Privacy Policy
Last updated: May 2026Photography Group Trips ("we," "us," or "our") operates the website photographygrouptrips.com. This Privacy Policy explains what personal information we collect, how we use it, and what rights you have in relation to it. By using our website or making a booking, you agree to the practices described in this policy.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Ever.
1. Information We Collect
We collect information in two ways — directly from you, and automatically when you use our website.
Information you provide directly:
- Full name and contact details (email address, phone number)
- Billing address and payment information (processed securely through Stripe — we never see or store full card numbers)
- Photography portfolio links or URLs you choose to share during the application process
- Any information you include in emails or messages sent to us
- Dietary requirements, accessibility needs, or health information you voluntarily disclose in connection with a booking
Information collected automatically:
- IP address and approximate geographic location
- Browser type and version
- Pages visited and time spent on each page
- Referring website or search terms
- Device type and operating system
Automatically collected data is gathered through cookies and standard web analytics tools. See Section 8 for our cookie policy.
2. How We Use Your Information
We use the information we collect only for purposes directly related to operating our business and serving you:
- To process your deposit and confirm your booking
- To communicate with you about your reservation, balance payments, and pre-departure logistics
- To send you pre-departure briefing materials, packing lists, and expedition updates
- To share necessary details with our local ground operators in Egypt for logistical coordination
- To respond to your questions, requests, and applications
- To improve our website and understand how visitors interact with it
- To comply with applicable legal and financial record-keeping obligations
We do not use your information for automated decision-making or profiling, and we do not use it to send unsolicited marketing emails unless you have explicitly opted in.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, we process your personal data on the following legal bases:
- Contract performance — processing necessary to fulfil your booking and deliver the expedition services
- Legal obligation — processing required to comply with applicable laws, including tax and accounting regulations
- Legitimate interests — processing for website analytics and improving our services, where this does not override your rights
- Consent — where you have explicitly opted in, such as for marketing communications
4. Payment Processing
All payment transactions are processed through Stripe, a PCI-DSS compliant payment processor. When you enter your payment details on our checkout page, that information is transmitted directly to Stripe over an encrypted connection. We do not receive, see, or store your full credit card number, CVV, or other sensitive payment credentials on our servers.
Stripe's privacy policy is available at stripe.com/privacy. Our checkout is also powered by WooCommerce — their privacy policy is at automattic.com/privacy.
5. Sharing Your Information
We share your personal information only in the following limited circumstances:
- Ground operators — our local partners in Egypt receive your name and relevant booking details for logistical coordination. They are contractually required to handle your data securely and not use it for any other purpose.
- Payment processors — Stripe and WooCommerce receive the information necessary to process your payment.
- Service providers — we use a small number of trusted third-party tools to operate our website (hosting, analytics). These providers access only the data necessary to perform their function.
- Legal requirements — we may disclose your information if required to do so by law, court order, or government authority.
We never sell, rent, or trade your personal information to any third party for marketing or commercial purposes.
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy. Specifically:
| Data Type | Retention Period |
|---|---|
| Booking and payment records | 7 years minimum (legal and accounting requirement) |
| Pre-booking inquiries and applications | 2 years from last contact |
| Email correspondence | 3 years from last contact |
| Website analytics data | 26 months (Google Analytics default) |
| Marketing opt-in records | Until you unsubscribe or withdraw consent |
After the applicable retention period, your data is securely deleted or anonymized.
7. Your Rights
Depending on where you are located, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Deletion — request that we delete your personal information, subject to legal retention requirements
- Portability — request your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Restriction — request that we restrict processing of your data in certain circumstances
- Withdraw consent — withdraw any consent you have previously given at any time
To exercise any of these rights, email us at info@photographygrouptrips.com. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are in the EEA and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.
8. Cookies
Our website uses cookies — small text files stored on your device — to help us understand how visitors use the site and to keep it functioning correctly. We use the following types:
- Essential cookies — required for the website and checkout to function. Cannot be disabled.
- Analytics cookies — help us understand how visitors interact with the site (e.g. Google Analytics). These are anonymized and do not identify you personally.
- Functional cookies — remember your preferences such as items in your cart.
You can control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the site or make a booking. Note that disabling essential cookies may prevent checkout from functioning correctly.
9. Data Security
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses SSL/TLS encryption for all data transmission. Payment processing is handled entirely by Stripe, which maintains PCI-DSS Level 1 compliance — the highest level of payment security certification.
No method of internet transmission or electronic storage is completely secure. While we take these protections seriously, we cannot guarantee absolute security and are not liable for unauthorized access that is outside our reasonable control.
10. International Transfers
Photography Group Trips is based in California, United States. If you are located outside the US, your personal information will be transferred to and processed in the US. We also share limited information with our ground operators in Egypt for logistical purposes.
If you are in the EEA, these transfers are made on the basis of Standard Contractual Clauses or other appropriate safeguards as required by GDPR. By booking with us, you acknowledge and consent to this transfer.
11. Children's Privacy
Our expeditions are open only to participants aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@photographygrouptrips.com and we will delete it promptly.
12. Third Party Links
Our website may contain links to third-party websites including Instagram, Stripe, and others. We have no control over and assume no responsibility for the privacy practices of any third-party sites. We encourage you to review the privacy policy of every external site you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "last updated" date. For material changes that affect existing customers, we will also notify you by email. We encourage you to review this policy periodically.
14. Contact & Data Controller
Photography Group Trips is the data controller for personal information collected through this website. If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
- Email: info@photographygrouptrips.com
- Location: Joshua Tree, California, United States
We aim to respond to all privacy-related inquiries within 30 days.