Privacy policy and personal data protection policy

Company Name: PREMIUMME DMCC
Licence No.: DMCC-817708
Registered Address: Unit 410, Fortune Tower, Cluster C, Jumeirah Lakes Towers, Dubai, UAE
Email: info@premiumdubai.ae
Telephone: +971 5 2923 2311
Website: https://premiumdubai.ae/

1. Purpose

This Privacy Policy and Personal Data Protection Policy (“PDPL”) explains how Premiumme DMCC (“Company”, “we”, “us”, “our”) collects, uses, stores, shares, transfers, and protects the personal data of users, customers, travelers, parents, guardians, group coordinators, and other individuals who use our website or our travel-related services.

We process personal data in accordance with applicable laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, to the extent applicable to our activities and jurisdiction. The law covers collection, use, disclosure, and cross-border transfers of personal data, and grants rights to the owner of the data.

2. Company Data

We are a UAE travel business licensed for:

• In Bound Tour Operator

• Out Bound Tour Operator

• Land Transport Agent

• Educational & Recreational Tours Organizing

Because of these activities, we may process personal data for bookings, transport coordination, travel planning, customer support, educational tours, recreation arrangements, visa assistance, and related administration.

3. Scope of This Policy

This Policy applies to personal data collected through:

• our website,

• enquiry forms,

• booking forms,

• WhatsApp, email, and phone communications,

• social media interactions,

• payment and invoicing processes,

• customer support,

• transport and tour coordination,

• educational and recreational tour organization,

• documents submitted for travel or visa support,

• cookies and website analytics tools.

4. Personal Data We May Collect

Depending on the service requested, we may collect and process the following categories of personal data:

4.1 Identity and Contact Data

• full name

• nationality

• date of birth

• gender, where needed for travel booking

• email address

• mobile number

• postal address

• emergency contact details

4.2 Travel and Booking Data

• passport details

• Emirates ID or other ID details where required

• visa information

• traveler names and passenger details

• booking references

• itinerary details

• destination and travel dates

• hotel preferences

• transport schedules

• pickup and drop-off details

• special travel instructions

4.3 Payment and Transaction Data

• billing address

• payment status

• transaction reference

• invoice records

• limited payment-related details necessary to confirm payment

We should avoid storing full card details unless this is handled through a compliant payment provider.

4.4 Educational / Recreational Tour Data

For school, youth, or group tours, we may collect:

• school or institution details

• parent / guardian contact details

• student age details

• participant lists

• medical or dietary disclosures relevant to safety

• consent records where necessary

4.5 Technical and Website Usage Data

• IP address

• browser type

• device information

• website activity logs

• cookies

• session data

• approximate location data derived from IP

• pages visited and click activity

4.6 Communications Data

• enquiry messages

• call records or notes

• complaint records

• support requests

• email or chat correspondence

5. Sources of Personal Data

We may collect personal data:

• directly from you,

• from the person making a group booking on your behalf,

• from parents, guardians, schools, or institutions,

• from employers or corporate clients arranging travel,

• from third-party booking systems,

• from travel suppliers,

• from payment service providers,

• from public authorities or visa-related platforms where legally permitted.

6. Why We Process Personal Data

We process personal data only for lawful and legitimate purposes connected with our travel business, including:

• responding to enquiries;

• creating quotations and itineraries;

• making and managing bookings;

• issuing tickets, vouchers, and invoices;

• arranging hotels, transport, tours, and activities;

• organizing inbound and outbound travel;

• managing educational and recreational tours;

• coordinating minors’ travel participation where applicable;

• providing customer support;

• handling amendments, cancellations, and refunds;

• managing complaints and disputes;

• complying with legal and regulatory obligations;

• fraud prevention, security, and risk management;

• improving our website and services;

• sending service-related communications;

• sending marketing communications where permitted by law or consent.

The PDPL sets out rules for processing and gives data owners rights over how their data is handled. The UAE’s official platform specifically notes rights to correction and to restrict or stop processing.

7. Legal Basis for Processing

To the extent required under applicable UAE data protection law, we process personal data on one or more of the following grounds:

• your consent;

• performance of a contract or steps requested by you before entering into a contract;

• compliance with legal or regulatory obligations;

• protection of public interest where applicable;

• our legitimate business interests, provided these do not override your rights and interests.

For sensitive or higher-risk categories of data, such as health-related data disclosed for accessibility, dietary, or travel safety reasons, we will seek additional consent or use another lawful basis where required.

8. Consent

Where processing is based on consent:

• we will request consent in a clear manner,

• consent may be collected through website forms, checkboxes, written confirmation, or other clear affirmative action,

• you may withdraw consent at any time, subject to any processing already lawfully carried out and any legal necessity to retain certain data.

If you withdraw consent, some services may no longer be available where that data is necessary to perform the booking or comply with law.

9. Children and Minors

Because we organize educational and recreational tours, we may process data relating to minors where necessary for booking, transport, supervision, safety, or venue access.

Where required, such data will be provided by and/or processed with the involvement of a parent, guardian, school, institution, or authorized group organizer.

We will only collect children’s data to the extent reasonably necessary for the relevant service.

10. Sensitive Personal Data

We do not seek to collect sensitive personal data unless it is necessary for a lawful travel purpose, such as:

• mobility assistance,

• medical needs relevant to transport or activity safety,

• dietary requirements,

• emergency support,

• special accommodation arrangements.

Where such data is collected, we will limit its use to the specific purpose for which it was provided.

