Home · Privacy
Legal
Privacy notice
What we collect, why, how long we keep it, and the rights you have under the UAE PDPL.
What we collect, why, how long we keep it, and the rights you have under the UAE PDPL.
This text was drafted by Velare to show the page in place. It is not legal advice and has not been reviewed by a UAE lawyer. Before launch it must be checked against UAE Federal Consumer Protection Law No. 15 of 2020, the Dubai Department of Economy & Tourism rules for tourism licensees, and Federal Decree-Law No. 45 of 2021 (PDPL).
To arrange travel we need more personal data than most businesses. Typically: your name as it appears on your passport, date of birth, nationality, passport number and expiry, contact details, payment details, and the names and ages of everyone travelling with you.
For visa files we additionally handle documents such as bank statements, employment letters, Emirates ID and residence visa copies. Where you tell us about a medical condition, dietary requirement or mobility need, that is sensitive personal data and we handle it only to arrange your travel.
To quote for, arrange, and deliver the travel you have asked for; to comply with legal obligations including immigration, aviation security and tax; to handle complaints; and — only where you have agreed — to send you the journal or occasional offers. You may withdraw that agreement at any time.
Only those who need it to deliver your trip: airlines, hotels, ground operators, insurers, consulates and visa processing centres, and our payment provider. Some of these are outside the UAE, and providing your data to them is a necessary part of arranging international travel. We do not sell personal data to anyone, ever.
Booking and financial records are retained for the period required by UAE tax and commercial law — currently five years from the end of the relevant tax period. Visa supporting documents are deleted once the application is decided and any appeal window has closed. Marketing consent records are kept until you withdraw consent.
Under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data you may request access to your data, correction of anything inaccurate, deletion where we no longer need it, restriction of processing, a portable copy, and withdrawal of consent. Write to the address in the footer and we will respond within 30 days.
We use a small number of cookies: one to remember your chosen currency and language, one to record your cookie choice, and — only if you accept — basic analytics that tell us which pages people read. You can decline analytics without losing any functionality.
Payment card details are handled by our payment provider and are never stored on our systems. Visa documents are held in access-controlled storage and deleted on the schedule above.
Last updated 26 August 2026 · Questions: contact the desk