Privacy Policy

Nile Routes is an Egyptian travel agency specialising in private, culturally immersive tours throughout Egypt. Our registered office is located at Office 21, Floor 1, Golden Nile Mall, Hilton Street, Al Karnak, Luxor, Egypt.

For the purposes of applicable data protection law, Nile Routes acts as the data controller of personal information collected through our website at nileroutes.com, as well as information you provide to us by telephone, email, or in connection with a booking.

We collect only the information necessary to plan, confirm, and deliver your travel arrangements. This may include the following categories of information:

• Contact details — name, email address, telephone number, and country of residence
• Booking information — tour preferences, travel dates, group size, and any special requirements or accessibility needs
• Payment information — processed securely by our third-party payment partners; we do not store complete payment card details on our servers
• Correspondence — enquiries submitted through our contact form, WhatsApp, or email
• Usage data — pages visited, time spent on our website, browser type, and referral source, collected through cookies and analytics tools

We use the information we collect solely to support the delivery and continual improvement of our services. Specifically, we use it to:

• Respond to enquiries and prepare tour quotations
• Confirm and administer bookings and itineraries
• Liaise with guides, cruise operators, and accommodation providers on your behalf
• Communicate essential pre-travel and operational information
• Process payments and issue invoices or receipts
• Improve the content, functionality, and usability of our website
• Send travel updates or promotional communications where consent has been given

To arrange and deliver your tour, we may share relevant information with trusted third parties, including:

• Licensed Egyptologist guides and drivers
• Nile cruise and dahabiya operators
• Hotels and accommodation providers
• Payment processing providers

These parties receive only the information required to fulfil your booking and are expected to handle it in accordance with applicable data protection standards. We do not disclose personal information to any other third party without your consent, except where required by Egyptian law or requested by a competent authority.

Our website uses cookies, small data files stored on your device, to help us understand how visitors use our site and to improve your browsing experience. We use the following categories of cookies:

• Essential cookies — required for the website to function correctly
• Analytics cookies — used to understand site performance and visitor behaviour, such as Google Analytics
• Marketing cookies — used to present relevant content on other platforms, applied only where consent has been given

Cookie preferences can be managed or disabled at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of some features on our website.

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Booking and financial records are generally retained for seven years to satisfy accounting and legal requirements. You may request the deletion of your data at any time, as described in Section 7.

Subject to applicable law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information, subject to our legal obligations
• Objection — object to the processing of your information for marketing purposes
• Portability — request your data in a structured, commonly used, and machine-readable format
• Withdrawal of consent — withdraw consent to marketing communications at any time

To exercise any of these rights, please contact us using the details in Section 9. We will respond to all requests within 30 days.

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. All sensitive data transmitted through our website is encrypted using SSL/TLS technology, and payment transactions are processed by PCI-compliant providers.

While we take reasonable steps to safeguard your information, no method of transmission over the internet can be guaranteed to be completely secure. If you have reason to believe your information has been compromised, please contact us immediately.

For any questions regarding this Privacy Policy, to exercise your rights, or to raise a concern about how we handle your personal information, please contact us:

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Any revisions will be indicated by an updated effective date at the top of this page. We recommend reviewing this policy from time to time. Continued use of our website following any changes constitutes acceptance of the revised policy.