Travel Friend Logo
Travel Friend
Legal & Trust Center • Travel Friend

Privacy Policy & Data Protection

At Travel Friend, your peace of mind starts long before you board your flight. Explore how we protect your personal information, travel documents, and digital privacy with industry-leading security standards.

Effective Date: November 2, 2026
GDPR & Egyptian Law 151 Compliant
TLS 1.3 End-to-End Encrypted
01

Zero Data Selling

We never sell, rent, or trade your personal contact details or travel history to third-party advertisers.

02

Minimal Data Sharing

We only share required booking manifests with the specific hotels, airlines, or tour operators fulfilling your trip.

03

Document Auto-Purge

Scanned passport or ID copies required for local travel permits are automatically purged 90 days post-trip.

04

24/7 Human Support

Exercise your data access or deletion rights anytime by messaging our privacy team directly on WhatsApp.

Section 01•Reviewed November 2026

Introduction & Global Scope

Key Summary

Travel Friend operates as a premier travel companion and booking facilitator. This Privacy Policy governs how we collect, process, store, and protect your personal information across our web platform, mobile communications, and partner networks.

Welcome to Travel Friend ('we', 'our', or 'us'). We recognize that planning and booking travel involves entrusting us with sensitive personal, identity, and itinerary details. Protecting your privacy is not merely a legal compliance requirement for us—it is a core pillar of the trust we build with every traveler.

This comprehensive Privacy Policy applies to all visitors, registered users, and corporate clients who access our website, interact with our customer support agents via WhatsApp or telephone, or book guided tours, accommodation, transportation, and travel packages through our platform.

By accessing our platform or submitting your personal data to our travel specialists, you acknowledge that you have read and understood the practices described in this policy. We regularly update our privacy framework to align with international data protection standards, including the EU General Data Protection Regulation (GDPR), the Egyptian Personal Data Protection Law (Law No. 151 of 2020), and the California Consumer Privacy Act (CCPA).

Core Principle

Transparency Guarantee

We never sell your personal contact lists or passport details to unauthorized third-party data brokers under any circumstances.

Section 02•Reviewed November 2026

Information We Collect

Key Summary

To execute seamless travel arrangements, we collect information directly from you, automatically through your device, and from authorized travel partners.

The nature of travel coordination requires accurate identification and communication records. Depending on the specific services you request—such as domestic excursions, international flight reservations, hotel check-ins, or VIP airport transfers—we collect distinct categories of information.

When you initiate a conversation with us via WhatsApp (+20 121 496 8169) or submit an inquiry on our website, our systems log your communication metadata to ensure continuity of service and rapid response times from our travel consultants.

✓

Identity & Official Documentation Data

Full legal name (as shown on passport or national ID), date of birth, nationality, gender, passport number, passport issue and expiration dates, and visa documentation required by aviation and hospitality authorities.

✓

Contact & Communication Details

Primary email address, WhatsApp phone number, emergency contact person details, billing address, and records of correspondence with our support team.

✓

Itinerary & Travel Preferences

Flight numbers, arrival and departure timestamps, hotel room preferences, dietary requirements, accessibility or mobility assistance needs, and bespoke excursion interests.

✓

Financial & Transaction Records

Payment confirmation tokens, bank transfer receipts, billing summaries, and currency preferences. Note: Full credit card numbers and CVV codes are processed exclusively via PCI-DSS Level 1 certified payment gateways.

✓

Technical & Device Telemetry

IP address, browser type and version, operating system, referral URLs, time zone settings, page interaction metrics, and performance logs collected via Next.js edge telemetry.

Section 03•Reviewed November 2026

How We Use Your Information

Key Summary

Every piece of data we process is tied to a specific, lawful purpose aimed at delivering safe, reliable, and personalized travel experiences.

We process your personal information strictly where we have a valid legal basis to do so. In the vast majority of cases, our processing is necessary for the performance of a contract with you (fulfilling your travel booking) or taking steps at your request prior to entering into a contract (providing quotes and custom itineraries).

Furthermore, we use aggregated, non-identifiable analytics to optimize our website speed, video streaming performance, and destination guides so that future travelers enjoy a smooth browsing experience.

✓

Reservation & Voucher Issuance

Transmitting required passenger manifests to airlines, resorts, cruise operators, desert safari guides, and local transport fleets to lock in your reservations.

✓

Real-Time Travel Updates & Concierge Support

Sending instant WhatsApp alerts regarding pickup times, gate changes, weather advisories, tour guide contact cards, and emergency itinerary adjustments.

✓

Regulatory & Customs Compliance

Fulfilling mandatory reporting obligations to tourism ministries, port authorities, border security agencies, and tax departments.

✓

Security & Fraud Prevention

Verifying identity during high-value bookings, preventing unauthorized account access, and protecting our platform against automated cyber threats.

Section 04•Reviewed November 2026

Information Sharing & Third-Party Disclosures

Key Summary

Travel cannot happen in isolation. We share only the minimum required data with vetted suppliers who directly fulfill segments of your journey.

When you book a tour or travel package with Travel Friend, we act as an intermediary between you and the physical service providers (such as hotels, diving centers, yacht charters, and licensed tour operators). We only transmit the specific data fields required by those suppliers to honor your booking.

All third-party service providers and technology vendors working with Travel Friend are bound by strict Data Processing Agreements (DPAs) that prohibit them from using your personal information for their own independent marketing purposes.

Encrypted Channel

WhatsApp & Meta Communications

When you choose to communicate with us via WhatsApp (+20 121 496 8169), your messages are protected by end-to-end encryption in transit and governed alongside Meta Platforms' privacy infrastructure.

Section 05•Reviewed November 2026

Cookies & Tracking Technologies

Key Summary

We use lightweight cookies and local storage to keep our website fast, remember your language and currency choices, and understand traffic patterns.

Cookies are small text files placed on your computer or mobile device when you visit a website. At Travel Friend, we prioritize a clean, high-performance web architecture and avoid intrusive cross-site tracking scripts.

You can customize your cookie preferences at any time using the interactive Cookie Control Panel located below on this page, or by adjusting your browser settings to block or delete cookies.

✓

Strictly Necessary Cookies (Always Active)

Required for core site functionality, security routing, load balancing, and saving your privacy consent preferences.

✓

Functional & Preference Cookies

Remember your preferred departure city, currency display, and recently viewed travel packages so you do not have to re-enter them.

✓

Performance & Analytics Cookies

Help us measure page load speeds, video playback smoothness, and popular destination pages using anonymized telemetry.

Section 06•Reviewed November 2026

Data Security & Encryption Architecture

Key Summary

We deploy enterprise-grade encryption, strict access controls, and continuous infrastructure monitoring to defend your personal data.

We implement robust technical and organizational security measures designed to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure. All data transmitted between your web browser and our Next.js servers is encrypted using Transport Layer Security (TLS 1.3).

Internally, access to customer booking files and passport details is restricted on a strict 'Zero-Trust, Need-to-Know' basis. Only authorized reservation specialists assigned to your itinerary can view your travel documents, and all access events are logged and audited.

In the unlikely event of a data security incident that poses a risk to your rights and freedoms, we have established an Incident Response Protocol to notify affected travelers and relevant data protection authorities within 72 hours.

Section 07•Reviewed November 2026

Your Data Protection Rights

Key Summary

You own your personal data. Regardless of your nationality or residence, we grant all Travel Friend clients comprehensive rights over their information.

Under applicable privacy legislation (including GDPR, Egyptian Data Protection Law, and CCPA), you have specific legal rights regarding the personal information we hold about you. We do not charge any fee to exercise your standard privacy rights, and we aim to respond to all verified requests within 14 business days.

✓

Right of Access & Data Portability

You have the right to request a complete, machine-readable copy of the personal data and booking history we hold about you.

✓

Right to Rectification

If your passport number is renewed, your name is misspelled, or your contact number changes, you can request immediate correction.

✓

Right to Erasure ('Right to be Forgotten')

You may request the permanent deletion of your personal data once your trip is completed, subject to mandatory tax and legal retention periods.

✓

Right to Restrict or Object to Processing

You can ask us to suspend the processing of your data or opt out of promotional travel updates at any moment.

Section 08•Reviewed November 2026

Family Bookings & Children's Privacy

Key Summary

We do not knowingly solicit data directly from minors under 18. Children's travel details are processed strictly with parental consent.

Travel Friend's website and booking services are not directed at children under the age of 18. We do not knowingly allow minors to create independent accounts or book travel services without adult supervision.

When we collect personal information regarding a minor (such as age, birth certificate, or passport details for family hotel rooms, child flight tickets, or excursion age-verification), we do so exclusively through the parent or legal guardian who initiates the booking. If you believe a minor has submitted personal data to us without parental consent, please contact us immediately so we can purge the record.

Section 09 • Governance Schedules

Data Retention & Authorized Partners Schedule

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Below is our transparent retention matrix.

Data CategorySpecific RecordsRetention PeriodLegal Basis
Active Booking & Itinerary FilesFull name, contact number, hotel & tour vouchers, pickup locations24 Months after trip completionContractual Necessity (Art. 6(1)(b) GDPR)
Passport & Visa CopiesScanned passport bio-page, national ID, visa stamps, permit numbers90 Days after trip completionLegal Obligation & Vital Interests
Financial & Accounting InvoicesBilling receipts, payment references, tax invoices, refund records5 to 7 Years (Statutory Tax Law)Statutory Legal Compliance (Art. 6(1)(c) GDPR)
WhatsApp & Support Chat LogsInquiry history, voice note transcripts, itinerary customization requests18 Months from last interactionLegitimate Business Interests
Web Telemetry & Server LogsAnonymized IP addresses, browser headers, error logs, cookie tokens30 to 180 DaysSecurity & Legitimate Interests

Authorized Service Providers & Cross-Border Safeguards

Overview of third-party categories that receive limited booking data to execute your travel itinerary.

Partner CategoryOperational RoleData SharedProtection Safeguard
Hospitality & Resort PartnersAccommodation & Check-inGuest names, arrival/departure dates, room preferencesSupplier Confidentiality Clauses
Licensed Excursion & Fleet OperatorsGround Transport, Yachts & Guided ToursPassenger manifest, nationality, pickup coordinates, phone numberTourism Authority Licensing & DPAs
Cloud & Edge Hosting (Vercel / Cloudflare)Web Application Delivery & CDN SecurityEncrypted HTTP requests, IP addresses, TLS session identifiersStandard Contractual Clauses (SCCs) & ISO 27001
Meta Platforms (WhatsApp Business)Direct Concierge CommunicationPhone number, chat messages, shared itinerary documentsEnd-to-End Encryption & Data Privacy Framework
Section 11 • Common Questions

Frequently Asked Privacy Questions

In many popular travel destinations (especially across Egypt for marine trips, domestic flights, and inter-governorate desert safaris), local Tourism Police and Maritime Port Authorities mandate passenger manifests containing passport or national ID details prior to issuing departure permits. We purge these copies 90 days after your trip concludes.

Have Questions About Your Personal Data?

Whether you want to request a copy of your travel records, update your passport details, or ask a question about our security practices, our team is ready to help immediately.