Privacy Policy

1. Who We Are & Scope of this Policy

This Privacy Policy governs the collection, processing, and handling of personal data by DXB Desert Safaris LLC (“we”, “our”, or “us”), operating through our primary domain dxbdesertsafaris.com, associated reservation systems, mobile communication channels (including WhatsApp), and customer service desks in Dubai, United Arab Emirates.

This policy applies to all individual travelers, corporate event organizers, partner agencies, and website visitors who engage our desert safaris, dune buggy rentals, private charters, attraction tickets, or transport services across the UAE.

2. Categories of Information We Collect

To provide high-quality desert adventures, ensure guest safety, and adhere to statutory tourist transport regulations, we collect the following categories of personal information:

• Identity & Contact Details: Full legal name, nationality, primary email address, mobile/WhatsApp telephone number, and residential or hotel pickup address within Dubai, Sharjah, or neighbouring Emirates.
• Booking & Travel Parameters: Desired excursion package, travel dates, passenger headcount (adults, children, infants), pickup timing preferences, special dietary requests (Halal, vegan, vegetarian, or allergen notifications), and physical mobility notes.
• Regulatory & Manifest Data: For excursions accessing protected conservation sanctuaries (such as the Dubai Desert Conservation Reserve or Al Marmoom Reserve) or participating in aviation/nautical activities, guest identification details (passport copy or Emirates ID) may be required pursuant to mandates issued by Dubai Tourism (DET) and the Roads and Transport Authority (RTA).
• Payment & Transactional Records: Billing address, transaction reference codes, cardholder name, payment method tokens, and automated payment gateway approval records. We do not store raw credit/debit card numbers or CVV codes on our servers.
• Technical & Browsing Telemetry: Anonymized IP address, device model, operating system version, browser type, referral URLs, language preference, geo-location approximation, and navigational logs collected via secure HTTP cookies and analytical tags.
• Customer Communications: Records of communications conducted via our official WhatsApp business desk, email correspondence, contact form inquiries, and post-tour service feedback.

3. Legal Bases for Data Processing

We process your personal information strictly under legitimate legal bases recognized by the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and international standards:

• Performance of a Contract: Processing necessary to confirm your booking, allocate vehicles, dispatch safari marshals, issue booking vouchers, and deliver contracted travel experiences.
• Legal & Regulatory Compliance: Fulfilling mandatory reporting obligations enforced by the Department of Economy and Tourism (DET), RTA tourist transport mandates, Dubai Police tourist security guidelines, and UAE Federal Tax Authority (FTA) audit retention regulations.
• Legitimate Commercial Interests: Safeguarding digital infrastructure against fraud, optimizing website performance, auditing service quality, conducting fleet security checks, and safeguarding guest welfare.
• Explicit Consent: Sending non-transactional marketing notifications, special promotional privileges, or seasonal newsletters, from which you can withdraw consent at any time.

4. How We Use Your Personal Data

We use the data collected strictly for transparent, operational, and customer-centric purposes:

• Generating and dispatching instant digital booking vouchers, official VAT tax invoices, and payment receipts.
• Facilitating exact driver navigation, coordinating hotel lobby pickups, and providing live driver arrival updates via WhatsApp or SMS.
• Alerting guests promptly to operational modifications, severe weather warnings (e.g. National Center of Meteorology sandstorm alerts), or flight-delay rescheduling.
• Ensuring catering safety by communicating dietary constraints and allergy warnings to our camp culinary teams.
• Preventing fraudulent card transactions through automated risk scoring with acquiring financial institutions.
• Publishing voluntary guest reviews and testimonials following verified tour completion.

5. Third-Party Disclosures & Data Sharing Limits

DXB Desert Safaris LLC does not sell, license, or barter customer databases to third parties under any circumstances. We share information only with trusted entities operating under strict confidentiality and security agreements:

• Certified Safari Marshals & Fleet Chauffeurs: Operational drivers receive guest name, room/hotel pickup location, and WhatsApp contact details solely for pickup coordination and safety manifest validation.
• Authorized Attraction & Ticketing Venues: When a booking incorporates third-party attractions (e.g., Burj Khalifa At The Top, Museum of the Future, Aquaventure Waterpark, licensed dhow cruise operators, or hot air balloon operators), necessary passenger details are transmitted directly to issue authorized admissions.
• PCI-DSS Certified Payment Gateways: Acquirers and banking gateways (e.g., Network International, Stripe, Checkout.com) securely receive tokenized card details to execute financial authorizations.
• Government & Law Enforcement Bodies: DET, RTA, Dubai Police, or judicial bodies when strictly mandated by UAE federal laws, public health orders, or formal court subpoenas.

6. International Data Transfers

Because our clientele originates from across the globe, server infrastructure, cloud hosting, and payment gateways may occasionally route encrypted data through secure international data centers (such as AWS and Google Cloud) adhering to ISO/IEC 27001, SOC 2 Type II, and UAE PDPL cross-border transfer standards.

7. Data Retention & Archival Guidelines

We retain personal information only for the duration necessary to satisfy the purposes for which it was gathered:

• Operational Tour Records: Driver manifests, hotel pickup coordinates, and WhatsApp trip coordination messages are retained for 90 days following tour conclusion, after which they are purged.
• Statutory Financial & Tax Records: In compliance with UAE Federal Tax Authority (FTA) regulations and commercial bookkeeping requirements, transaction invoices and VAT records are securely archived for 5 years.
• Marketing & Inquiries: Unsubscribed email and marketing profiles are removed within 30 days of opt-out notification.

8. Cookies & Tracking Technologies

Our website employs essential, performance, and analytical cookies to ensure optimal functionality:

• Essential Cookies: Required to keep track of selected currencies, shopping cart parameters, and security tokens across active checkout sessions.
• Analytics & Performance Cookies: Google Analytics 4 and Tag Manager enable us to track page load velocities, device compatibility, and user journeys anonymously without linking personally identifiable information.
• Cookie Management: You can configure your internet browser to refuse cookies or alert you when cookies are placed. Note that disabling essential cookies may impact checkout functionality.

9. Your Legal Rights Under UAE PDPL & International Laws

Subject to statutory exceptions, you are entitled to exercise the following data subject rights at no administrative cost:

• Right of Access: Request a written summary of the personal information we maintain concerning your profile.
• Right of Rectification: Request the correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure (“Right to Be Forgotten”): Request the permanent deletion of personal data where continued processing is no longer required by law.
• Right to Restrict or Object to Processing: Object to automated data processing or promotional communications.
• Right to Data Portability: Receive a machine-readable digital export of personal information supplied to us.
• Right to Revoke Consent: Withdraw consent previously granted for optional communications at any moment.

10. Protection of Minors

Our services and digital booking portals are not directed at persons under 18 years of age without parental oversight. Bookings involving children or infants must be finalized by an adult parent or legal guardian. We do not knowingly harvest personal information directly from unaccompanied minors.

11. Contact Our Data Protection Officer (DPO)