Privacy Policy

Dahab Apartment is the controller of personal data processed through this website. We operate from Dahab, South Sinai, Egypt. Privacy questions and requests can be sent to reservations@dahabapartments.com.

Contact notes: name, email, proposed arrival and departure dates, and your message.

Accounts: name, email, optional profile photo, and a hashed password. If you sign in with Google we receive the profile information Google shares for that sign-in, typically your name, email, and profile photo.

Reservation requests: stay dates, number of guests, pets (if allowed), phone number, whether that number has WhatsApp, optional notes, and any discount code you apply.

Payment proofs: a photo or PDF of a bank transfer that you upload so staff can confirm payment. We do not collect card numbers on this site.

Check-in: for each guest, name, nationality, age, email, phone, optional address, and a scan or photo of a government-issued ID card or passport. Staff may also attach a payment note or file for the remaining balance.

Reviews: rating, written review, and optional photos you submit after check-out. Published reviews appear on the apartment page after the house team approves them.

Technical data needed to run the site: session and security cookies, and your language preference. See the Cookie Notice for details.

We use this data to reply to you, create and secure your account, review and confirm stays, match bank transfers to reservations, complete legal guest registration at check-in, send transactional email about your stay, and keep house records.

The legal bases we rely on are: performing a contract (or steps before a contract) when you request or take a stay; legitimate interests in running a small guesthouse site and preventing misuse; and, where guest identification is required for hospitality records, compliance with that obligation. You may also consent to optional items such as publishing a review.

The website is served over HTTPS. Account passwords are hashed. Payment proofs and guest ID or passport files are stored on a private disk that is not publicly reachable. Those files are not given public URLs; authorised staff download them through signed-in house tools.

Marketing photos of apartments and announcements are stored separately on the public media disk. They are not mixed with ID or payment files.

House staff and administrators see the guest and booking information they need to run the stay. We do not sell personal data.

Email is sent through our mail provider when stay or enquiry messages are enabled in site settings. If you choose Google sign-in, Google processes that sign-in under its own terms.

We may disclose information if required by law or to protect guests, staff, or the house.

Account data is kept while the account remains open. Contact notes are kept so the house can follow up and for a reasonable operational record. Reservation, payment-proof, and check-in records (including ID files) are kept for the stay and for as long as we need them for house accounts, disputes, or legal record-keeping, then deleted or anonymised when they are no longer required.

You can ask us to close an account or delete data that we no longer need to keep. Some booking and identification records may have to be retained for a period required by law.

Depending on where you live, you may have the right to request access to your personal data, correction, deletion, restriction, objection, or a copy of data you provided. You may also lodge a complaint with a data-protection authority, including a supervisory authority in the EEA if GDPR applies to you.

To exercise these rights, email reservations@dahabapartments.com and tell us which account or stay the request relates to. We may need to verify your identity before we act.

We use essential cookies only: a session cookie, a security (CSRF) token, and a language-preference cookie. We do not use advertising or analytics cookies on this site today. The Cookie Notice explains each one and how to change your language or sign out.

This site is meant for adults arranging a stay. We do not knowingly create accounts for children. Guest ages collected at check-in are part of the stay record for people travelling in the group.

We will update this policy when our practices change. The date at the top is the current version. Material changes will be reflected on this page before they apply to new collection.