1. Who We Are
City Tours UAE (“we”, “us”, “our”) is a tour operator based at Sarah Tower, Office No. 1, Maleha St, Muwaileh, Sharjah, UAE. We operate the website citytours.ae and related booking services.
If you have any questions about how we handle your data, please contact us at [email protected].
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: first name, last name, title.
- Contact data: email address, phone number, postal address.
- Transaction data: details about bookings and payments made.
- Technical data: IP address, browser type, device information, pages visited, and referring URLs.
- Marketing preferences: your preferences for receiving marketing communications from us.
- Communications data: records of correspondence if you contact us.
3. How We Collect Your Data
- Direct interactions: when you make a booking, fill in a form, or contact us by email or phone.
- Automated technologies: cookies and similar technologies when you visit our website (see our Cookie Policy).
- Third parties: payment processors, analytics providers, and booking platform partners.
4. How We Use Your Data
We use your personal data for the following purposes:
- To process and manage your tour bookings.
- To communicate with you about your bookings and respond to enquiries.
- To send you marketing communications where you have opted in.
- To improve our website, services, and customer experience.
- To comply with legal obligations.
- To detect and prevent fraud.
5. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Performance of a contract: processing is necessary to fulfil your booking.
- Legitimate interests: improving our services and preventing fraud.
- Consent: for marketing communications and non-essential cookies.
- Legal obligation: where required by UAE law.
6. Sharing Your Data
We do not sell your personal data. We may share your data with trusted third parties only where necessary to deliver our services, including:
- Payment processors (for handling transactions securely).
- Tour and activity operators (to fulfil your booking).
- IT and hosting providers (to maintain our systems).
- Analytics providers (to understand website usage).
- Regulatory authorities (where legally required).
All third parties are required to process your data securely and only for the purposes we specify.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Booking records are typically retained for 7 years in line with UAE commercial regulations.
8. Your Rights
Under applicable data protection law, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate data.
- Request erasure of your data (where applicable).
- Object to or restrict certain processing.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with a relevant data protection authority.
To exercise any of these rights, please contact us at [email protected].
9. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Payment transactions are encrypted using industry-standard SSL/TLS technology.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or by email. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions or requests, please contact: [email protected] or call +971 56 996 4924.