The data controller responsible for personal data collected through this website and through direct service engagements is:
Nile Heritage Consultants Ltd.
14 Sherif Street, Abdin District, Cairo, 11511, Egypt
Tax ID: 621-084-379 | Registry No.: 482916 (GAFI)
Email: [email protected]
Phone: +20 2 2393 7841
This policy is drafted in compliance with the Arab Republic of Egypt's Personal Data Protection Law No. 151 of 2020 (PDPL) and its Executive Regulations issued by Ministerial Decree No. 432 of 2021. For clients resident in the European Economic Area, we apply the General Data Protection Regulation (GDPR) as an additional standard. Where Egyptian law and GDPR requirements differ, the more protective standard applies.
We process personal data on one or more of the following legal bases: (a) performance of a contract or pre-contractual measures at your request; (b) compliance with a legal obligation applicable to Nile Heritage Consultants Ltd.; (c) legitimate interests pursued by the company, where not overridden by your interests or fundamental rights; (d) your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.
We collect and process the following categories of personal data:
We use personal data exclusively for the following purposes:
We do not use personal data for automated decision-making or profiling. We do not sell, rent, or share personal data with third parties for their own marketing purposes under any circumstances.
Personal data may be shared with the following categories of third parties only to the extent necessary to deliver the service you have requested:
No personal data is transferred to entities outside Egypt or the EEA without appropriate safeguards in place.
Enquiry data for which no service engagement results is retained for 12 months from the date of submission, after which it is deleted. Service engagement data — correspondence, itineraries, permit records, and programme notes — is retained for a period of 5 years from the date of the last engagement, in compliance with Egyptian commercial record-keeping requirements. Financial records including invoices and payment confirmations are retained for 7 years as required by Egyptian tax law. If you are a returning client and have not engaged with us for more than 5 years, your personal record is archived to a restricted-access storage location and not actively processed until you re-engage.
Subject to applicable law, you have the following rights regarding your personal data:
To exercise any of these rights, send a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and respond substantively within 30 days. If your request is complex, we will inform you and extend this period by a further 60 days where permitted by applicable law.
We implement technical and organisational measures appropriate to the risk level of the data we process. These include: encrypted email transmission (TLS) for all outbound and inbound correspondence; password-protected, access-controlled file storage for client records; staff training on data protection obligations under Egyptian PDPL; and physical security at our office premises in Abdin District. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant authority within the timeframe required by applicable law.
This website does not use cookies for analytics, advertising, or tracking purposes. The only technically necessary cookies that may be set are those required for basic website function (session management for form submission). No third-party cookies are loaded by this website. No pixel codes, analytics scripts, or advertising networks are integrated into any page on this domain.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from individuals under 16 without verified parental or guardian consent. If you believe a child has submitted data to us without consent, please contact us immediately and we will delete the data promptly.
This website may contain links to external resources such as the websites of heritage sites, government authorities, and academic institutions. We are not responsible for the privacy practices of these third-party sites, and this policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit.
If you believe your data protection rights have not been observed, you have the right to lodge a complaint with the Egyptian Personal Data Protection Centre (PDPC) established under Law No. 151 of 2020. EEA residents may also contact their local data protection supervisory authority. We would, however, request that you contact us directly in the first instance so that we may attempt to resolve your concern without a formal complaint being necessary.
We review this policy annually or whenever there is a significant change to our data processing activities or to applicable law. Material changes will be communicated to existing clients by email at least 14 days before taking effect. The effective date at the top of this document will be updated whenever the policy is revised. Continued use of our services after a revision takes effect constitutes acceptance of the updated policy. If you do not accept a material revision, you have the right to terminate your engagement with us without penalty for the portion of the service not yet delivered.