Privacy policy
This is a translation. The Arabic version of this document is the authoritative text and governs its interpretation. This English version is provided for convenience only. If the two differ, the Arabic prevails. Read the Arabic version.
Who we are
"Hive Stewards" is the trading name of [Egyptian company name], registered in the commercial register under number [...] and tax card number [...], with its address at [address]. We are the controller of the personal data described in this policy for properties and clients in Egypt.
Our processing of your data is governed by Personal Data Protection Law No. 151 of 2020 and its executive regulations.
For anything about your data, email dpo@hivestewards.com.
What we collect
If you contact us
- Your name and email, and your phone number if you give it to us
- The area or address of your property, and any listing link you share
- Anything you send us on WhatsApp, if you use the message button
The WhatsApp button on our site is an ordinary link: it opens the app on your device and stores nothing with us. What you send afterwards is held in your account and ours, and is subject to Meta’s terms as well as this policy.
When you send the enquiry form your details reach us by email. They are not stored in a database.
If you become a client
- Contact and billing details, and bank account details so we can pay you what you are owed
- Property details, entry codes, the holiday-home licence, and safety and insurance documents
- Booking and earnings records for the properties we manage
- Guest names and contact details as they come through the booking platforms
Guest details reach us from the booking platform rather than from the guest directly, and we use them to run the stay itself: arranging entry, answering questions, coordinating the changeover, issuing compound entry permits, and passing guest details to the owner as licence holder so they can file them with the authorities on time; requesting a review through the platform after checkout; and keeping the records the law requires. We send guests our Guest privacy notice with the first message we send them.
Why we use it, and our legal basis
- To answer enquiries and prepare quotes, at your request and as steps before a contract.
- To provide the management service, in performance of our contract with you.
- To meet legal obligations: tax records, and the tourist accommodation licensing and guest data requirements.
- To improve the service and keep a record of what we did, for our legitimate interest in running the business, balanced against your rights.
We use your data for electronic marketing only with your express consent, which you can withdraw at any time without affecting the lawfulness of anything done before you withdrew it.
You are not obliged to give us this information, but there is some we cannot work without. If you do not give us the property address, the licence details or the entry codes, we cannot manage the property.
No automated decisions
We make no decisions about you by automated means and we do not profile you. Nightly pricing is set by software, but it concerns the price of the property rather than people.
Who we share it with
We share only what is necessary, with:
- The booking platforms you use
- Compound management or security, to issue guest entry permits
- Cleaners, trades and contractors, who are given only the details for a specific job
- Our sister company in the United Kingdom, with whom we share the same systems, so its staff can reach records held on them
- Our accountant, our insurer and our professional advisers
- The software we use to run the service, such as pricing and messaging tools
- The authorities where the law requires it of us directly, noting that routine guest reporting to the Ministry of Tourism and Antiquities falls on the owner as licence holder
We never sell personal data.
Transfers outside Egypt
We share the systems and software we run the service on with our sister company in the United Kingdom, and those systems are hosted by companies outside Egypt. This means your data, including your property details and your guests’ details, is held outside Egypt and can be reached from the United Kingdom.
That transfer happens only so far as the Personal Data Protection Law and its executive regulations permit, under the authorisations set by the Personal Data Protection Centre, and with your express consent where the law requires it. Our duty to protect your data continues exactly as if it were held in Egypt, and access is limited to those who need it to do their job.
How we keep it safe
Our hosting provider keeps standard server logs, including the IP address, the time of the visit and the page requested, for security purposes. They are deleted automatically on the provider’s usual schedule, we use them for nothing else, and we can tell you the current period on request. Access to client records is limited to those who genuinely need it, through accounts protected by strong passwords and two-step verification wherever the service offers it. Devices are encrypted and kept up to date.
If a breach affects your personal data, we notify the Personal Data Protection Centre within the period the law allows (72 hours), and then notify those affected within three working days of notifying the Centre, as the law requires.
Children’s data
Our services are aimed at property owners, and we do not collect children’s data for our own purposes. A booking may state how many children are staying, and we use that only to prepare the property. Where compound entry permits or official guest reporting require the details of everyone staying, including minors, we provide them only so far as that obligation requires, and they are subject to the retention periods set out below.
How long we keep it
- Enquiries that do not become contracts: 12 months
- Client records and correspondence: 5 years after the contract ends
- Financial records and books: 5 years, under the Unified Tax Procedures Law No. 206 of 2020
- Guest correspondence and booking records: 12 months from the checkout date, or longer while a claim or dispute is open
- Copies of guest identity documents: deleted within 30 days of checkout at the latest, and sooner once the purpose has been served
- Licensing and safety documents: for as long as we manage the property, then 5 years afterwards
Guest notice
This notice is for property owners. Guests have a separate notice setting out what we hold about them and how we use it: Guest privacy notice.
Data protection officer
We will appoint a data protection officer and register them with the Personal Data Protection Centre wherever the law requires it, and will publish their contact details on this page once registration is complete. In the meantime all data protection matters go to dpo@hivestewards.com.
Your rights
The Personal Data Protection Law gives you rights over your data, including: knowing what we hold about you, seeing it and obtaining a copy, correcting, amending or updating it, asking for it to be erased, limiting its processing to a defined scope, objecting to the processing or its results, and withdrawing your consent.
To exercise any of these, email us at dpo@hivestewards.com setting out what you would like. We answer within six working days of receiving the request, the period the law allows. We may ask you to prove who you are before acting, so that we do not hand your data to someone else.
Complaining about how we use your data
If you think we have not handled your data properly, tell us first at dpo@hivestewards.com. We acknowledge quickly, look into it, and come back to you with the outcome.
You may in any case complain to the Personal Data Protection Centre, which enforces the law in Egypt. You are not required to come to us first.
Changes to this policy
If we change how we use personal data we will update this page and the date at the top, and we will tell existing clients about any material change by email.