This Privacy Policy explains how Memphis Tours, trading under the brand Memphis Select ("Memphis Select", "we", "us" or "our"), collects, uses, stores and shares personal data when you visit memphistours.com/memphis-select, contact us, or request our private travel, executive travel, MICE, incentive or related services.
This Policy provides the information required by Articles 12 and 13 of Regulation (EU) 2016/679 (the "GDPR").
1. Controller and contact details
The controller responsible for processing your personal data is:
Memphis Tours, trading as Memphis Select
Email: select@memphistours.com
Website: memphistours.com/memphis-select
We have not appointed a Data Protection Officer, as one is not required in our circumstances. For all privacy matters, including requests for our full registered company details, please contact us at select@memphistours.com.
2. Personal data we collect
Depending on how you use our website and services, we may process:
- Identity and contact data: name, organisation, email address, telephone or WhatsApp number, preferred language and other contact details you provide.
- Enquiry and travel preference data: preferred destination, type of request (private or corporate), travel dates, number of travellers, approximate budget where you choose to provide it, and the content of your message.
- Communication data: emails, correspondence, feedback and records of our advisory interactions with you.
- Technical and usage data: IP address, browser and device information, operating system, referring page, date and time of access, pages viewed and cookie identifiers.
- Marketing and consent data: your cookie choices and records of consent given or withdrawn.
- Sensitive information you choose to share: if you voluntarily provide health, accessibility or dietary information in your message because it is relevant to your travel requirements, we process it only to respond to your request and only on the basis of your explicit consent under Article 9(2)(a) GDPR.
We do not collect payment or card details through this website.
3. Purposes and legal bases
We process personal data only where we have a valid legal basis:
- Responding to enquiries and preparing proposals — to take steps at your request before entering into a contract under Article 6(1)(b) GDPR, or in our legitimate interest in responding to business enquiries under Article 6(1)(f) GDPR.
- Arranging and providing services — to perform a contract with you under Article 6(1)(b) GDPR.
- Legal and financial compliance — to meet accounting, tax, safety or other legal obligations under Article 6(1)(c) GDPR.
- Website operation and security — to maintain availability, prevent misuse and protect our systems and legal rights under Article 6(1)(f) GDPR.
- Optional cookies and analytics — only with your consent under Article 6(1)(a) GDPR.
- Email marketing — with your consent under Article 6(1)(a) GDPR. You may unsubscribe at any time.
Where we rely on legitimate interests, those interests include responding to enquiries, operating and securing our website, preventing fraud, managing client relationships and defending legal claims. We weigh these against your rights and freedoms before processing.
4. Consultation enquiry form
If you submit a consultation request, we use your information to respond to your enquiry, prepare a proposal and take the steps you have requested.
The form collects: full name, email address, telephone or WhatsApp number, preferred destination, type of request, arrival and departure dates, number of travellers, approximate budget (optional), and your message.
Before submitting, you are asked to confirm your consent to us using these details to respond to your enquiry. You may withdraw that consent at any time by contacting select@memphistours.com.
5. Cookies and similar technologies
We use strictly necessary cookies to operate the website and remember your privacy choices. These are used without consent only where legally permitted.
Analytics, advertising, embedded-media and other optional technologies are activated only after you give valid consent. You can accept, reject or change your optional cookie choices at any time using the cookie controls provided on our website or through your browser settings, and you may contact us at select@memphistours.com with any questions about cookies. Withdrawing consent does not affect processing carried out before withdrawal.
6. Recipients of personal data
We disclose personal data only where necessary for the purposes described above. Recipients may include:
- authorised Memphis Tours employees handling your enquiry or booking;
- service providers supporting our website, email, communications, IT and security;
- hotels, airlines, cruise operators, transport providers, guides, destination-management partners, venues and other suppliers needed to fulfil your request;
- professional advisers, insurers, auditors and legal representatives; and
- public authorities, courts or regulators where disclosure is legally required.
Providers acting on our behalf are contractually required to process personal data only on our documented instructions, keep it confidential and apply appropriate security measures.
7. International data transfers
Memphis Select is operated from Egypt, and your personal data will therefore be processed in Egypt. Egypt is not currently covered by a European Commission adequacy decision. Personal data may also be transferred to other countries where the travel or event services you request are delivered.
Where transfers of personal data outside the European Economic Area are subject to Chapter V of the GDPR, we work to ensure that appropriate safeguards are in place in accordance with the GDPR. You may request further information about the safeguards applicable to your personal data by contacting us at select@memphistours.com.
8. Data retention
We retain personal data only for as long as necessary for the purpose for which it was collected, and to meet our legal obligations.
In determining how long to keep data, we consider the nature of the information, the purpose for which it was provided, whether the enquiry led to a booking, our ongoing relationship with you, and any applicable legal, accounting or reporting requirements.
Data may be kept longer where necessary to establish, exercise or defend legal claims, to comply with law, or to preserve evidence relating to a dispute or security incident. Once no longer needed, personal data is deleted or irreversibly anonymised. You may request information about the retention period applying to your personal data by contacting select@memphistours.com.
9. Whether you must provide personal data
You are not generally required by law to provide personal data. However, information marked as required is necessary for us to respond to your enquiry, prepare an accurate proposal or provide the services you request. If you do not provide it, we may be unable to assist you.
10. Automated decision-making and profiling
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
11. Your data protection rights
Subject to the conditions and limitations of the GDPR, you have the right to:
- request access to your personal data and obtain a copy;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- receive the personal data you provided in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller;
- object to processing based on legitimate interests, including related profiling;
- object at any time to processing for direct marketing; and
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact select@memphistours.com. We may ask for reasonable information to verify your identity. We will normally respond within one month, subject to any lawful extension.
12. Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU or EEA country of your habitual residence, place of work, or the place of the alleged infringement. Contact details for EU and EEA supervisory authorities are available through the European Data Protection Board.
We would welcome the opportunity to address your concerns directly first, but this does not limit your right to complain to an authority.
13. Security
We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to enquiry data is limited to employees who need it to handle your request. These measures are reviewed in light of the nature of the data, the risks involved and available technology. No method of internet transmission or storage can be guaranteed to be completely secure.
14. Information relating to children
Our website is not directed at children, and we do not knowingly collect personal data from children. Where travel services are requested for a minor, information about that minor should be provided by a parent, legal guardian or authorised adult, and only to the extent necessary to arrange the service.
15. Third-party websites
Our website may contain links to websites or services operated by third parties. Their processing is governed by their own privacy notices, and we encourage you to review those before providing personal data.
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology or legal obligations. The current version will always be published on this page with a revised "Last updated" date, and changes take effect on the day they are posted. Where changes are material, we will provide a prominent notice on the website.
17. Contact us
For any questions about this Privacy Policy or how we handle personal data:
Memphis Select — Memphis Tours
Email: select@memphistours.com
Website: memphistours.com/memphis-select
