Last Updated: October 2025
1. Introduction
Dubai Sands ("we," "our," or "us") operates the website dubaisands.ae (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with applicable laws, including the Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data in the United Arab Emirates.
2. Information We Collect
2.1 Information You Provide
We may collect information that you voluntarily provide to us when you:
- Contact us through email or contact forms
- Subscribe to our newsletter or updates
- Interact with our website features
- Participate in surveys or feedback forms
- Submit comments or reviews
- Request information about our services
This information may include:
- Personal identification information (name, title, organization)
- Contact information (email address, telephone number, postal address)
- Communication content (messages, inquiries, feedback)
- Preferences and interests related to Dubai tourism
- Any other information you choose to provide
2.1.1 Newsletter Subscription
If you subscribe to our newsletter, we collect your email address and may collect additional information such as your name and preferences to personalize the content we send you. You can unsubscribe at any time using the link provided in each newsletter.
2.1.2 Contact Forms
When you use our contact forms, we collect the information you enter, including your name, email address, subject, and message content. This information is used solely to respond to your inquiry and is stored securely.
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing behavior, including:
- Device Information: Internet Protocol (IP) address, device type, device identifiers, browser type and version, operating system, screen resolution
- Usage Information: Pages you visit, time spent on pages, clicks, scrolling behavior, search queries, interaction with website features
- Navigation Data: Referring website addresses (URLs), exit pages, clickstream data, browsing patterns
- Technical Information: Language preferences, time zone settings, connection speed, network information
- Timestamp Information: Date and time of your visit, session duration, frequency of visits
- Location Information: General geographic location derived from IP address (country and city level)
2.2.1 Log Files
Like many websites, we automatically gather certain information and store it in log files. These log files contain information such as IP addresses, browser types, Internet Service Providers (ISPs), referring/exit pages, operating systems, date/time stamps, and clickstream data. We use this information to analyze trends, administer the site, track user movements, and gather demographic information.
2.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. For detailed information about our use of cookies, please refer to our Cookie Policy.
3. How We Use Your Information
We use the collected information for various purposes:
- To provide and maintain our Service
- To respond to your inquiries and provide customer support
- To send you newsletters and updates (with your consent)
- To analyze website usage and improve our content
- To ensure website security and prevent fraud
- To comply with legal obligations
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Consent: When you have given clear consent for us to process your data for specific purposes
- Legitimate Interests: To improve our website, analyze usage patterns, and ensure security
- Legal Obligations: To comply with applicable laws and regulations in the UAE
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
5.1 Service Providers
We may employ third-party companies and individuals to facilitate our Service, provide services on our behalf, or assist us in analyzing how our Service is used. These third parties have access to your information only to perform these tasks and are obligated not to disclose or use it for any other purpose.
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
5.3 Business Transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
6. Google Services
Our website may use Google services, including:
- Google Analytics: To analyze website traffic and user behavior. Google Analytics uses cookies to collect anonymous information about how visitors use our website.
- Google Maps: To display interactive maps and location information.
These services are governed by Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption: We use industry-standard encryption technologies (SSL/TLS) to protect data transmitted between your browser and our servers
- Secure Storage: Personal data is stored on secure servers with restricted access and encrypted databases
- Access Controls: We limit access to personal information to authorized personnel who need it to perform their duties
- Regular Security Audits: We conduct regular security assessments and updates to identify and address potential vulnerabilities
- Firewall Protection: Our servers are protected by firewalls and intrusion detection systems
- Employee Training: Our staff receives regular training on data protection and security best practices
- Backup Systems: Regular backups are performed to ensure data availability and recovery capabilities
- Incident Response Plan: We have procedures in place to respond to potential data security breaches
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. While we strive to use commercially acceptable means to protect your personal information, you acknowledge that the Internet has inherent security risks, and we cannot guarantee the security of information you transmit to us.
7.1 Data Breach Notification
In the event of a data breach that may pose a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will inform affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our data retention periods are as follows:
- Contact Information: Retained for 3 years from the last interaction, unless you request earlier deletion
- Newsletter Subscriptions: Retained until you unsubscribe or request deletion
- Website Analytics Data: Retained in aggregated, anonymized form for up to 26 months
- Legal Obligations: Some information may be retained longer if required by UAE law or for legitimate business purposes
- Dispute Resolution: Information related to disputes or legal claims may be retained until the matter is resolved
When we no longer need your information, we will securely delete or anonymize it using industry-standard methods. Anonymized data that cannot be used to identify you may be retained for analytical purposes.
8.1 Data Deletion Process
Upon request or expiration of the retention period, we will delete your personal information using secure deletion methods that make the data unrecoverable. Backups containing your information will be deleted within our standard backup rotation schedule.
9. Your Rights
Under UAE data protection laws, you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal information under certain circumstances
- Right to Restrict Processing: Request limitation of how we process your information
- Right to Object: Object to processing of your information for certain purposes
- Right to Data Portability: Receive your information in a structured, machine-readable format
- Right to Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us using the contact information provided below.
10. International Data Transfers
Your information may be transferred to and processed in countries other than the UAE, including countries that may not have the same data protection laws. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
10.1 Transfer Mechanisms
When we transfer personal data outside the UAE, we use appropriate safeguards to ensure your data receives adequate protection, including:
- Standard contractual clauses approved by relevant data protection authorities
- Verification that recipients are located in countries with adequate data protection laws
- Binding corporate rules where applicable
- Certification schemes that demonstrate compliance with international data protection standards
10.2 Third-Party Service Providers
Some of our third-party service providers, such as Google (for Analytics and Maps), may process your data in countries outside the UAE. These transfers are governed by the privacy policies of these service providers, which comply with applicable data protection laws.
11. Children's Privacy
Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: [email protected]
- Address: Dubai Marina, Dubai, United Arab Emirates
- Phone: +971 4 981 0438
14. Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact our Data Protection Officer:
- Email: [email protected]
- Subject Line: Data Protection Inquiry
- Response Time: We aim to respond to all inquiries within 30 days
15. Supervisory Authority
If you believe that we have not adequately addressed your concerns about data protection, you have the right to lodge a complaint with the relevant supervisory authority in the UAE. For more information, please contact:
- UAE Data Protection Authority
- Website: [Relevant UAE authority website]
- Contact: [Relevant contact information]
16. Updates and Notifications
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons. We will:
- Update the "Last Updated" date at the top of this policy
- Notify users of significant changes via email (if you have provided your email address)
- Post a prominent notice on our website for material changes
- Provide advance notice when feasible for substantial changes
Your continued use of our Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
17. Your Responsibilities
You are responsible for:
- Providing accurate and up-to-date information when contacting us or using our services
- Maintaining the confidentiality of any account credentials or access information
- Notifying us immediately if you believe your personal information has been compromised
- Ensuring that any information you provide about third parties is done with their consent
18. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, including but not limited to:
- Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data
- UAE Federal Law No. 1 of 2006 on Electronic Commerce and Transactions
- Any other applicable UAE laws and regulations
Any disputes arising from this Privacy Policy will be subject to the exclusive jurisdiction of the courts of Dubai, UAE. If any provision of this Privacy Policy is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that this Privacy Policy shall otherwise remain in full force and effect.
19. Effective Date and Version
This Privacy Policy is effective as of October 2025 and replaces all previous versions. We recommend that you review this Privacy Policy regularly to stay informed about how we protect your information.