Privacy Policy
Last updated: 13 October 2026 · 31 detailed sections
1. Introduction and data controller
This Privacy Policy explains how ESCAPADA TOURS collects, uses, stores, shares and protects personal information through its website, WhatsApp booking channel and tour operations. The full registered legal name of the responsible company, official privacy email and trade-licence details must be confirmed before final publication. Our contact number is +971 50 317 9993.
2. Scope
This policy applies to visitors, prospective customers, booking holders, accompanying guests, parents or guardians and people who contact us regarding excursions. Third-party websites, payment services, social media platforms and independent activity operators may have separate privacy notices.
3. Categories of information
Depending on your interaction, we may collect your name, email, telephone and WhatsApp number, preferred travel date, number of adults and children, selected tour and activities, booking reference, amounts, booking status, enquiries, messages and correspondence. We may receive basic technical logs such as browser type, IP address, request times and security events from service providers.
4. Information about children
A parent or guardian may provide a child's age category or details necessary for an activity. We aim to collect the minimum information necessary and do not intentionally invite children to provide personal information independently. Additional safeguards or guardian authorization may be required by law.
5. How we obtain data
Information may be provided directly through website forms, WhatsApp messages, telephone calls and interactions with our team, or generated when a booking is managed. Limited technical information may be collected automatically by our hosting and security infrastructure. We should not claim to collect information that is not actually enabled on the site.
6. Purposes of processing
We use personal information to answer enquiries, check availability, prepare quotations, confirm bookings, arrange transport and optional activities, notify guests of schedule changes, provide customer support, address safety incidents, process refunds or complaints, prevent misuse, maintain records and meet legal obligations.
7. Legal bases and permissions
We process information only where there is a lawful basis under applicable UAE data-protection requirements, which may include fulfilling a requested service, legal obligations, legitimate interests where permitted or consent where required. Consent for optional marketing or non-essential tracking is separate from accepting booking terms and should be freely given and withdrawable.
8. Website booking workflow
A website booking form may transmit your details to our booking backend and/or open a WhatsApp conversation. A submitted request is not necessarily a confirmed booking. We may contact you to verify information, provide a quote and confirm availability. The operational system should be tested to confirm exactly what information is saved and when.
9. Supabase booking database
ESCAPADA TOURS uses Supabase to manage booking-related data. The primary Supabase project database is hosted in Tokyo, Japan (ap-northeast-1). Records may include customer details, travel date, guest counts, activities, amounts and reservation statuses. Authorized staff can access relevant information through the administrative dashboard under assigned permissions.
10. International data transfers
Because the database is located in Japan, personal data may be processed outside the United Arab Emirates. Other hosting, communications or support providers may process information in additional locations. We will evaluate and implement applicable transfer safeguards and disclosures under UAE law; the location alone does not establish legal compliance.
11. Service providers and processors
We may share only necessary information with website hosting, Supabase, communications providers, transport companies, tour guides, optional activity operators, IT support and professional advisers, where appropriate. Providers should receive data only for legitimate purposes and be subject to suitable confidentiality, security and processing arrangements.
12. Independent third parties
WhatsApp and any external booking, payment, maps or social media service may independently process data under its own privacy terms. We encourage customers to review those terms. We do not control independent providers' separate processing decisions.
13. Payments and financial information
If payment is arranged, the method and processor will be communicated separately. Do not assume that this website directly stores bank card numbers. We should verify actual payment flows before publishing detailed payment-processing claims. Payment confirmations and accounting records may be retained for legitimate financial purposes.
14. Website hosting and logs
Hosting and network providers may process technical request logs for delivery, performance, abuse prevention and security. The exact logging, retention and subprocessor arrangements depend on current provider configuration and should be reviewed periodically.
15. Cookies and essential storage
Essential cookies or browser storage may be used to provide functionality, remember settings or maintain security. We should maintain an accurate cookie inventory rather than assume that every cookie is necessary. Browser controls may allow users to manage cookies, although disabling essential functionality may affect the website.
16. Analytics and advertising technologies
Google, Meta or other analytics and advertising tags must be listed here only if they are actually deployed. Non-essential analytics, advertising pixels and cross-site tracking should be subject to appropriate notice and consent where required. The business should maintain a current list of enabled technologies and a means to change preferences.
17. Marketing communications
We may send promotional messages only when legally permitted, using required consent or another lawful basis. Customers may ask us to stop marketing messages through the contact channel. Operational notices about an active booking are different from promotional communications.
18. Photography and video
Tour photographs and videos may include guests. We will seek any consent or authorization required to use identifiable individuals for advertising, especially children. Guests can contact us with concerns or requests concerning promotional images, subject to applicable rights and practical limits.
19. Security measures
We use reasonable organizational and technical measures appropriate to the data and risks, such as restricted staff access, authenticated administration, encrypted connections where configured, access review and incident response. No service can promise absolute security. Security settings and permissions should be checked regularly.
20. Staff access and confidentiality
Booking records should be accessible only to staff whose role requires them. Access permissions should be removed when staff no longer need them. Staff should not export, forward or use customer details for unrelated purposes. These are operational commitments that the business must actually implement.
21. Data retention
We keep personal information only for the period needed for booking management, accounting, complaints, legal claims, safety and regulatory obligations. Different categories may require different retention periods. A documented retention schedule and deletion process should be approved; no arbitrary fixed period is asserted here.
22. Deletion and anonymization
When records are no longer required, we aim to delete, de-identify or securely archive them as appropriate. Some information may need to be retained under law, for legitimate disputes or in backups for a limited period. Requests are reviewed against applicable exceptions.
23. Data accuracy
Please tell us if your name, phone number, passenger details or booking information changes. We take reasonable steps to correct inaccurate records when notified and when verification is appropriate.
24. Your privacy rights
Subject to UAE law and relevant exceptions, you may be entitled to information about processing, access, correction, deletion, restriction or objection, withdrawal of consent where applicable and other statutory rights. Requests may require reasonable identity verification to protect the customer.
25. Withdrawal of consent
Where processing relies on consent, you may withdraw that consent through our contact details. Withdrawal does not necessarily affect prior lawful processing or information we must retain for legal or contractual reasons. Essential booking communications may still be necessary to deliver a confirmed service.
26. Complaints and enquiries
For privacy questions or rights requests, contact ESCAPADA TOURS at +971 50 317 9993 and explain the request. We will assess it and respond in accordance with applicable law. You may also have the right to contact the competent supervisory or consumer authority.
27. Data incidents
If a security incident affects personal information, we will assess the risks, contain the incident and provide notifications to affected people or authorities where legally required. The business should maintain an internal incident-response process and designated contact.
28. Automated decisions and profiling
We do not describe any automated eligibility or pricing decision-making beyond features actually implemented. If significant automated decisions or profiling are introduced, we will update this policy and provide required information and rights.
29. Third-party links
Our website may link to maps, messaging platforms, activity operators and social media. Following an external link means you may be subject to that provider's separate privacy practices. We are not responsible for statements made in third-party privacy notices.
30. Policy changes
We may revise this policy when our operations, systems, providers or legal requirements change. The updated version will display its revision date. Where legally required, we will provide additional notice or obtain fresh consent.
31. Contact and office
ESCAPADA TOURS, Nehal Tower, Mezzanine Floor, Office 502, Al Najda Street, Al Danah, Abu Dhabi, UAE. WhatsApp: +971 50 317 9993. The business must verify its registered entity and add an official privacy email before final approval.
Contact: WhatsApp +971 50 317 9993 · ESCAPADA TOURS, Abu Dhabi, UAE.