Privacy Notice

This notice explains what personal data Masr Phrase Academy L.L.C. holds about you, why we hold it, how we use it, and what rights you have regarding it. We are committed to handling your information transparently and only for the purposes described here. This notice applies to everyone who visits our website at pass-musee.xyz, submits an enquiry through our contact form, or enrols in one of our courses.

We operate under Egyptian Data Protection Law No. 151 of 2020 (the Egyptian DPL) as our primary applicable law, and we additionally follow the principles of the EU General Data Protection Regulation (GDPR) for visitors who are residents of the European Economic Area. Where these frameworks require different or additional steps, we follow whichever standard is more protective of you.

The data controller for all personal information collected through this website and our course services is:

If you have any question or concern about how your data is handled, you can write to the address above or send an email with the subject line "Privacy enquiry." We will acknowledge your message within five working days and respond fully within 30 days.

We collect only the information that is directly relevant to providing our language-learning services and responding to your enquiries. Specifically:

Contact form submissions: When you fill in the enquiry form on the Contact page, we collect your full name, email address, and the content of your message. You may also provide your travel dates and a description of your current Arabic level — this information is voluntary and helps us give a more useful recommendation. If you select a course of interest from the dropdown, that selection is also recorded.

Course enrolment: When you enrol in the Travel Crash Course or Private Tutoring, we additionally collect the information needed to schedule and deliver sessions: your preferred session times, the timezone you're joining from, payment confirmation reference, and any language background notes you provide to help the tutor prepare.

Website use: Our website does not use analytics scripts, advertising pixels, or any third-party tracking code. We do not record your IP address, browser fingerprint, or browsing path beyond what is stored automatically in server access logs for a period of seven days for security purposes.

Cookies: We use only essential technical cookies necessary for the website to function. No persistent advertising or profiling cookies are set. You can see the current cookie inventory in Section 9 of this notice.

We rely on the following legal grounds to process your personal information:

Your consent — When you submit the contact form and tick the consent checkbox, you give us explicit permission to use your name, email and message content to respond to your enquiry and recommend a suitable course. You can withdraw this consent at any time by emailing [email protected]. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

Performance of a contract — When you purchase a course, we process your data to the extent necessary to deliver the sessions you have paid for, including scheduling, tutor briefing and issuing a receipt.

Legitimate interest — We retain a minimal record of completed enquiries and course enrolments to maintain accurate internal records and to be able to respond to follow-up questions from the same person. We have assessed this interest against your right to privacy and concluded that it does not override that right, given the limited scope of the data and the fact that it is never shared with third parties for commercial purposes.

Your data is used exclusively for the following purposes:

• Responding to your enquiry with a course recommendation, available session times, and relevant information about our services.
• Scheduling and delivering language sessions you have enrolled in.
• Sending a booking confirmation and receipt when a paid course is purchased.
• Following up on an open enquiry if we have not heard back from you within a reasonable period.
• Maintaining internal records of completed courses for administrative and tax purposes.

We do not use your data to send unsolicited marketing emails, to pass your contact details to other organisations, or to build any kind of automated profile of your interests. If at any point you receive an email from us that you did not expect, please write to us immediately so we can investigate.

Access to your personal data is restricted to staff at Masr Phrase Academy who need it to carry out the activities described in Section 4. This means the team members who handle enquiries and the tutors assigned to your sessions. Tutors receive only the information directly relevant to teaching you: your name, level notes, and session schedule. They do not have access to your email address, payment details, or message history.

We do not sell, rent, or lend personal data to any third party. We do not share it with advertising networks, data brokers, or other educational providers.

Our website is hosted on servers operated by a third-party hosting provider. That provider processes connection data (server logs) as a data processor on our behalf, bound by a data processing agreement. They do not have access to the content of form submissions, which are transmitted to and stored in our own internal systems only.

We retain personal data for the shortest period necessary for the purpose for which it was collected:

Enquiries that did not result in a course enrolment — your contact form submission, including name, email and message, is kept for 21 months from the date of submission. This period reflects the typical lead time between an initial enquiry and a traveller's next Egypt visit. After 21 months, the record is permanently deleted.

Course enrolment records — records relating to a completed course are retained for five years after the final session, in line with our obligations under Egyptian commercial and tax law. After five years, they are deleted.

