Privacy & Data Protection Policy
This Privacy Policy explains how Al Salama Tourism LLC collects, uses, retains, and protects personal data collected through our website in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
Policy Scope & Key Commitment
We are committed to safeguarding the privacy and fundamental rights of every visitor. This policy applies strictly to data submitted or collected through our website (such as our contact inquiry form, WhatsApp booking redirection links, and privacy-preserving website analytics). We process personal data strictly on lawful grounds recognized by UAE PDPL.
Statutory Framework & Data Controller
This Privacy Policy is formulated pursuant to Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (“UAE PDPL”) and its Executive Regulations, along with the directives of the UAE Data Office.
The designated Data Controller responsible for your personal data under this policy is:
Al Salama Tourism LLC
Head Office: Near Today Gift, Behind Ghazi Restaurant, Rolla, Sharjah, UAE
Branches: Dubai (Kenz Al Salama) • Ajman
Email: info@alsalamatourism.ae
Telephone: +971 6 565 5535
Categories of Personal Data We Collect
Under UAE PDPL, personal data refers to any information relating to an identified or identifiable natural person. Through your interactions with our website, we only collect data that you voluntarily provide or that is strictly necessary for website operation:
When you submit a question via our online message form, we receive your:
- Full Name
- Email address
- Phone number
- Inquiry details & message text
When using our pre-filled WhatsApp flight or hotel booking links:
- Preferred destinations & dates of travel
- Passenger count & travel class
- Name and phone number supplied in the template
- Any special preferences you opt to share
We use Vercel Analytics to collect aggregated, non-personally identifiable technical telemetry (e.g. browser type, device category, page views, and country of origin) to ensure optimal website performance and reliability. We do not use intrusive profiling cookies or sell tracking records.
Lawful Basis for Processing (UAE PDPL Articles 4, 5 & 6)
We process personal data solely where a legitimate legal ground under UAE PDPL exists:
- Explicit Consent (Articles 5 & 6): When you submit our contact form or contact us via WhatsApp, you provide affirmative consent for us to respond to your inquiry and communicate regarding requested services.
- Pre-Contractual Measures (Article 4): Processing details necessary to provide you with travel quotations, itinerary options, visa requirement overviews, or rate comparisons upon your direct request.
- Legal & Regulatory Compliance: Fulfilling mandatory statutory obligations established by UAE national regulatory authorities.
Purpose of Data Processing
Your data is processed strictly for the following purposes:
- Responding to customer inquiries, quote requests, and service questions.
- Facilitating flight, hotel, and visa consultations initiated through our website.
- Communicating important updates or changes related to your travel queries.
- Maintaining cybersecurity, preventing fraudulent submissions, and enhancing website reliability.
We never sell, lease, or rent your personal information to third parties for independent commercial marketing.
Third-Party Processors & Cross-Border Transfers (Articles 22 & 23)
To maintain our web infrastructure and facilitate direct customer support, we work with trusted service processors who act strictly in compliance with data privacy standards:
Provides contact form dispatch services. Inquiries sent via the website form are transmitted securely to our corporate inbox via encrypted API.
Our website generates pre-formatted links allowing you to open a direct WhatsApp chat. In doing so, communication is subject to WhatsApp's end-to-end encryption and terms.
Hosts our website and provides aggregate performance analytics without tracking personal visitor identities.
Where data is processed outside the UAE, we ensure transfers adhere to UAE PDPL Articles 22 and 23, ensuring an adequate level of data protection and contractual data privacy safeguards.
Data Retention & Security Measures
In adherence to the principle of storage limitation under UAE PDPL:
- Inquiry records are retained only as long as necessary to fulfill your request and address follow-up correspondence.
- If no commercial relationship or legal obligation follows, inquiry logs are periodically purged.
- We enforce technical safeguards, including HTTPS (Transport Layer Security 1.3), restricted administrative access, and strict organizational controls to protect personal data from accidental loss, unauthorized access, alteration, or disclosure.
Your Rights Under UAE PDPL
As a data subject under the UAE Data Protection Law, you have enforceable legal rights regarding your personal data:
Request confirmation of processing and obtain a copy of your personal data held by us.
Request the correction or completion of inaccurate or outdated personal data.
Request the deletion of your personal data when no longer required or if consent is withdrawn.
Request the suspension or restriction of processing in specific circumstances.
Receive your personal data in a structured, machine-readable format.
Object to automated processing or withdraw previously granted consent at any time.
How to Exercise Your Rights
To exercise any of your statutory rights under UAE PDPL or to ask questions regarding this policy, please contact our data administration desk:
Please specify “UAE PDPL Data Subject Request” in your email subject line. We will verify your identity and process your request within the statutory timeframe stipulated under the law (typically within 30 days).
Supervisory Authority
The statutory regulatory body overseeing personal data protection throughout the United Arab Emirates is the UAE Data Office. If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the competent UAE authorities.
Updates & Amendments
We may revise this Privacy Policy periodically to reflect changes in regulatory guidance or operational processes. Any revisions will be published on this page with an updated “Last Updated” date. We encourage visitors to review this page periodically.