Privacy Policy

1. Introduction.

  • This data protection policy outlines the procedures of Yup Tours, also known as Yup Tours inbound tour operator LLC (referred to as “Yup Tours”), a registered entity in the commercial register of the Dubai Court and Department of Economy and Tourism under license number ————-, located in Dubai, United Arab Emirates. It regulates the handling of personal data obtained through contract fulfillment and website usage. As a tours and packages provider, the contract fulfillment mentioned refers to the acquisition of tours and products offered on our website, www.yuptours.com, and is closely linked to our terms and conditions.
  • Personal data refers to any information related to an identified or identifiable individual. This encompasses, for example, your name, your email address, and your IP address.
  • Yup Tours ensures the confidentiality and responsible handling of all data entrusted to it. We strictly follow legal regulations regarding the protection, lawful processing, and privacy of personal data, along with maintaining data security. This document outlines details about the collection of data, including its nature, scope, and purpose.

2. Data Collection 

2.1 Yup Tours may collect various types of data from customers, including but not limited to:

  • Data gathered during website visits, such as IP address, date and time of access, name and URL of accessed files, referrer URL, browser and operating system information, as well as the name of the internet service provider.
  • Personal information provided during contract initiation and/or fulfillment, like first name, surname, telephone number, email address, customer number, company registration number (if applicable), address, and contract details.

2.2 Yup Tours acquires information while delivering its services through two main methods: customers directly provide data (e.g. WhatsApp, Chat, and Meta Platforms), and data is also obtained through engagements with our website and booking systems.

3. The information will be utilized for the objectives specified here:

  • To ensure that we fulfill our responsibilities towards visitors of our website, we kindly request this information in accordance with Article 6(1)(b) of the UAE’s equivalent to the GDPR regulations. These provisions have been adapted to align with UAE law while also upholding the GDPR standards for our European clients.
  • Compliance with legal requirements: The processing of this data may be required to fulfill different legal obligations, including those stemming from the UAE’s Federal Tax Legislation, as outlined in Article 6(1)(c) of UAE law, to guarantee GDPR compliance for stakeholders in Europe.
  • Consent: Data processing is carried out in accordance with the purposes specified in the consent declaration to the agreed extent, under Article 6(1)(a) as tailored for the UAE context, while taking into account GDPR requirements for European clients, once consent has been obtained.

3.2 Yup Tours collects various data during website visits:

  • IP Address
  • Date and time of access
  • Name and URL of the accessed file
  • Browser, operating system, and the name of the access provider
  • Referrer-URL

The data is analyzed for the following purposes:

  • Data processing is essential for safeguarding our website’s smooth operation, deterring misuse, and enabling legal action when needed. This is driven by our legitimate interest in upholding a technically sound website and preventing abuse, as outlined in Article 6(1)(f) under UAE law, while also adhering to GDPR standards for our European users.
  • Consent: In the case of data processing, such as direct marketing through electronic messages (e.g. What’s App), the processing is in line with the purposes and scope of the given consent. This is in accordance with Article 6(1)(a) adapted to UAE legislation, while also ensuring GDPR compliance for European clients.

3.3 By using the contact or support form on our website, the details submitted through the inquiry form, along with the contact information provided, are retained for the purpose of processing inquiries. Submitting data is optional, as it helps us meet our (pre-)contractual obligations and serves our legitimate interest in maintaining a business relationship with you.

3.4 Social Media Plugins

  • Yup Tours has integrated plugins from social networks like Facebook and LinkedIn.
  • The service providers in the GCC Region are Facebook Ltd, located at Dubai Media City, Al Sufouh 2, Dubai. The Facebook HQ Building in Dubai Media City, Al Sufouh 2, Dubai is tailored to comply with UAE laws and GDPR regulations for European clients.
  • 3.4.3 These plugins can be recognized by their corresponding social media icons or the “Like” button and are only activated when you interact with them, ensuring that data transmission is not triggered prematurely.
  • Utilizing a plugin creates a direct link between your browser and the server of the social media provider, enabling them to track your site visit through your IP address. If you are signed in to a social media account, your visit may be associated with your profile.
  • When you engage with Facebook’s “Like” button while signed in to your Facebook account, you have the ability to link our page’s content to your profile. This allows Facebook to connect your visit to our page with your personal account.
  • Make sure to sign out of your social media accounts before accessing our website in order to avoid them collecting data on your visit.
  • For comprehensive information regarding privacy and data usage, kindly read Facebook’s privacy policy available at https://www.facebook.com/about/privacy. It is important to note that this policy has been carefully crafted to align with the General Data Protection Regulation (GDPR) for European users and has also been adapted to comply with UAE law.

4. Transmission of your personal data

  • The data you provide will be shared with third parties only if it is necessary for processing the ticket issuance, involving a third-party provider.
  • Personal data storage

Yup Tours places great importance on the privacy of our clients’ personal data, both within the United Arab Emirates and when transferring data across international borders. We are fully committed to complying with the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, as well as meeting our obligations under the General Data Protection Regulation (GDPR) for our European Union clients. To ensure the security of international data transfers, we have implemented the following measures:

  • For the specific purposes outlined in point 2, we will transmit your personal information to the following individuals or entities:
  • IT service providers used by us as processors;
  • Collection agencies; 
  • Contractors; 
  • Insurance companies
  • Legal representatives;
  • Tax advisors and auditors;
  • Competent administrative authorities;
  • Courts;
  • Adequacy Decision Personal data will be transferred to countries outside of the EU/EEA only if the European Commission has verified that the third country ensures an appropriate level of data protection.
  • Adequate Protections: If an adequacy decision is not present, we will transfer personal data only if appropriate safeguards are implemented to ensure data protection. These safeguards could involve standard contractual clauses endorsed by the European Commission or other legally recognized mechanisms.
  • In the absence of an adequacy decision or appropriate safeguards, the transfer of personal data to third countries will only take place with the explicit consent of the data subject. This consent will be sought on a case-by-case basis, ensuring transparency and the freedom to withdraw consent at any given time.
  • Our top priority is safeguarding the privacy rights of our clients, without being limited by geographical borders. We are fully dedicated to adhering to UAE regulations as well as global data protection norms, such as the GDPR.

5. Data Security 

  • The personal information gathered as outlined in section 2 of this privacy policy will be safeguarded by Yup Tours to prevent unauthorized access, use, or disclosure by external parties to the fullest extent possible.

6. Storage period

  • Yup Tours retains your personal data for the duration required to fulfill our contractual obligations to you. This includes abiding by data retention laws in the UAE, ensuring that necessary information for financial and tax compliance is securely stored in accordance with regulations. Typically, this retention period spans seven years to meet financial and tax-related requirements. Furthermore, personal data may be kept for a longer period in specific circumstances, such as until the end of our business relationship, resolution of legal issues, or throughout warranty and guarantee periods. This policy also covers the time needed to address damage claims and protect rights under copyright laws. Our data retention policy aims to balance your interests and legal responsibilities, ensuring compliance with UAE regulations while safeguarding the confidentiality and integrity of your personal information.

7. Legal Disclosure of Personal Data

Yup Tours has the authority to disclose personal information in specific circumstances to protect the rights of the company or to comply with legal obligations, in accordance with the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data in the UAE. This new regulation is in line with international data protection standards and highlights the importance of managing and safeguarding personal data with clear governance.