Last updated: 7 October 2026
This Privacy Policy explains what personal data Covaya Properties collects when you visit this website or contact us, why we collect it, how long we keep it and what rights you have. We have written it to meet the requirements of the EU General Data Protection Regulation (GDPR), which applies to visitors from the European Union, and Egypt’s Personal Data Protection Law (Law No. 151 of 2020).
1. Who is responsible for your data
The controller responsible for processing your personal data on this website is:
Covaya Properties
New El Kawther, Hurghada 84517
Red Sea Governorate, Egypt
Email: info@covayaproperties.com
Phone / WhatsApp: +20 155 742 7456
For any question about this policy or your data, please write to info@covayaproperties.com with the subject “Data protection”.
2. Data we collect when you visit the website
When you open a page, your browser automatically sends technical information to the server that hosts this website: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. Our hosting provider stores this information in server log files for a short period to deliver the website, keep it secure and investigate technical problems or attacks.
Legal basis: our legitimate interest in providing a secure, working website (Art. 6(1)(f) GDPR). Log files are deleted automatically, normally within 30 days, unless they are needed to investigate a specific security incident.
We do not use analytics tools, advertising cookies, tracking pixels or remarketing on this website.
3. Enquiries, callback requests and contact forms
When you send us an enquiry through a form on this website (for example “Register Interest”, “Request Details”, “Request Callback” or the contact form), we collect:
- your name, email address and phone or WhatsApp number (required);
- any optional details you choose to give us, such as preferred location, what you are looking for, approximate budget, preferred contact method and your message;
- the page or property you enquired about, the language of the page and the date and time of your enquiry.
We use this information only to answer your enquiry, send you the information you asked for (such as brochures, floor plans, prices and availability), arrange viewings and advise you on a possible purchase, sale or rental. Your enquiry is stored in our website administration area and sent to our team by email.
To protect the forms against spam and abuse, a short-lived, irreversibly encrypted (hashed) version of your IP address is kept for 10 minutes to limit the number of submissions. It is not linked to your enquiry and is deleted automatically.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries and preventing abuse (Art. 6(1)(f) GDPR).
Retention: we keep enquiries for as long as we are in contact with you about your property search and for up to 24 months after our last contact, so that we can follow up on your request. If a purchase, sale or rental results from your enquiry, we keep the related records for as long as required by applicable commercial and tax law. You can ask us to delete your enquiry at any time.
We do not sell your data and we do not use it for newsletters or marketing campaigns unless you have separately asked us to.
4. Contact by email, phone and WhatsApp
If you contact us by email, phone or WhatsApp, we process the details you share with us (such as your name, contact details and message) to answer you. The legal basis is the same as for enquiry forms (Art. 6(1)(b) and (f) GDPR).
The WhatsApp buttons on this website are simple links. No data is sent to WhatsApp until you click one of them. When you do, WhatsApp (operated by WhatsApp Ireland Limited / Meta Platforms) processes your data under its own privacy policy, which you can read at whatsapp.com/legal/privacy-policy-eea. If you prefer not to use WhatsApp, please contact us by email or phone.
5. Cookies and local storage
This website uses only a small amount of storage in your browser, all of it needed for functions you use:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| pll_language | Cookie | Remembers whether you are viewing the English or German version of the website | 1 year |
| covayaCurrency | Local storage | Remembers the currency you selected for displaying prices | Until you clear your browser data |
| covayaRates | Local storage | Stores current exchange rates after you change the currency, so they are not fetched again on every page | 12 hours (refreshed when needed) |
| covayaIntentPopupShown | Session storage | Makes sure the “Need Expert Guidance?” window is shown at most once per visit | Until you close the browser tab |
None of these are used for tracking or advertising. Legal basis: they are strictly necessary to provide a function you have requested (Section 25(2) of the German TDDDG and Art. 5(3) of the ePrivacy Directive) and our legitimate interest in a user-friendly website (Art. 6(1)(f) GDPR). You can delete them at any time in your browser settings.
6. Third-party services used on this website
Client reviews (Trustindex / Facebook)
On our homepage we show reviews from our Facebook page using a widget provided by Trustindex Kft. (Hungary). To display the reviews, your browser loads files from Trustindex servers (cdn.trustindex.io) and reviewer profile pictures from Facebook servers operated by Meta Platforms Ireland Limited. In doing so, your IP address and technical browser information are transmitted to these providers. Meta may process data in the United States; Meta participates in the EU–U.S. Data Privacy Framework.
Legal basis: our legitimate interest in showing genuine client feedback (Art. 6(1)(f) GDPR). More information: Trustindex privacy policy and Meta privacy policy.
Interactive maps (OpenStreetMap and Leaflet)
Pages that show a map (the map page, project pages, destination and listing pages) use the open-source Leaflet library, loaded from the unpkg content delivery network (operated by Cloudflare, Inc.), and map images from the OpenStreetMap Foundation’s tile servers (United Kingdom). When such a page loads, your IP address and browser information are transmitted to these servers so the map can be displayed. Maps are only loaded on pages that contain a map.
Legal basis: our legitimate interest in showing the location of properties (Art. 6(1)(f) GDPR). The United Kingdom has an EU adequacy decision; Cloudflare participates in the EU–U.S. Data Privacy Framework. More information: OpenStreetMap Foundation privacy policy and Cloudflare privacy policy.
Currency conversion
Prices are shown in euros. Only if you choose another currency in the currency selector does your browser request current exchange rates from ExchangeRate-API (open.er-api.com). This request transmits your IP address and browser information to that provider; no other personal data is sent. Legal basis: providing the function you requested (Art. 6(1)(f) GDPR).
Fonts
All fonts are stored on our own server. No connection to Google or other font providers is made when you visit this website.
Links to social networks
We link to our Facebook and Instagram pages. These are ordinary links: no data is sent to these networks until you click a link and leave our website.
7. Who receives your data
Your enquiry is handled by the Covaya Properties team. Where it is necessary to answer your request, for example to arrange a viewing or obtain current availability, we may share relevant details with the developer or seller of the property you are interested in. We will tell you before doing so where possible.
We also use technical service providers who process data on our behalf, such as our website hosting and email providers. They may only use your data to provide their services to us.
We do not sell or rent your personal data to anyone.
8. International transfers
Covaya Properties is based in Egypt, so data you send us is processed in Egypt, a country for which the European Commission has not issued an adequacy decision. We transfer your enquiry data to Egypt because it is necessary to answer your request and take the pre-contractual steps you asked for (Art. 49(1)(b) GDPR). Some of the service providers named above may also process data in the United States or other countries, as described in their sections.
9. Your rights
Under the GDPR you have the right to:
- obtain information about the personal data we hold about you (Art. 15);
- have incorrect data corrected (Art. 16);
- have your data deleted (Art. 17) or its processing restricted (Art. 18);
- receive the data you provided in a common, machine-readable format (Art. 20);
- object at any time to processing based on our legitimate interests (Art. 21);
- withdraw any consent you have given, with effect for the future (Art. 7(3));
- lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77).
To exercise your rights, email info@covayaproperties.com. We will reply within one month. We may ask you to confirm your identity before releasing personal data.
10. Security
We use technical and organisational measures to protect your data, including encrypted (HTTPS) connections, restricted access to enquiries in our website administration and spam protection on all forms. No method of transmission over the internet is completely secure, but we work to protect your data appropriately.
11. Children
This website is intended for adults interested in buying, selling or renting property. We do not knowingly collect data from anyone under 16.
12. Changes to this policy
We may update this Privacy Policy when our website or services change or when the law requires it. The current version is always available on this page, with the date of the last update shown at the top.