Server access logs — automatically generated logs are deleted after seven days on a rolling basis.

You can request early deletion at any time under the rights described in Section 8.

Masr Phrase Academy is based in Egypt. If you are contacting us from a country within the European Economic Area, your data will be transferred to Egypt for processing. Egypt is not currently the subject of an EU adequacy decision under GDPR Article 45. Where such transfers occur, we rely on the provisions of Egyptian Data Protection Law No. 151/2020, which establishes cross-border transfer obligations broadly consistent with international standards, and we implement contractual safeguards with any service providers involved in storing or transmitting data.

If you would like information about the specific safeguards in place for a transfer of your data, please contact us at [email protected].

Under the Egyptian Data Protection Law and, where applicable, the GDPR, you have the following rights:

Right of access — You can ask us at any time to confirm whether we hold personal data about you, and if so to provide a copy. We will respond within 30 days.

Right to rectification — If any information we hold about you is inaccurate or incomplete, you can ask us to correct it. Corrections are made within 14 days.

Right to erasure — You can ask us to delete your personal data. We will do so unless we are required by law to retain it (for example, for tax records). Requests are processed within 30 days.

Right to restrict processing — You can ask us to pause our use of your data while a question about its accuracy or our use of it is being resolved.

Right to data portability — You can ask for your contact form submission and enrolment details to be provided in a structured, machine-readable format (CSV or JSON) so you can transfer them to another service if you wish.

Right to withdraw consent — Where processing is based on your consent (see Section 3), you can withdraw it at any time without affecting anything that happened before the withdrawal.

Right to object — Where we process your data on the basis of legitimate interest, you can object. We will stop processing unless we can demonstrate compelling grounds that override your interests.

To exercise any of these rights, email [email protected] with the subject line "Data rights request." We do not require you to use a specific form. If you are an EEA resident and you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority in your country of residence.

This website uses a minimal set of technical cookies. No third-party cookies are placed by this site. The cookies we use are:

• Session preference — a short-lived session cookie that remembers whether the mobile navigation menu is open during your visit. It expires when you close your browser tab and does not contain any personal identifier.
• Form state — a temporary cookie used to prevent accidental double-submission of the contact form. It is deleted immediately after the form is submitted and in any case expires within one hour.

We do not use persistent cookies, advertising cookies, or cookies that track your behaviour across multiple websites. Because the only cookies on this site are technically essential to its operation, we do not display a cookie consent banner — there is nothing optional for you to consent to or decline.

You can instruct your browser to block or delete all cookies at any time. Blocking the two essential cookies listed above may prevent the contact form from submitting correctly, but will not otherwise affect your ability to read the free phrasebook pages.

Our website and courses are intended for adults and young people aged 16 and over. The content — covering independent travel, market bargaining, restaurant ordering and taxi navigation — is designed for travellers who make their own decisions about their itinerary.

We do not knowingly collect personal data from anyone under the age of 16. If you are under 16, please ask a parent or guardian to contact us on your behalf. If we become aware that we have received personal data from someone under 16 without verifiable parental consent, we will delete that data promptly.

If you believe that a person under 16 has submitted a form on this website, please contact us at [email protected] so we can investigate and remove the record.

We take reasonable and proportionate technical and organisational steps to protect personal data against accidental loss, unauthorised access, and unlawful processing. These include encrypted transmission of data submitted through our contact form, access controls limiting who within our team can view stored enquiries, and regular review of our data handling practices.

No method of internet transmission or digital storage is completely secure. We cannot guarantee absolute security, but we maintain industry-standard practices appropriate to the nature and volume of data we hold. If we become aware of a security incident affecting your personal data, we will notify you and, where required by law, the relevant supervisory authority, within the timeframes specified by applicable law.

Our website does not contain links to external websites. If we add such links in the future, this section will be updated. Any external site you navigate to from a link we add will have its own privacy practices, which we do not control and for which we are not responsible.

We may update this Privacy Notice from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change, we will update the "Last reviewed" date at the top of this page. We will not reduce your rights under this notice without providing clear advance notice.

We recommend checking this page periodically. Continued use of our website and services after a change is posted constitutes your acknowledgement of the updated notice.

If you have any question about this notice or about how your personal data is handled, write to us at [email protected] or see the contact page for additional ways to reach us.