Privacy Policy

At Dubai Desert Tour, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

This policy is designed to comply with the UAE Personal Data Protection Law (PDPL) under Federal Decree-Law No. 45 of 2021, which governs the processing of personal data in the United Arab Emirates. We are committed to ensuring that your data is handled lawfully, fairly, and transparently.

Data Controller: Dubai Desert Tour
Address: Al Sahel St - Al Thanyah Fifth, Dubai, United Arab Emirates
Email: info@dubaideserttour.com

We collect different types of information to provide and improve our services:

2.1 Personal Information You Provide

• Identity Data: Full name, date of birth, nationality, gender
• Contact Data: Email address, phone number, postal address, hotel name and location
• Identification Documents: Passport details or Emirates ID (when required for certain tours)
• Booking Data: Tour preferences, travel dates, number of participants, special requests, dietary requirements
• Account Data: Username, password, account preferences (if you create an account)

2.2 Payment Information

• Credit/debit card details are processed directly by our secure payment partners (Stripe, PayPal) and are not stored on our servers.
• We retain only transaction references for booking confirmation and accounting purposes.

2.3 Technical Data (Collected Automatically)

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation paths
• Referral source (how you found us)
• Cookie identifiers (see Section 9)

2.4 Communication Data

• Email correspondence
• WhatsApp messages
• Phone call logs (not recordings)
• Reviews and feedback you provide
• Social media interactions

Under the UAE PDPL, we process your personal data based on the following legal grounds:

We use your personal data to:

• Process Bookings: Confirm reservations, arrange pickups, coordinate with tour operators
• Communicate: Send confirmations, reminders, and updates about your tour
• Customer Support: Respond to inquiries, resolve issues, and provide assistance
• Personalize Experience: Remember your preferences for future bookings
• Improve Services: Analyze usage patterns to enhance our website and offerings
• Marketing: Send promotional offers about our tours (only with your consent or to existing customers)
• Safety and Security: Detect and prevent fraud, maintain security
• Legal Compliance: Meet regulatory requirements and respond to lawful requests

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

After the retention period, data is securely deleted or anonymized.

We do not sell your personal data. We only share your information with:

6.1 Service Providers

• Tour operators and guides: To coordinate and deliver your booked experience
• Transportation providers: For pickup and drop-off arrangements
• Payment processors: Stripe and PayPal for secure payment processing
• Email service providers: To send booking confirmations and communications
• Analytics providers: For website performance analysis

All service providers are contractually obligated to protect your data and use it only for the specified purposes.

6.2 Legal Requirements

We may disclose your data when required by:

• UAE law or regulation
• Court orders or legal proceedings
• Government authorities (e.g., tax authorities, DET)
• To protect our rights, property, or safety, or that of our customers

As a business serving international tourists, your data may be processed outside the UAE in the following circumstances:

• Payment processing through Stripe (USA) and PayPal (various locations)
• Email delivery through international service providers
• Cloud hosting and backup services

When transferring data internationally, we ensure adequate safeguards are in place, including:

• Standard contractual clauses approved by relevant authorities
• Transfers to countries with adequate data protection laws
• Binding corporate rules where applicable

Under the UAE Personal Data Protection Law, you have the following rights:

8.1 Right to Access

You can request a copy of the personal data we hold about you. We will respond within 14 days.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

8.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

8.5 Right to Data Portability

You can request your data in a structured, commonly used format to transfer to another service.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@dubaideserttour.com. We will respond to your request within 14 days. We may ask for identification to verify your identity before processing your request.

Our website uses cookies and similar technologies to enhance your experience:

9.1 Types of Cookies We Use

9.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner when you first visit the site
• Your browser settings (note: disabling cookies may affect site functionality)
• Opt-out links for specific analytics providers

We implement robust security measures to protect your personal data:

• Encryption: SSL/TLS encryption for all data transmitted to and from our website
• Secure Payments: PCI-DSS compliant payment processing through Stripe and PayPal
• Access Controls: Role-based access limiting data access to authorized personnel only
• Regular Audits: Periodic security reviews and vulnerability assessments
• Staff Training: Regular data protection training for all employees
• Incident Response: Procedures in place to detect, report, and respond to data breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant authorities and affected individuals as required by UAE PDPL.

Our services are not directed to children under 18 years of age. We do not knowingly collect personal data from children without parental consent.

• Bookings for minors must be made by a parent or legal guardian.
• The parent/guardian is responsible for providing accurate information for minor participants.
• If we discover we have collected data from a child without appropriate consent, we will delete it promptly.

Our website may contain links to third-party websites (such as social media platforms, review sites, or partner services). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

• The "Last Updated" date at the top indicates when the policy was last revised.
• For significant changes, we will notify you via email or a prominent notice on our website.
• Continued use of our services after changes are posted constitutes acceptance of the updated policy.

Filing a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UAE Data Office (when fully operational) or through the relevant emirate's consumer protection authority.

We encourage you to contact us first so we can address your concerns directly. We aim to resolve all complaints within 30 days.