Privacy Policy | The Luxorium

We aim to collect only the information we reasonably need to operate and improve The Luxorium, respond to people who contact us, maintain accurate information about Luxor, and provide useful business information to our readers.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices and rights available to you.

1. Who we are

The Luxorium is operated by:

Data controller: Sarah Jayne Meldrum
Trading as: The Luxorium
Privacy contact: privacy@theluxorium.co

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR) and UK GDPR where applicable, Sarah Jayne Meldrum is the controller of the personal information described in this policy.

EEA representative: Sarah Jayne Meldrum
UK representative: Sarah Jayne Meldrum

2. Information we collect

The personal information we collect depends on how you interact with The Luxorium.

Website usage and analytics

If you consent to analytics, we use Google Analytics 4 (GA4) to understand how people use The Luxorium.

GA4 may collect information such as:

pages viewed and actions taken on the website;
approximate geographic location;
referring websites or sources;
browser, operating system and device information;
screen and device characteristics;
session and interaction information; and
analytics identifiers stored on or associated with your device.

We use this information to understand which information people find useful, identify problems with the website, improve navigation and user experience, and make better decisions about what content to create.

We do not intentionally send names, email addresses, form contents or other directly identifying information to Google Analytics.

Google Analytics uses IP addresses during data collection for purposes including location derivation and routing. Google states that raw IP addresses are discarded before being logged in Google Analytics.

Ask, Correct / Contributor and Contact forms

If you submit information through one of our forms, we may collect:

your name, if provided;
your email address or other contact details;
your question, correction, comment or contribution;
information you choose to provide about your experience;
supporting links, photographs, documents or other material you submit; and
information necessary for us to respond to or verify your submission.

We use this information to respond to you, review questions or investigate corrections, improve the accuracy of The Luxorium, and develop or update our content.

Submitting information to us does not automatically give us permission to publicly identify you.

Questions submitted through Ask The Luxorium may be published or adapted anonymously where we believe they may be useful to other people. Before using a question publicly, we will remove your name, contact details and other information that could reasonably identify you. We will not attribute an Ask question to you unless you separately agree. If we cannot use the question without revealing information that could reasonably identify you, we will not publish it under this basis.

Information you submit may also help us identify topics to research or explain publicly. We may publish independently developed factual information or general guidance about those topics without identifying you. For Ask questions, we may also publish or adapt the question itself anonymously under the Ask treatment described above.

For corrections, contributions and other submissions, and for any attributed use of an Ask question, we will respect the publication or attribution choice associated with the submission. Depending on the relevant form or any later agreement, this may include:

private — used to help us answer, research or verify information, but material from the submission is not used publicly;
anonymous — material from the submission may be used publicly without identifying you; or
attributed — you have agreed that specified information may be published with your name or other agreed attribution.

Where we rely on your consent to publish identifying information, you may withdraw that consent by contacting us.

We may retain factual information supplied through a correction or contribution as part of our editorial evidence and provenance records where this is necessary to maintain the accuracy and accountability of published information. Where possible, we will minimise the personal information retained for this purpose.

Business profiles

The Luxorium may publish profiles of businesses, accommodation providers, tour operators, guides, restaurants, transport providers and other organisations relevant to visitors to Luxor.

Most information about a company or organisation is not personal information. However, a business profile may contain personal information where, for example, it identifies a sole trader, owner, guide, employee or other individual.

Profile information may include:

business and trading name;
business category and location;
services, facilities and opening information;
prices or publicly advertised offers;
business telephone numbers and email addresses;
websites and social-media profiles;
names and professional roles of owners, guides or representatives;
photographs or media associated with the business;
information supplied directly by the business;
information obtained through our own research or observation; and
information available from public websites, social-media pages, directories or other public sources.

We use this information to provide useful, accurate and independently maintained information about businesses and services in Luxor.

Where personal information contained in a business profile was not obtained directly from the person concerned, we will identify the relevant source or category of source where required by applicable law.

Businesses and individuals are encouraged to tell us if information is inaccurate or has changed. Requests to correct personal information will be reviewed promptly.

Where we rely on legitimate interests to publish personal information within a business profile, individuals may also object to that processing. We will consider the circumstances and remove, restrict or amend personal information where required.

3. Our lawful bases for using personal information

Under the GDPR and UK GDPR, we must have a lawful basis for processing personal information.

We generally rely on:

Consent

Where you choose to enable analytics cookies or expressly agree to the publication of personal information, photographs, quotations or attribution.

