Privacy & Data Protection

1. Introduction & Scope

Cappadocia Hot Air Balloon Dubai ("we," "us," or "our") operates with a commitment to transparency and the highest standards of data protection. This policy outlines our protocols regarding the collection, use, and safeguarding of personal information for guests engaging with our hot air balloon experiences in Dubai.

By using our services, you acknowledge the practices described herein. We adhere to the UAE Federal Law regarding the Protection of Personal Data and international best practices for tourism privacy.

2. Data Collection Methods

We collect information directly provided by you through our website, booking agents, or direct communications. This includes:

• Identity Data: Full name, nationality, and date of birth (required for flight manifests).
• Contact Data: Email address, mobile phone number, and hotel/residential address for pickup logistics.
• Health & Safety Data: Physical weight (essential for balloon load balancing) and any medical conditions or mobility restrictions that may affect flight safety.
• Event Data: Anniversary, birthday, or proposal details for personalized experiences.

3. Automated Data & Cookies

As you navigate our digital platforms, we may automatically collect technical data. This includes your IP address, browser type, time zone settings, and patterns of how you interact with our luxury offerings.

We utilize "Cookies" to enhance your browsing experience, remember your preferences, and analyze our website traffic to improve our service delivery. You may manage cookie preferences through your browser settings.

4. Purpose of Processing

Your personal data is processed exclusively for the following lawful purposes:

• Contractual Necessity: To fulfill your booking and provide the hot air balloon flight and associated services.
• Safety & Compliance: To comply with Dubai Civil Aviation Authority (DCAA) regulations and safety protocols.
• Customer Support: To provide real-time flight updates, weather alerts, and post-flight photography.
• Marketing: With your explicit consent, to share exclusive seasonal offers and desert stories.

5. Third-Party Disclosures

We do not sell, rent, or trade guest lists to third parties. Disclosure only occurs when strictly necessary:

• Service Partners: Logistics providers for hotel transfers and catering teams for desert breakfasts.
• Regulatory Bodies: DCAA or law enforcement agencies when mandated by the laws of the United Arab Emirates.
• Internal Analytics: Trusted software providers used for secure booking management and customer relationship administration.

6. Security Infrastructure

Our data protection measures are as rigorous as our flight safety checks. We employ SSL (Secure Sockets Layer) encryption for all online transactions and maintain firewalled servers to prevent unauthorized access. Our team undergoes regular training on data confidentiality and security best practices.

7. Data Retention Policy

We retain your information only for as long as necessary to fulfill the purposes outlined in this policy. Manifest and safety records are held in accordance with UAE aviation laws. Marketing data is retained until you withdraw consent or for a maximum of 24 months of inactivity.

8. Your Legal Rights

Under data protection frameworks, you hold the following rights regarding your information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your data when it is no longer required for legal or contractual purposes.
• Right to Withdraw Consent: Unsubscribe from marketing communications at any time.

9. International Transfers

As an international tourism provider, your data may be processed by systems located outside your home country. We ensure that all cross-border data transfers are protected by adequate safety standards and contractual clauses that mirror this Privacy Policy.