliers and retail partners. We may also invite you to take part in customer surveys, questionnaires and other market research carried out by the Touresanta Group or by other organisations on our behalf.

We do not sell your personal data to third parties.

Marketing communications

From time to time we may send you relevant offers and news about our products and services, including by email. We may also tell you about other companies' products and services we believe may be of interest to you. We will only do this if you previously agreed to receive these marketing communications.

When you book or register with us, we will ask whether you would like to receive marketing communications. You can change your marketing preferences online, over the phone, using the ‘unsubscribe’ link in our marketing emails, or by writing to us (for example by email) at any time. The choice is entirely yours — but if you opt out, you may miss offers or promotions that could be of interest to you.

You may still receive service-related communications from us — for example, confirming bookings you make with us and providing important information about the use of our products or services.

Market research

We like to hear your views to help us improve our products and services, so we may contact you for market research purposes. You always have the choice about whether to take part in, or continue with, our market research.

Sharing personal data with suppliers and retail partners

In order to provide the products or services you request, we may share personal data with suppliers of your travel arrangements, including airlines, hotels and transport companies.

We also work with carefully selected suppliers that carry out certain functions on our behalf — for example, companies that help us with IT services, storing and combining data, marketing, advertising, market research, processing payments and delivering products and services.

We may need to share personal data to establish, exercise or defend our legal rights, including providing data to others for the purposes of preventing fraud and reducing credit risk. When we share personal data with other organisations we require them to keep it safe, and they must not use it for their own marketing purposes. We only share the minimum personal data that enables our suppliers and retail partners to provide their services to you and to us.

Sharing personal data with regulatory authorities

So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes they determine appropriate.

Some countries will only permit travel if you provide advance passenger data (for example Caricom API Data and US Secure Flight Data). These requirements may differ depending on your destination, and you are advised to check. We may share the minimum personal data necessary with other public authorities where the law requires it, or where we are legally allowed to do so.

Sharing personal data with credit reference and fraud prevention agencies

When you order or buy products or services from us, we may share your personal data with credit reference agencies (CRAs) and fraud prevention agencies (FPAs). That means looking into any records we hold about you, and your records with those agencies. When they receive a search from us, a ‘footprint’ goes on your file which other organisations might see.

We may also carry out checks to confirm your identity, to help protect you from identity theft and other types of fraud, and to prevent and detect crime or money laundering. If false or inaccurate information is provided and identified as fraud, the details may be passed to FPAs and shared with law enforcement agencies. Each agency has its own criteria for calculating a credit score. For more information about how credit reference and fraud prevention agencies use personal data, please refer to the relevant Credit Reference Agency Information Notice.

Sharing personal data within the Touresanta Group

This Privacy Notice applies to all of the services offered by the Touresanta Group, but excludes services that have separate privacy notices that do not incorporate this Notice. We may share the minimum personal data necessary with other companies in the Touresanta Group — for example, to provide the products and services you request; to manage and improve our products, services and day-to-day operations; to help personalise your experience; where appropriate, to make contact and interact with you; and, if allowed and appropriate, for marketing or market research purposes.

We may also share personal data with an organisation that we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses, rights or obligations to. If such a transfer or sale goes ahead, the organisation receiving your personal data may use it in the same way as us.

Protecting your personal data

We know how important it is to protect and manage your personal data. We take appropriate security measures to help protect it from accidental loss and from unauthorised access, use, alteration and disclosure.

The security of your data also depends on you. For example, where we have given you (or you have chosen) a password for access to certain services, you are responsible for keeping that password confidential.

The personal data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA), and may be processed by organisations operating outside the EEA who work for us or for one of our suppliers. Where this happens, we put in place appropriate protections — including, but not limited to, appropriate contractual clauses and appropriate security measures — to make sure your personal data remains adequately protected and is treated in line with this Notice.

Data retention

We will retain your personal data only for as long as it is necessary for the uses set out in this Privacy Notice and/or to meet legal and regulatory requirements. After this period, we will securely erase your personal data. If data is needed after this period for analytical, historical or other legitimate business purposes, we will take appropriate measures to anonymise it.

About cookies and similar technologies

Cookies are small data files that allow a website to collect and store a range of information on your computer, laptop or mobile device. Cookies help us provide important features and functionality on our websites and apps, and we use them to improve your experience. You can control or delete cookies through your browser settings at any time, though some features of the site may not work as intended if you do.

Links to other websites

Our websites or mobile apps may contain links to websites operated by other organisations that have their own privacy notices. Please make sure you read their terms and conditions and privacy notice carefully before providing any personal data on another organisation's website, as we do not accept responsibility or liability for the websites of other organisations.

Social media features

Our websites or mobile apps may contain social media features, such as Facebook, Twitter, Google and Pinterest, that have their own privacy notices. Please make sure you read their terms and conditions and privacy notice carefully before providing any personal data, as we do not accept responsibility or liability for these features.

Accessing and updating your personal data; and complaints

You have a right to ask for a copy of the personal data we hold about you, although you should be able to access online the personal data associated with your account or booking. You can write to us asking for a copy of other personal data we hold about you. Please include any details that help us identify and locate your data. Where we can provide data access, we will do so free of charge, except where further copies are requested, in which case we may charge a reasonable fee based on administrative costs.

We want to make sure the personal data we hold about you is accurate and up to date. If any of the details are incorrect, please let us know. You can also ask for your personal data to be rectified or erased, object to its processing, and — where technically feasible — ask for personal data you provided to be transmitted to another organisation. We will update or erase your data unless we have to keep it for legitimate business or legal purposes.

You can also contact us if you have a complaint about how we collect, store or use your personal data. We aim to resolve complaints, but if you are dissatisfied with our response you may complain to the relevant data protection authority. Please note that we may ask you to verify your identity before we act on your request or complaint, and we may ask for more information to ensure that you are authorised to make a request or complaint on behalf of someone else.

Legal basis for processing personal data

We will only collect and use your personal data if at least one of the following conditions applies:

We have your consent.

It is necessary for a contract with you, or to take steps at your request before entering into a contract.

It is necessary for us to comply with a legal obligation.

It is necessary to protect your vital interests or those of another person.

It is in the public interest, or we have official authority.

It is in our or a third party's legitimate interests, and these are not overridden by your interests or rights.

Where we need to process special categories of personal data (for example health data for medical reasons), we will only do so if one or more additional conditions apply — for example, we have your explicit consent; it is necessary to protect the vital interests of you or another individual who is physically or legally incapable of giving consent; it is necessary to establish, exercise or defend legal claims; or it is necessary for reasons of substantial public interest.

Changes to our Notice

This Notice replaces all previous versions. We may change it at any time, so please check it regularly on our website for any updates. If the changes are significant, we will provide a prominent notice on our website, including — where we believe it appropriate — electronic notification of the changes.

Key terms

Data controller

The data controller determines the purpose and manner in which personal data is used.

European Economic Area (EEA)

EU Member States plus Norway, Iceland and Liechtenstein.

Online advertising

Marketing messages that you may see on the internet.

Special categories of personal data

Categories of personal data revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic or biometric data used to uniquely identify a person; health data; and data concerning a person's sex life or sexual orientation.

Caricom API Data

Some or all Caricom states have agreed with the USA that advance passenger data provided for border-security purposes will be passed to the US Department of Homeland Security for processing on their behalf. Please see the Caricom website for more details.

US Secure Flight Data

The Transportation Security Administration (TSA) requires your full name, date of birth and gender for the purpose of watch-list screening. You may also provide your Redress Number if available. Failure to provide details may result in denial of transport or of authority to enter the boarding area. Please see the TSA website for more details.