Privacy Policy
Effective 18 October 2026.
This policy explains how Sakkara Group International and its brands, Sakkara Tours and Sakkara Nile Cruises (“we”, “us”), collect, use, keep and protect personal data received through sgi.travel, sakkaratours.com and sakkaranilecruises.com, and through the enquiries and bookings that follow from them. Our websites and services are intended for tour operators, travel agents and other business customers.
Who is responsible for your data
Sakkara Group International, based in Cairo, Egypt, is responsible for the personal data described in this policy. For any question about this policy or your personal data, or to exercise your rights, write to privacy@sgi.travel.
We process personal data in line with Egypt’s Personal Data Protection Law (Law No. 151 of 2020) and, where they apply to you, other data protection laws such as the EU and UK General Data Protection Regulation.
What we collect
When you send an enquiry
- your name, email address and, if you give it, your phone number;
- your company, if you tell us, and your intended travel dates and number of travellers;
- the message you write, and the package, vessel or event you are asking about.
When a booking goes ahead
To deliver the services booked, we receive details of the travellers from our trade partner, such as names, nationalities, dates of birth, passport details, arrival and departure information, and rooming requirements. Where a traveller has dietary, medical or mobility needs, we receive that information only to arrange the services and only with the traveller’s explicit consent, which the trade partner is responsible for obtaining. Details of travellers under 18 are handled only as part of a booking made by a responsible adult or trade partner.
When you visit our websites
Our servers record technical information such as your IP address, browser type and the pages requested, to keep the websites secure and working. A session cookie, kept for up to two hours, records the same kind of information while you use a website. We do not use this information to build a profile of you.
How we use it, and our legal basis
- To answer your enquiry and prepare a quotation — because you have asked us to, and to take the steps needed before a contract.
- To arrange and manage a booking — to perform our contract with you or your company.
- To protect our forms and websites against spam, fraud and abuse — our legitimate interest in running a secure service and, where the law requires it, your consent.
- To meet legal, tax, accounting and regulatory obligations, including those that apply to licensed tourism companies in Egypt.
- Health or other sensitive information — only with explicit consent, and only to provide the service it relates to.
We do not sell personal data. We do not send marketing messages unless you have asked to receive them, and you can stop them at any time. We do not make decisions about you by automated means alone.
Who we share it with
- Within our group — staff of Sakkara Group International, its brands and its offices outside Egypt who need the information to respond to you or to deliver a booking.
- Service providers who process data for us under our instructions: Microsoft 365, which delivers and stores our email; our website hosting provider; Bunny Fonts (bunny.net), which serves the typefaces on our websites and receives your IP address when a page loads; and, where it is switched on, Google reCAPTCHA, which checks that a form is sent by a person — its use is subject to Google’s Privacy Policy and Terms of Service.
- Suppliers of booked services — the hotels, cruise operators, transport companies, guides and venues that need the details to deliver them.
- Authorities — where the law requires it, for example immigration, tourism or tax authorities, or to establish, exercise or defend legal claims.
International transfers
We are based in Egypt, and our group offices and some of our service providers are in other countries, including the European Union, the United Kingdom, the United States, India and the United Arab Emirates. When personal data moves between countries, we transfer it only as the applicable law allows, using safeguards such as the European Commission’s standard contractual clauses where they are required. You can ask us for details of the safeguards that apply to your data.
How long we keep it
- Enquiries are deleted automatically two years after they were last updated.
- Booking and accounting records are kept for as long as Egyptian tax, accounting and tourism regulations require, and then deleted.
- Session data expires after two hours. Server logs are kept for a short period set by our hosting provider.
Cookies
Our websites use only the cookies they need to work: a session cookie and a security token that protects our forms. We do not use advertising or analytics cookies. Where Google reCAPTCHA is used on a form, it may set its own cookies.
Your rights
Depending on where you live, you may have the right to be told how we use your data, to receive a copy of it, to have it corrected or deleted, to restrict or object to its use, to withdraw consent at any time, and to have it transferred to you or another organisation. To use any of these rights, write to privacy@sgi.travel. We may ask you to confirm your identity before acting on a request, and we will reply within the time the applicable law sets — normally within one month.
You also have the right to complain to a data protection authority: in Egypt, the Personal Data Protection Center; in the EU or UK, the authority in the country where you live or work.
Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections to our websites and access limited to the staff who need it. If a personal data breach occurs, we will notify the competent authority and the people affected where the law requires it.
Children
Our websites are intended for business customers and are not directed at children. We do not knowingly collect personal data from anyone under 18 through them.
Changes to this policy
We may update this policy. The current version, with its effective date, is always the one published on this page.