How we collect, use and protect your personal data when you book with Trains Egypt.
Last updated: September 2026
This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR. We do not sell your data. We do not share it with advertisers. We collect only what we need to process your booking.
Trains Egypt is a trading name of Traverse Group Ltd, a company registered in England and Wales, company number 17119723.
Registered office: Withington Works, 30 Burton Road, Withington, Manchester, M20 3EB.
For the purposes of UK data protection law, Traverse Group Ltd is the data controller for the personal information we collect through this website.
We are registered with the Information Commissioner's Office as a data controller.
You can contact us about anything in this policy at hello@trainsegypt.com.
We collect the following personal data when you make a booking:
| Data | Why we collect it |
|---|---|
| Full name of each traveller | Required by the rail operator to issue the ticket |
| Passport number of each traveller | Required by the rail operator to issue the ticket |
| Nationality of each traveller | Required by the rail operator to issue the ticket |
| Meal preference | Passed to the rail operator with your booking |
| Email address | To send your booking confirmation and your ticket |
| Phone number | To contact you if there is a problem with your booking |
| Payment information | Processed by Stripe. We never see or store your card details |
Where the rail operator requires additional passenger details in order to issue a ticket, we will collect only what is necessary for that purpose and will tell you at the time of booking.
If you do not provide passenger details, we cannot issue a ticket and cannot fulfil your booking. These details are a requirement of the rail operator, not a preference of ours.
We do not collect special category data such as health information, ethnicity, religion or biometric data.
A booking may include more than one traveller. Where you provide passport details for other people, including children travelling with you, you confirm that you are authorised to do so and that you have made them aware of this policy.
We process those details on the same basis and for the same purpose as your own, solely to issue their ticket.
Where a booking includes a child, an adult provides their details. We do not offer our service directly to children and we do not knowingly deal with a child as a customer.
We use your personal data to:
We do not use your data for marketing, profiling, or any automated decision-making that produces legal or similarly significant effects on you.
Under UK GDPR we rely on the following legal bases:
Contract performance, Article 6(1)(b). Processing is necessary to provide the booking service you have asked us for. This covers passenger details, contact details and payment.
Legal obligation, Article 6(1)(c). We are required to retain transaction records for tax and accounting purposes.
Legitimate interests, Article 6(1)(f). To contact you about a problem with your booking, to deal with complaints, and to protect against fraudulent transactions and chargebacks.
Consent, Article 6(1)(a). For non-essential cookies only. You can withdraw this at any time, as set out in section 9.
We share the minimum data necessary to fulfil your booking:
The rail operator. Passenger names, passport numbers and nationalities are passed to the operator in Egypt in order to issue your ticket. Without this, no ticket can be issued.
Stripe. Payment is processed by Stripe, who handle all card data and are PCI DSS compliant. We never see or store your card number. Their privacy policy is at stripe.com/gb/privacy.
Service providers acting on our behalf. We use IT and cloud service providers to host our website, send email and store booking records. They process data only on our instructions and are bound by written data processing terms.
Where required by law. We may disclose data where we are legally obliged to do so.
We do not sell, rent or share your data with any third party for marketing or advertising purposes.
To issue your ticket, passenger details must be transferred to the rail operator in Egypt, which is not covered by a UK adequacy decision.
We make this transfer in reliance on Article 49(1)(b) of the UK GDPR, as the transfer is necessary for the performance of the contract between you and us. There is no way to obtain a ticket without it.
We transfer only the details the operator requires, and no more.
| Data | Retention period |
|---|---|
| Passport numbers and nationalities | Deleted within 12 months of your travel date |
| Names, contact details and journey details | Retained for 6 years from the end of the tax year in which the booking was made |
| Transaction and payment records | Retained for 6 years, as required for tax and accounting purposes |
| Correspondence with us | Retained for 2 years, or longer where it relates to an ongoing matter |
The six-year period reflects HMRC's record-keeping requirements for limited companies. Passport details are held for a shorter period because they are not needed once travel has taken place.
Our website uses cookies. A consent notice is shown on your first visit.
Essential cookies keep the site working, remember your language choice and carry your booking through checkout. These do not require consent.
Analytics cookies help us understand how visitors use the site.
Advertising cookies help us measure the performance of our marketing.
Analytics and advertising cookies are only set if you consent. You can withdraw or change your consent at any time using the cookie settings link in the footer of our website.
Stripe may set its own cookies during payment for fraud prevention.
We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
All data is transmitted over encrypted connections. Access to booking records is restricted. Payment processing is handled entirely by Stripe.
No system is completely secure and we cannot guarantee the absolute security of data transmitted over the internet.
You have the following rights over your personal data:
To exercise any of these rights, email hello@trainsegypt.com.
We will respond within one month. Where a request is complex, we may extend this by a further two months and will tell you if we do.
Please note that we cannot delete data we are legally required to retain, and we cannot recall passenger details already transferred to the rail operator to issue a ticket.
If you are unhappy with how we have handled your data, contact us first at hello@trainsegypt.com and we will do our best to put it right.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
We may update this policy from time to time. When we do, we will update the date at the top of this page.
Where a change materially affects how we use data you have already given us, we will tell you.
Traverse Group Ltd, trading as Trains Egypt
Withington Works, 30 Burton Road, Withington, Manchester, M20 3EB
Company number 17119723