Legal
Privacy Policy
Last updated: May 14, 2026
Oh Yes Tours ("we", "us") respects your privacy. This policy explains what personal data we collect, why, how we use it, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who we are
Data controller: Oh Yes Tours, registered in the Netherlands.
Contact: info@ohyestours.com
Operations: El Hadaba, Hurghada, Egypt
2. What data we collect
When you contact us via the inquiry form, email, or WhatsApp, we collect:
- Identification: name
- Contact: email address, phone number (optional)
- Trip details: travel dates, group size, preferred tours, dietary restrictions, special requests
- Communication content: any message you send us
Our website does not use third-party analytics cookies, advertising trackers, or social media pixels. We use Cloudflare Web Analytics (privacy-first, no cookies, no IP storage).
3. Why we collect it
We use your data for the following purposes:
- Trip planning: to prepare your custom itinerary and quote
- Communication: to respond to your inquiry, confirm bookings, and coordinate logistics
- Service delivery: to share contact details with the guide assigned to your tour
- Legal compliance: to keep records as required by Dutch and EU tax law
Legal basis (GDPR): performance of a contract (booking your tour), and our legitimate interest in operating our business.
4. Who we share data with
Your data is shared only with:
- Your assigned guide in Egypt — to coordinate pickup and tour delivery
- Third-party reservation systems when required for your tour (Nile cruise operators, domestic flight carriers — only what's strictly necessary)
- Cloudflare — our hosting provider, who processes form submissions on our behalf as a data processor
- Telegram — our internal notification system for new inquiries (limited to inquiry summary, no payment data)
We never sell or rent your data to advertisers, marketing companies, or other third parties.
5. How long we keep it
- Inquiry messages: 12 months (then deleted unless you become a customer)
- Booking and payment records: 7 years (required by Dutch tax law)
- Marketing emails: until you unsubscribe
6. Your rights under GDPR
You have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements
- Portability — receive your data in a structured, machine-readable format
- Object — to certain types of processing, including marketing
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority
To exercise any right, email info@ohyestours.com. We respond within 30 days.
7. Data security
All data transmitted to our website is encrypted via HTTPS (TLS 1.2+). Form submissions are processed on Cloudflare's edge network with encryption at rest. We do not store credit card details — payments are made directly to your guide in cash or via secure third-party payment processors.
8. International data transfers
Because our operations are in Egypt and our legal entity is in the Netherlands, your data may be processed in both locations. Egypt is not an EU member state, but we ensure data shared with our Egyptian operations is limited to what's necessary for tour delivery, and protected by contractual safeguards.
9. Children
Our services are intended for adults (18+). We may collect data about minors only when a parent or legal guardian books a family tour and provides the information directly.
10. Changes to this policy
We may update this policy occasionally. The current version with "Last updated" date is always on this page. Significant changes will be communicated via email to active customers.
11. Contact
Privacy questions: info@ohyestours.com
Postal address: Oh Yes Tours, the Netherlands