You may withdraw consent at any time.

Legitimate interests

Where necessary to:

respond to questions, corrections and enquiries;
research and improve The Luxorium's content;
maintain editorial accuracy and evidence;
operate and secure the website;
investigate errors or misuse;
research, maintain and publish useful factual information about businesses and services in Luxor; and
select, minimise, anonymise and publish or adapt Ask The Luxorium questions where we believe they may be useful to other people, subject to the privacy, attribution and publication safeguards described in this policy.

Where we rely on legitimate interests, we consider whether those interests are outweighed by the rights and interests of the people concerned.

Legal obligations

Where we are required to retain, use or disclose information to comply with applicable law or a lawful request.

4. Google Analytics and cookies

The Luxorium uses Google Analytics 4 to measure website usage.

Analytics will only operate where permitted by the consent choices presented to you.

You can accept or reject analytics through our cookie controls and can change your choice later through Cookie Settings on the website.

Google Analytics is provided by Google. Information processed through GA4 may be processed by Google and its service providers in countries outside your own.

Our GA4 property retains user-level and event-level analytics information for 14 months, subject to Google's treatment of aggregated reporting data and applicable platform controls.

We do not use analytics consent as a condition of accessing The Luxorium.

We may share personal information with organisations that help us operate The Luxorium, including:

Google, where you consent to Google Analytics;
website hosting and infrastructure providers;
form-processing, email or communications providers;
technical service providers supporting the website;
professional advisers where reasonably necessary; and
regulators, courts, law-enforcement bodies or other authorities where disclosure is legally required.

We do not sell personal information.

Where a provider processes information on our behalf, we expect it to use that information only for the agreed purposes and to protect it appropriately.

6. International transfers

The Luxorium and some of our service providers may operate outside the European Economic Area or United Kingdom.

Where the GDPR or UK GDPR applies and personal information is transferred internationally, we will use an applicable lawful transfer mechanism or other appropriate safeguard where required.

Google maintains contractual data-protection arrangements for Google Analytics, including mechanisms intended to address international transfers of protected European data.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

As a working baseline:

Ask and Contact submissions: ordinarily no longer than 24 months after the last substantive interaction, unless there is a reason to retain them longer;
Corrections and contributions: personal contact information will be minimised when no longer required, although relevant evidence may be retained longer where necessary to preserve editorial provenance and accountability;
Business profile information: retained while the information remains relevant to the profile, subject to correction, objection and periodic review; and
Google Analytics: retained according to the GA4 retention period stated above.

We may retain information for longer where required by law, necessary to establish or defend legal claims, or required to maintain an appropriate record of significant editorial decisions.

8. Your rights

Depending on where you live and the law that applies to our processing, you may have rights including the right to:

ask what personal information we hold about you;
receive a copy of that information;
correct inaccurate or incomplete information;
ask us to delete personal information;
ask us to restrict how information is used;
object to processing based on legitimate interests;
receive certain information in a portable format;
withdraw consent where processing is based on consent; and
complain to an appropriate data-protection authority.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

To exercise a privacy right, contact privacy@theluxorium.co. We may need to verify your identity before acting on a request.

If the EU GDPR applies to you, you may also complain to the data-protection supervisory authority in your country.

If the UK GDPR applies to you, you may complain to the UK Information Commissioner's Office.

9. Information about other people

Please take care when submitting information about another person.

Do not provide sensitive, private or unnecessary personal information about another person unless you have a legitimate reason to do so.

Information submitted to The Luxorium does not automatically become suitable or permitted for publication. Where public use of material from a submission is permitted, we may verify, minimise or anonymise it before publication, or decide not to publish it.

10. Security

We use reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, alteration, misuse or disclosure.

No online system can guarantee absolute security, but we aim to minimise both the amount of personal information we hold and the number of people and systems able to access it.

11. Children

The Luxorium is not designed specifically for children and we do not intentionally seek to collect personal information from children through our forms.

If you believe a child has provided personal information to us inappropriately, please contact us.

12. Changes to this policy

We may update this Privacy Policy when our website, services, technology or legal obligations change.

Where a change materially affects how we use personal information, we will make the updated policy reasonably prominent.

The date at the top of this page shows when the policy was most recently updated.

13. Contact us

Questions about this Privacy Policy or how The Luxorium handles personal information can be sent to:

The Luxorium
Sarah Jayne Meldrum
privacy@theluxorium.co