プライバシーに関するお知らせ
ご予約時にJoy TKTが収集する情報、共有先、保管期間についてご説明します。
This notice explains what personal data Joy TKT collects when you use joytkt.com, why, who we share it with, how long we keep it, and the rights you have. It applies to travellers, visitors, account holders and newsletter readers. Operators and creators who work with us are also covered by their own partner terms.
1. Who is responsible for your data
Joy TKT LLC, a company registered in the Arab Republic of Egypt under company number 52107, with its registered address at Sheraton Street, Hurghada, Red Sea Governorate, Egypt ("Joy TKT", "we", "us"), decides how and why your personal data is used on this site, and is responsible for it.
The operator who runs the tour, activity or transfer you book receives the details it needs to carry out your booking, and is responsible for how it uses them itself.
For anything about your personal data, write to [email protected] or message us on WhatsApp at +44 7871 581960. We do not have a designated data protection officer; this contact reaches the people who handle data requests.
2. What we collect
When you book
- The lead traveller's name, email address, phone or WhatsApp number and nationality.
- The number and age bands of the people travelling, the date and time chosen, and any requests you write.
- Where you want to be picked up: the hotel or address you type or choose, and, if you pick it from the map search, its location on the map. For transfers, your flight numbers, airline and luggage.
- Payment details: the amount, currency, payment method and the reference the payment provider gives us. Card payments are handled by the payment provider on its own page. We never see or keep your full card number.
When you have an account
- Your name, email address, password (stored only in scrambled form), phone, nationality and preferred language.
- If you sign in with Google or Facebook: your name, your email address and the identifier that provider gives your account. We never post anything on your behalf.
- Your bookings, your Joy Wallet (points, credit and their history) and any gift cards you add.
When you write to us or to an operator
- Messages between you, the operator and our support team, including translations of them into the other person's language.
- Support requests, complaints and the answers to them.
- Reviews you write, with the name and country you choose to show.
When you visit the site
- Technical data: your IP address, browser and device type, the pages you open, and the country your connection comes from.
- Where your visit came from, such as an advertisement, a search engine or a creator's link (see section 7).
- If analytics and advertising tools are active, how you use the site: clicks, scrolling and, through Microsoft Clarity, recordings of how pages are used. Text you type into forms is masked in these recordings.
3. Why we use it, and on what legal basis
| What we do | Legal basis |
|---|---|
| Take your booking and payment, send your voucher, pass your details to the operator, handle changes, cancellations and refunds | To perform our contract with you |
| Run your account, your Joy Wallet and your gift cards | To perform our contract with you |
| Carry messages between you and the operator and translate them | To perform our contract with you |
| Answer support requests and complaints | To perform our contract with you, and our legitimate interest in resolving problems |
| Keep booking and payment records | Our legal obligations, including tax and accounting law |
| Prevent fraud and misuse, keep the site secure | Our legitimate interest in protecting travellers, operators and Joy TKT |
| Remind you once about a booking you started and did not finish | Our legitimate interest in helping you complete a booking you began; every reminder lets you opt out |
| Send newsletters and offers | Your consent, which you can withdraw at any time |
| Measure how the site is used and how our advertising performs | Your consent where the law requires it, otherwise our legitimate interest in improving the site |
| Publish reviews | Our legitimate interest in giving travellers honest information |
4. Who we share it with
- The operator of your booking, who needs your name, phone, pickup place, party and requests to run the trip. Some operators receive bookings through their own booking system, such as Bókun.
- Payment providers: Kashier (Egypt) and PayPal, which process your payment on their own pages.
- Hosting and security: Interserver, Inc. (our server, in New York, United States) and Cloudflare (network security and delivery).
- Email: Brevo, which sends our emails, including vouchers and reminders.
- Translation: Anthropic, whose AI translates the messages between you and the operator.
- Maps: Google Maps and Places, which power the hotel search and the reviews from Google shown on some pages.
- Sign-in: Google and Facebook, if you choose to sign in with them.
- Analytics and advertising: Google (Tag Manager, Analytics and Ads), Meta (the Meta Pixel and the Conversions API) and Microsoft (Clarity). When you book, we may tell Google and Meta that a purchase took place, with its value. Meta may receive your email address and phone number in scrambled (hashed) form so it can match the purchase to an advertisement you saw.
- WhatsApp (Meta), if you contact us there.
- Authorities and advisers, where the law requires it, to establish or defend a legal claim, or to protect someone's safety.
We do not sell your personal data.
5. International transfers
Joy TKT is in Egypt, our server is in the United States, and several of the providers above are based in the United States or the European Union. Your data may therefore be handled in countries other than your own. Where the law of your country requires it, we rely on the safeguards these providers offer for international transfers, such as the European Commission's standard contractual clauses.
6. How long we keep it
- Booking, payment and invoicing records: 5 years, as tax and accounting law requires.
- Messages between you, the operator and our support team: 24 months after the trip.
- Your account: until you delete it. When you do, your name, contact details and what you wrote are removed; the booking and payment records stay, without your name, for as long as tax law requires.
- The record of where your visit came from: 90 days.
- Data held by analytics and advertising tools: for the period set in each tool.
- Newsletter subscription: until you unsubscribe.
7. Cookies and similar technologies
Some cookies are needed for the site to work: they keep you signed in, keep your booking in progress, protect forms from misuse and remember your language and currency.
We also use a cookie that remembers, for 90 days, where your visit came from (an advertisement, a search engine, or a creator's link), so that the right creator is credited and we can see which of our advertising works.
Analytics and advertising cookies are set by Google, Meta and Microsoft (listed in section 4). They are not needed to book, and you choose whether we use them: a bar at the foot of the page offers Accept and Reject, side by side.
If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, they are not used until you press Accept. Until then Google's tags set no cookies and send only basic signals without them (for example, that a page was viewed), and the Meta Pixel and Microsoft Clarity do not load. Elsewhere they run unless you press Reject, which stops them.
We keep your answer for six months in a cookie of our own. If you refused, or never accepted where we ask first, we do not tell Google or Meta about your booking from our server either. You can change your answer at any time with "Cookie choices" at the foot of every page, and you can also block these cookies in your browser's settings; the site keeps working.
8. Your rights
Depending on where you live, you have the right to:
- know what personal data we hold about you and receive a copy of it;
- have it corrected if it is wrong;
- have it deleted, unless we must keep it by law;
- restrict or object to how we use it, including for direct marketing;
- receive it in a portable format;
- withdraw your consent at any time, without affecting what was done before.
If you have an account, you can do much of this yourself: My details lets you correct your details, download everything we hold about you as one file, and delete your account. For anything else, write to [email protected]. We answer within 30 days. We may ask you to confirm your identity first.
If you are not satisfied with our answer, you can complain to the data protection authority: in Egypt, the Personal Data Protection Center under Law No. 151 of 2020, or, if you live in the European Union or the United Kingdom, the data protection authority in your country.
9. Children
Joy TKT is not intended for children to use on their own. Bookings that include children are made by an adult, who gives us only the age band of each child, not their name.
10. Security
The site uses encrypted connections, passwords are stored only in scrambled form, secrets such as payment keys are encrypted, and access to personal data inside Joy TKT is limited to the people who need it for their work. No system is completely secure; if a breach affecting your data happens, we will tell you and the authorities where the law requires it.
11. Changes to this notice
We will update this notice when what we do with personal data changes. The date of the latest version is shown on this page.
12. Contact
Joy TKT LLC, Sheraton Street, Hurghada, Red Sea Governorate, Egypt, company number 52107. Email [email protected] or WhatsApp +44 7871 581960, 24 hours a day, 7 days a week.