Privacy policy - Heissa Artie

01Who we are

Heissa Artie Nubian Guest House ("we", "us", "our") operates the website at heissa-artie.com and runs the guest house at Heissa Island, Aswan, Egypt. We are the data controller for the personal data described in this policy.

Contact: info@heissa-artie.com · +20 112 933 1600 · Heissa Island, Aswan, Egypt.

02Data we collect

Booking data

Name, email, phone, dates of stay, room preferences, special requests, payment confirmation reference (we do not store full card numbers — these are handled by our PMS payment processor).

Identity documents

Passport number (foreign guests) or national ID (Egyptian guests). Required by Egyptian law for guest registration. Held only as long as required.

Communications

Emails, WhatsApp messages, contact form submissions. Used to respond to your enquiries and improve our service.

Website analytics

Anonymous visit data via Google Analytics — pages viewed, approximate location (city-level), browser type. We do not track individuals across sessions.

Strictly necessary cookies (cart/booking session), and optional analytics cookies (you can opt out via the cookie banner).

03Why we collect it

To operate your booking: confirm reservation, prepare your room, arrange pickup, register you with local authorities (legal obligation in Egypt).
To communicate with you: reply to messages, send confirmation, follow up after your stay.
To improve the website: understand which pages help travelers most.
To meet legal requirements: tax records, guest registration, financial reporting.

Our legal basis is contract (to deliver your booking) and legal obligation (registration, tax) — and for analytics and marketing emails, your consent.

04Who sees it

Your data is shared only with these parties, and only when necessary:

Our PMS provider (Beds24): for booking and availability management.
Payment processors: Stripe, bank transfer providers — only when you pay in advance.
Egyptian local authorities: guest registration data, as required by law.
Email delivery providers: to send confirmations.
Google Analytics (anonymous data only).

We never sell your data, share it for advertising, or pass it to data brokers.

05How long we keep it

Booking records: 5 years (tax/legal requirement)
Identity documents: 1 year after stay, then deleted
Email/WhatsApp threads: 2 years, then archived offline or deleted
Marketing email subscribers: until you unsubscribe
Analytics: Google's standard retention (26 months)

06Your rights

Under GDPR (and similar regulations elsewhere), you have the right to:

Access the personal data we hold about you
Correct any inaccurate data
Delete your data ("right to be forgotten") — subject to legal retention requirements
Object to processing for marketing purposes
Export your data in a portable format
Withdraw consent at any time

Email info@heissa-artie.com with your request — we respond within 30 days.

07Security measures

Booking data is held in our PMS (Beds24) with encrypted transit and storage. Our website uses HTTPS. Email is on a major provider with two-factor authentication. We don't store payment card details ourselves.

08Cookies & tracking

We use:

Essential cookies: for the booking widget & language preference (cannot be disabled)
Google Analytics: with IP anonymization on, can be opted out via the banner
Meta Pixel: only if you've consented — used for retargeting on Facebook/Instagram

09Children's data

We don't knowingly collect data from children under 16. Bookings are made by adults. If you believe a child has submitted personal information through our site, contact us immediately for deletion.

10Changes to this policy

If we update this policy, we'll change the "last updated" date and notify recent guests if changes are material. Past versions are available on request.

Treat your data with the same care we treat our guests — that's the rule.

Privacy policy.