Privacy Policy
Last Updated: February 2026
This Privacy Policy explains how Ultimate Attractions Tours L.L.C collects, processes, and protects your personal data.
1. Definitions
Explanation of terms used in this Privacy Policy
- Personal Data: Any information relating to an identifiable individual.
- Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
- Data Subject: Any individual whose Personal Data is collected or processed by the Company.
2. Data We Collect
Types of personal data collected from users
- Contact information: name, email address, phone number.
- Financial data: payment information processed securely via Ziina Payment Gateway, transaction history, and invoices.
- Booking data: selected tours, dates, hotel preferences, transportation choices, special requests.
- Website & technical data: IP address, device type, browser type, cookies, browsing behavior, analytics, referral sources.
- Communications: emails, chat, and phone conversations with our support team.
- We may collect IP address and approximate geographic location data for security, fraud prevention, service optimization, and regulatory compliance purposes. By using our website or submitting forms, you explicitly consent to this data collection and processing.
3. Purposes of Data Processing
Why personal data is processed
- To provide and manage bookings and travel services.
- To process payments securely.
- To comply with legal obligations including accounting and reporting.
- To send booking confirmations, invoices, updates, or promotional content (if consented).
- To improve services, perform analytics, and ensure website functionality.
- To manage complaints, claims, or disputes.
4. Legal Basis for Processing
Legal grounds under UAE law, GDPR, and international standards
- Contractual necessity: for fulfilling bookings.
- Legal obligation: under UAE law.
- Consent: when explicitly given for marketing communications.
- Legitimate interest: for service improvement, fraud prevention, and operational efficiency.
5. Data Sharing and Third Parties
Who we share data with
- Service providers: hotels, transport operators, airlines, and tour guides.
- Payment processors: Ziina Payment Gateway.
- Government authorities: for accounting and regulatory compliance.
- Legal bodies: for claims, disputes, or investigations.
- We do not sell or trade personal data to unrelated third parties.
6. Data Retention
How long data is stored and deletion
- Personal data is retained only as long as necessary for contractual, legal, or legitimate purposes.
- Booking and payment records are kept for minimum 5 years per UAE law.
- Marketing data is retained until consent is withdrawn.
- Data is securely deleted or anonymized after retention period.
7. Cookies and Tracking
Website tracking and cookies
- Cookies are used for website functionality, analytics, and marketing.
- Users can manage cookies via browser settings.
- No tracking is done for children under 16 without consent.
8. Data Subject Rights
Rights of users regarding their data
- Access personal data.
- Correct inaccurate or incomplete data.
- Request erasure (Right to be forgotten).
- Object to processing or withdraw consent.
- Request data portability.
- Lodge complaints with UAE or EU authorities.
- Requests can be submitted to privacy@dunesdiscoverytourism.com.
9. Security Measures
How personal data is protected
- Encrypted servers store all personal data.
- PCI-DSS compliant gateways handle payment details.
- Regular audits, access controls, and staff training.
- Breach notification procedures in line with UAE law and GDPR.
10. Children's Data
Policy regarding data from children
- We do not knowingly collect data from children under 16 without parental consent.
11. International Data Transfer
Transferring data outside UAE
- Data may be shared with third-party suppliers outside the UAE.
- Transfers comply with UAE law, GDPR adequacy, and contractual safeguards.
12. Marketing and Communications
User consent and opt-out
- Marketing communications are sent only with consent.
- Users may unsubscribe via email or links in communications.
13. Changes to Privacy Policy
Updates and revisions to the policy
- Policy may be updated periodically.
- Updates are effective upon posting.
- Users are encouraged to review regularly.
14. Governing Law and Jurisdiction
Applicable laws and courts
- This Privacy Policy is governed by UAE law.
- UAE courts have exclusive jurisdiction.
- GDPR applies to EU residents interacting with the website.
15. Contact Information
Company contact details for data inquiries
- Ultimate Attractions Tours L.L.C
- Office No. 9-281, Malik Ahmed Qasim Darwish Fakhroo Bldg, Deira - Al Khabaisi, Dubai, 86005, UAE
- Email: online@attractionss.com
- Phone: +971 54 237 7867
Still Have Questions?
Our dedicated team is ready to help you with any inquiries or custom tour requests.
