Privacy Policy, Trains Egypt

Last updated: March 2026

This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR. We do not sell your data. We do not share it with advertisers. We collect only what we need to process your booking.

1. Who we are

Trains Egypt is a trading name based in England and Wales. Our website is trainsegypt.com and you can contact us at hello@trainsegypt.com.

For the purposes of UK data protection law, we are the data controller for the personal information we collect through this website.

2. What data we collect

We collect the following personal data when you make a booking:

Data	Why we collect it
Full name	Required by Egypt Railways to issue your train ticket
Email address	To send your booking confirmation and ticket
Phone number	To contact you if there is an issue with your booking
Passport number	Required by Egypt Railways to issue your train ticket
Date of birth	Required by Egypt Railways to issue your train ticket
Passport expiry date	Required by Egypt Railways to issue your train ticket
Nationality	Required by Egypt Railways to issue your train ticket
Payment information	Processed securely by Stripe, we never see your card details

We do not collect any special category data (such as health information, ethnicity or religion) and we do not knowingly collect data from anyone under the age of 18 without the consent of a parent or guardian.

3. How we use your data

We use your personal data for the following purposes:

To process your booking and issue your train ticket with Egypt Railways
To send your booking confirmation and ticket by email
To contact you in the event of a problem with your booking or travel disruption
To keep a record of your transaction for legal and accounting purposes

We do not use your data for marketing, profiling or any automated decision-making that produces legal or significant effects on you.

4. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

Contract performance, processing is necessary to carry out the booking service you have requested (Article 6(1)(b))
Legal obligation, we may be required to retain certain transaction records under UK law (Article 6(1)(c))
Legitimate interests, to contact you about your booking if a problem arises (Article 6(1)(f))

5. Who we share your data with

We share the minimum necessary data with the following third parties to fulfil your booking:

Egyptian Railways, your name, passport details, date of birth and nationality are passed to the railway operator to issue your ticket. This involves transferring data outside the UK to Egypt. We rely on standard contractual clauses and the operational necessity of the transfer to make this booking possible.
Stripe, your payment is processed by Stripe, Inc. They handle all card data and are PCI DSS compliant. We never see or store your card number. Stripe's privacy policy is available at stripe.com/gb/privacy.

We do not sell, rent or share your data with any third party for marketing or advertising purposes.

6. How we protect your information

All personal data you provide is handled with care. We use appropriate technical and organisational measures to keep your information secure, including encrypted connections for all data transmission. Access to booking records is strictly limited, and we do not retain personal data for longer than necessary.

7. How long we keep your data

Data type	Retention period
Personal booking details (name, contact, travel document information)	Deleted within a reasonable period after your travel date

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

Right of access, you can request a copy of the data we hold about you
Right to rectification, you can ask us to correct inaccurate data
Right to erasure, you can ask us to delete your data, subject to legal obligations
Right to restrict processing, you can ask us to limit how we use your data
Right to data portability, you can ask for your data in a portable format
Right to object, you can object to processing based on legitimate interests

To exercise any of these rights, email us at hello@trainsegypt.com. We will respond within 30 days.

9. Cookies

Our website uses cookies to help us understand how visitors use the site and to improve your experience. This includes analytics cookies to measure site traffic and usage patterns, and advertising cookies to help us understand the performance of our marketing. A cookie consent notice is shown on your first visit.

Stripe may set its own cookies during payment processing, for fraud prevention purposes.

You can withdraw your consent at any time by clearing your browser cookies. Most browsers also allow you to block cookies through their settings.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses HTTPS encryption. Payment processing is handled entirely by Stripe, who maintain PCI DSS compliance.

No system is completely secure and we cannot guarantee the absolute security of data transmitted over the internet. We encourage you to use a secure internet connection when making a booking.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first at hello@trainsegypt.com and we will do our best to resolve the issue.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

12. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this pa