Thuraya Travel Data Policy

At Thuraya Travel, your trust is our top priority. We are committed to safeguarding your personal data in compliance with the UAE Data Protection Law (PDPL) and global best practices. This Data Policy outlines how we collect, use, protect, and disclose your personal data.

1. Data Collection and Purpose of Use

We collect data only to the extent necessary for providing and improving our travel services. This includes data you provide directly, data collected automatically through your interactions, and data from third parties (with your consent).

1.1 Types of Data Collected

a. Personal Identification Data: Full name, nationality, gender, date of birth, Passport or Emirates ID number, contact information.

b. Travel Preferences and History: Booking history, seat and meal preferences, room types, loyalty program memberships.

c. Payment & Transaction Data: Billing address, masked card details, invoice/tax documentation.

d. Device & Usage Information: IP address, browser info, geo-location, OS and device type, interaction logs.

1.2 Purpose of Data Usage

Service Delivery, Customer Communication, Security & Compliance, Marketing & Personalization, User Support, Analytics & Performance

2. Data Sharing & International Transfers

We do not sell your personal data. We only share your data with third parties under strict confidentiality agreements and for legitimate service reasons.

2.1 Who We Share With

Travel Partners, Payment Gateways, Technology Providers, Government Authorities, Legal Advisors & Auditors.

2.2 International Data Transfers

Transfers adhere to UAE PDPL Chapter 4 using adequate jurisdictions, SCCs, or explicit user consent.

3. Data Protection & Storage

We apply strong physical, administrative, and technical safeguards to protect your data from loss, misuse, unauthorized access, or disclosure.

3.1 Storage Practices

Data stored in secure UAE or GCC cloud environments with encrypted backups and E2E encryption.

3.2 Security Measures

RBAC, MFA, firewalls, malware/DDoS protection, regular audits and penetration testing.

3.3 Retention & Deletion Policy

Booking records (5 years), active account data, marketing consents until revoked, deletions upon legal eligibility.

4. Your Rights Under UAE Law

Under the UAE Federal Data Protection Law, you are entitled to specific rights over your data:

4.1 Your Rights Include

Right to Access: Know what data we hold and how it’s processed

Right to Rectification: Request corrections to inaccurate or incomplete data

Right to be Forgotten: Request deletion when data is no longer necessary

Right to Restrict Processing: Temporarily limit processing in certain situations

4.2 Exercising Your Rights

Email: info@thurayatravel.ae, Phone: +971-600-500123, Online form (coming soon). Response within 30 calendar days.