Privacy Policy

Last Updated: March 26, 2025

Here’s a fully rewritten privacy policy that aligns with both the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and GDPR (for European visitors/clients). Key additions include lawful basis for processing, data retention periods, cross-border transfer disclosures, DPO contact, and explicit GDPR rights for EU data subjects.

Privacy Policy — Concierge ONE Tourism

Last Updated: March 27, 2026

1. Introduction

Concierge ONE Tourism (“we,” “us,” or “our”) is a Dubai-based luxury travel and concierge services company operating at https://concierge1dubai.ae. We are committed to protecting your personal data and processing it in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and, where applicable to residents or citizens of the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding that data. Please read it carefully before using our website or services.

By accessing our website or engaging our services, you acknowledge that you have read and understood this policy.

2. Who We Are (Data Controller)

Concierge ONE Tourism
Dubai, United Arab Emirates
📧 info@concierge1dubai.ae
🌐 https://concierge1dubai.ae

For GDPR purposes, Concierge ONE Tourism acts as the Data Controller for personal data collected through this website and our services.

For data protection inquiries, please contact us at: info@concierge1dubai.ae

3. Personal Data We Collect

Data You Provide Directly

Full name
Email address and phone number
Nationality and passport/travel document details (where required for booking)
Travel preferences, dates, destinations, and accommodation requirements
Payment information (processed securely via third-party payment processors)
Any additional information you voluntarily provide in inquiries or forms

Data Collected Automatically

When you browse our website, we may automatically collect:

IP address and approximate geographic location
Browser type, operating system, and device information
Pages visited, time spent on pages, and navigation patterns
Referral source (how you arrived at our website)
Cookie identifiers and session data (see Section 8)

Data From Third Parties

We may receive data about you from travel partners, booking platforms, or referral sources in connection with services you have requested.

4. Lawful Basis for Processing

We process your personal data only when we have a valid legal basis. Depending on the purpose, we rely on one or more of the following:

Contractual necessity — to fulfill a booking or service agreement you have entered into with us
Legal obligation — to comply with UAE laws, regulatory requirements, or law enforcement requests
Legitimate interests — to operate and improve our business, prevent fraud, and maintain security, where your interests do not override ours
Consent — for marketing communications, newsletters, and non-essential cookies; you may withdraw consent at any time without affecting the lawfulness of prior processing

5. How We Use Your Personal Data

We use your data for the following purposes:

Responding to inquiries and providing requested travel or concierge services
Processing, confirming, and managing travel bookings
Communicating service updates, itinerary changes, or important notices
Personalizing your travel experience based on stated preferences
Sending promotional offers, newsletters, or marketing content — only with your prior consent
Improving our website performance, user experience, and service quality
Complying with UAE legal and regulatory obligations
Preventing fraud, unauthorized access, and ensuring data security

We will not use your personal data for purposes incompatible with those stated above without notifying you.

6. Sharing Your Personal Data

We do not sell your personal data. We share it only when necessary, with the following categories of recipients:

Travel service providers — hotels, airlines, tour operators, car rental companies, and other partners required to fulfill your booking
Technology and IT service providers — website hosting, CRM, booking management, and analytics platforms
Payment processors — to securely process transactions (they act as independent data controllers under their own privacy policies)
Legal and regulatory authorities — when required by UAE law, court order, or government directive
Professional advisors — lawyers, auditors, or insurers where necessary for our operations

All third-party processors are required to handle your data in accordance with applicable data protection laws and our data processing agreements.

International Data Transfers

Some of our service providers may be located outside the UAE or EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) for EEA transfers
Transfers only to countries recognized as providing adequate data protection under UAE PDPL or GDPR, or with appropriate contractual protections in place

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

Booking and transactional data — retained for a minimum of 5 years to comply with UAE commercial and tax regulations
Marketing and consent records — retained until you withdraw consent or request deletion
Website analytics data — retained for up to 13 months
Inquiry and correspondence data — retained for up to 2 years from the date of last contact

After the applicable retention period, data is securely deleted or anonymized.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and support marketing activities. Cookies we use include:

Essential cookies — required for the website to function; cannot be disabled
Analytics cookies — help us understand how visitors use our site (e.g., Google Analytics)
Marketing/advertising cookies — used to deliver relevant promotions (only with your consent)

You can manage or withdraw your cookie consent at any time through our Cookie Preference Centre or via your browser settings. Please note that disabling certain cookies may affect website functionality.

9. Your Rights

Under UAE PDPL, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data, subject to legal retention requirements
Withdraw consent at any time for consent-based processing
Object to processing based on legitimate interests

Additional Rights Under GDPR (EEA Residents):

Data portability — receive your data in a structured, machine-readable format
Restriction of processing — request we limit how we use your data in certain circumstances
Object to automated decision-making — we do not make solely automated decisions with legal or significant effects
Lodge a complaint — with your local data protection authority (e.g., your national DPA within the EEA)

To exercise any of these rights, please contact us at info@concierge1dubai.ae. We will respond within 30 days (extendable by a further 60 days for complex requests, with notice).

We may need to verify your identity before fulfilling any request.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

While we take every reasonable precaution, no data transmission or storage system is entirely secure. In the event of a data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities as required by law.

11. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to delete it.

12. Third-Party Links

Our website may contain links to external websites operated by third parties. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their content or data practices.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal obligations. The updated version will be posted on this page with a revised “Last Updated” date. For significant changes, we will notify you via email or a prominent notice on our website. We encourage you to review this policy regularly.

14. Contact Us

For any questions, concerns, or to exercise your data rights, please contact: