Privacy Policy

Privacy Policy

Last updated: June 2026

At Prilliants Tours, we respect your privacy and are committed to protecting your personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable Dubai tourism regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or book our luxury tours and experiences across Dubai and the UAE.

1. Information We Collect

We may collect the following types of personal data:

  • Identity & Contact Data: Full name, email address, phone number, nationality, passport details (only when legally required), and hotel or residence address when you book a tour or contact us.

  • Payment Data: Credit/debit card details and billing information — processed securely through PCI-DSS-compliant third-party payment gateways. We do not store full payment card details on our servers.

  • Technical & Usage Data: IP address, browser type, device information, operating system, pages visited, time spent, and referral sources — collected via cookies and analytics tools for website improvement.

  • Special Categories of Data: We do not intentionally collect sensitive personal data (e.g., health, religion). If required for a specific tour (e.g., dietary or accessibility needs), we obtain your explicit consent before collection.

2. How We Use Your Information

Your personal data is processed based on one or more of the following lawful bases: your consent, contractual necessity, legitimate interest, or legal obligation. We use your data to:

  • Confirm, manage, and personalise your tour bookings.

  • Communicate with you regarding itinerary details, updates, support, or changes.

  • Send promotional offers, luxury travel inspiration, and exclusive deals (only with your opt-in consent).

  • Improve our website, services, and customer experience through analytics.

  • Comply with UAE legal obligations, including tourism licensing and regulatory requirements.

3. Legal Basis & Consent (PDPL Compliance)

Under the UAE PDPL, we rely on your explicit consent as the primary legal basis for collecting and processing your personal data. By submitting your information, you consent to its use as described in this policy. You may withdraw your consent at any time by contacting us — however, this may affect our ability to provide certain services.

For cookies and tracking technologies, we request your consent via a cookie banner upon your first visit, in accordance with UAE data protection standards.

4. Data Sharing & Disclosure

We take your privacy seriously. Your personal data is never sold, traded, or rented to third parties. We only share your data in the following limited circumstances:

  • Service Providers & Partners: With trusted third parties necessary to fulfil your booking (e.g., luxury transport providers, hotels, desert camp operators, tour guides) — bound by strict data processing agreements.

  • Payment Processors: Secure, PCI-DSS-compliant gateways for transaction processing.

  • Legal Obligations: When required by UAE law, court order, or government authorities (including Dubai Police, DET, or UAE Data Office).

  • Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with prior notification.

5. International Data Transfers

Your data is primarily stored and processed on servers located within the United Arab Emirates. In some cases, trusted third-party service providers may process data outside the UAE. Where such transfers occur, we ensure an adequate level of protection in compliance with UAE PDPL requirements, through standard contractual clauses or equivalent safeguards.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by UAE law. Retention criteria include:

  • Booking & transaction records: minimum 5 years (per UAE commercial and tax regulations).

  • Marketing consent: until you withdraw your consent.

  • Website analytics data: typically 26 months.

When data is no longer required, it is securely deleted or anonymised.

7. Data Protection & Security

We implement robust technical and organisational measures to protect your data, including:

  • Encryption: SSL/TLS encryption for data in transit.

  • Access Controls: Restricted access to personal data on a need-to-know basis.

  • Secure Servers: Firewalls, intrusion detection, and regular security audits.

  • Staff Training: All employees handling data are trained on UAE PDPL compliance.

In the unlikely event of a data breach affecting your rights, we will notify you and the relevant UAE authorities within 72 hours, as required by law.

8. Your Rights (Under UAE PDPL)

You have the following rights regarding your personal data:

 
 
RightDescription
AccessRequest a copy of the personal data we hold about you.
RectificationCorrect inaccurate or incomplete data.
ErasureRequest deletion of your data (“right to be forgotten”).
RestrictionLimit how we process your data in certain circumstances.
ObjectionObject to processing based on legitimate interest or direct marketing.
Data PortabilityReceive your data in a structured, machine-readable format.
Withdraw ConsentWithdraw your consent at any time for marketing or other processing.

To exercise any of these rights, contact us using the details below. We will respond within 30 days as stipulated by UAE regulations.

You also have the right to lodge a complaint with the UAE Data Office if you believe your data rights have been violated.

9. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse traffic, and personalise content. Cookie types used:

  • Essential Cookies: Required for website functionality and booking processes.

  • Analytics Cookies: Help us understand visitor behaviour (e.g., Google Analytics).

  • Marketing Cookies: Used for retargeting and personalised advertising (only with consent).

You can manage or disable cookies through your browser settings or our cookie preference centre. Note that disabling certain cookies may affect website functionality.

10. Third-Party Links

Our website may contain links to external websites (e.g., hotel partners, experience providers, social media). We are not responsible for their content, privacy practices, or data handling. We encourage you to review their privacy policies before sharing any personal information.

11. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children without verified parental consent, in compliance with UAE law.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in laws, regulations, or our business practices. The “Last updated” date will be revised accordingly. We encourage you to review this page regularly. Material changes may be communicated via email or a prominent notice on our website.

13. Contact Us & Data Protection Officer

For questions, data requests, or complaints regarding this Privacy Policy or your personal data, please contact us:

📍 Prilliants Tours
Address: Dubai, United Arab Emirates
📞 Phone: +971 55 673 6593
📧 Email: info@brilliantsadventuredubaitour.ae
🌐 Website: [www.brilliantsadventuredubaitours.ae]

Data Protection Officer (DPO):
📧 dpo@brilliantsadventuredubaitour.ae

Supervisory Authority:
UAE Data Office
🌐 [www.uaedataoffice.ae]