11. Direct Marketing

We may send promotional messages about tours, holiday offers, transport services, educational trips, or other travel products if:

• you have requested them,

• you have consented,

• or we are otherwise permitted to do so under applicable law.

You may opt out of marketing communications at any time by:

• clicking “unsubscribe” where available,

• emailing us,

• contacting our customer support.

The UAE official platform states that data owners may request restriction or stoppage of processing of personal data.

12. Cookies and Tracking Technologies

Our website may use cookies, pixels, and similar tools for:

• website functionality,

• remembering preferences,

• traffic analytics,

• security,

• improving user experience,

• understanding booking behavior,

• measuring marketing effectiveness.

You may control cookies through your browser settings, subject to the fact that disabling some cookies may affect website performance.

A separate Cookie Policy can be added for better compliance practice.

13. Sharing of Personal Data

We may share personal data only where reasonably necessary with:

• airlines,

• hotels,

• transport providers,

• tour operators,

• attraction operators,

• cruise operators,

• destination management companies,

• visa processing partners,

• payment processors,

• IT and website service providers,

• CRM and communication providers,

• insurers where relevant,

• government authorities, embassies, immigration bodies, or regulators where required by law,

• schools, institutions, or corporate clients where they are the booking organizer and are entitled to the information.

14. International / Cross-Border Transfer of Personal Data

Because we provide outbound travel, inbound travel, hotel reservations, international transport, visa support, and foreign supplier coordination, we may transfer personal data outside the UAE where necessary to perform the requested booking or service.

The UAE official platform states that the PDPL sets requirements for cross-border transfer and sharing of personal data for processing purposes. Where we transfer data internationally, we will do so only where reasonably necessary and with appropriate safeguards consistent with applicable law.

This may include transfer to:

• foreign hotels,

• airlines,

• overseas tour operators,

• foreign transport operators,

• global booking systems,

• embassies and consulates,

• cloud hosting or software providers.

By requesting international travel services from us, you understand that international transfer of relevant personal data may be necessary to complete your booking.

15. Data Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including:

• booking and travel administration,

• customer support,

• accounting and tax records,

• dispute handling,

• legal compliance,

• fraud prevention,

• enforcement of our rights.

Retention periods may vary depending on the type of booking, legal requirements, complaint history, and whether the records are needed for audit, tax, litigation, or regulatory purposes.

After the relevant period, data will be deleted, anonymized, or securely archived as appropriate.

16. Data Security

We take reasonable technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

• access controls,

• password protection,

• encryption where appropriate,

• secure payment channels,

• restricted staff access,

• supplier confidentiality arrangements,

• data minimization,

• secure backups,

• monitoring of website and system security.

No method of internet transmission or storage is completely risk-free, but we aim to apply appropriate safeguards proportionate to the nature of the data.

17. Your Rights

Subject to applicable UAE law and any lawful exceptions, you may have the right to request:

• access to your personal data,

• correction of inaccurate personal data,

• completion or updating of incomplete data,

• deletion of personal data in certain cases,

• restriction of processing in certain cases,

• stoppage of processing in certain cases,

• objection to certain processing,

• withdrawal of consent,

• transfer of your data where applicable,

• review of decisions based solely on automated processing, where applicable.

The UAE’s official platform expressly states that the law gives the owner of the data the right to request correction of inaccurate personal data and to restrict or stop processing of personal data. It also states that the law regulates cross-border transfers and protects individuals’ privacy.

18. How to Exercise Your Rights

To make a privacy-related request, contact us at:

Email: info@premiumdubai.ae
Phone: +971 5 2923 2311
Address: Unit 410, Fortune Tower, Cluster C, Jumeirah Lakes Towers, Dubai, UAE

Please include enough information for us to verify your identity and understand your request.

We may ask for:

• your full name,

• booking reference,

• ID information,

• proof of authority if acting for a minor or group,

• clarification of the request.

We may decline or limit a request where permitted by law, including where:

• the request affects the rights of others,

• legal retention duties apply,

• identity cannot be verified,

• the request is abusive or manifestly unfounded,

• the data must be retained for legal claims or regulatory compliance.

19. Automated Processing

We do not intend to make decisions producing serious legal effects solely by automated processing without human involvement, except where permitted by law and necessary for technical website or booking operations.

If we use automated tools for fraud screening, booking risk assessment, marketing segmentation, or service optimization, we will do so in a manner consistent with applicable law.

20. Third-Party Websites

Our website may contain links to third-party websites, booking engines, airline pages, hotel pages, visa portals, social media platforms, or payment providers.

We are not responsible for the privacy practices of third-party sites. You should review their policies separately.

21. Data Accuracy

You are responsible for ensuring that the personal data you provide to us is accurate, complete, and up to date.

If any traveler information changes after booking, you should notify us as soon as possible.

22. Personal Data Breach Response

If we become aware of a personal data breach affecting personal data under our control, we will assess the incident and take appropriate containment, remediation, and notification measures as required by applicable law and regulatory guidance.

23. Complaints

If you have concerns about how we handle your personal data, please contact us first using the contact details above.

If the issue is not resolved, you may have the right to raise a complaint with the competent UAE authority, subject to the applicable legal framework and procedures.

24. Changes to This Policy

We may amend this Privacy Policy from time to time to reflect changes in:

• law,

• regulatory guidance,

• business operations,

• website functionality,

• booking processes,

• security practices.

The updated version will be published on our website with a revised effective date.