Privacy Policy

1. Who we are

askdahab.com is operated by Ask Dahab is a trading name of NEXAGENTS LTD, a private limited company registered in England and Wales, company number 16823472, registered office ⁨128 City Road, London, United Kingdom, EC1V 2NX⁩. We are the controller of the personal data described in this policy.

You can contact us about privacy at support@askdahab.com.

2. Data we collect

We only collect what we need to run the service:

• Bookings: your name, email address, WhatsApp number (if you give it), the experience, date and number of people, your notes, and the language you booked in.
• Payments: card payments are handled by Stripe. We receive confirmation of payment, the amount and a transaction reference — never your full card details. If you didn't give us an email address, we use the one you gave on Stripe's payment page.
• Reviews: your rating and text, shown with your first name, the initial of your last name and the month of your trip.
• Enquiries and messages: what you send us through our enquiry forms, by email or on WhatsApp.
• Provider and business accounts: business name, contact name, email address, WhatsApp number, password (stored only in a protected, scrambled form), profile text, photos, offers, and the bookings and payments linked to the account.
• Technical data: your IP address and browser type, used to keep the site secure and to prevent abuse.

3. How we use your data

• to confirm and manage your booking, take payment and handle refunds;
• to pass the details needed for your trip to your provider;
• to send you service emails — your confirmation, your provider's details, refunds, and a review request after your trip;
• to answer your questions and handle complaints and disputes;
• to run provider and business accounts and pay providers;
• to keep the site secure and prevent fraud and abuse.

Our legal bases are: performing our contract with you (bookings, accounts), our legitimate interests (security, fraud prevention, asking for a review after your trip, improving the service) and our legal obligations (for example, keeping accounting records). We do not send marketing emails.

4. Who we share it with

We do not sell your personal data. We share it only as far as needed:

• Your provider: your first name, your WhatsApp number (if you gave it), the booking details and your notes, so they can contact you about your trip — not your email address or card details.
• Stripe, which processes card payments.
• Zoho, our email provider, which sends our emails and holds our mailbox.
• Our hosting provider, which runs our servers and database.
• Google, when a page shows an embedded Google map: Google receives your IP address when the map loads.

We may also disclose data when required by law, to protect our rights, or as part of a sale or reorganisation of our business.

5. Cookies

We use only cookies and similar storage that the site needs to work: a cookie that remembers your language (30 days), sign-in cookies for provider, business and staff accounts, and storage in your browser that remembers the provider you chose while the page is open.

We do not use analytics or advertising cookies. Stripe's payment page and embedded Google maps may set their own cookies, under their own policies. You can block or delete cookies in your browser; sign-in won't work without them.

6. International transfers

Your booking details are shared with your provider in Egypt so they can run your trip. Our service providers may also process data outside the United Kingdom, for example in the United States. Where the law requires it, we rely on recognised safeguards, such as adequacy decisions or standard contractual clauses.

7. How long we keep your data

• Bookings and payments: up to 6 years after the booking, as required for accounting and tax.
• Reviews: while they are published, unless you ask us to remove them.
• Enquiries and messages: up to 2 years after our last contact with you.
• Provider and business accounts: while the account exists. Closed job posts are deleted after one year.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• ask us to delete your data;
• restrict or object to how we use your data;
• receive your data in a portable format.

To use any of these rights, email support@askdahab.com. We reply within one month. If you are not happy with our answer, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in your country.

9. Security

We protect your data with encrypted connections (HTTPS), protected passwords, one-time links for sensitive actions, access controls on our systems, and card payments handled by Stripe. No system is completely secure, but we work to protect your data and will act quickly if a problem occurs.

10. Children

Bookings must be made by an adult. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes and contact

We may update this policy from time to time; the date at the top shows when it last changed. Our booking rules are in our Booking Terms & Cancellation Policy.

For any question about this policy or your data, email support@askdahab.com or write to NEXAGENTS LTD, ⁨128 City Road, London, United Kingdom, EC1V 2NX⁩.