Privacy Policy

1. Who is responsible for your data

DubaiTripHub operates the website at www.dubaitriphub.com and is the controller of the personal data described here.

2. What we collect

If you create an account

• your name;
• your email address, which is also your sign-in name;
• your mobile number, which we may verify by one-time code;
• your preferred language;
• your password — stored only as a cryptographic hash. We never store it in a readable form and cannot see it.

When you use the site while signed in

• the listings you save to your wishlist;
• enquiries you send to providers, including the message you write;
• a record of when you ask to see a provider's direct contact details.

Automatically, on every visit

• your IP address;
• the page you requested, the response status, and how long the request took;
• your account name, if you are signed in.

These server access logs exist to keep the site running and secure — diagnosing faults, investigating abuse, and enforcing rate limits. They are not used to build a profile of you.

What we do not collect

We do not take payments, so we never see or store card, bank or payment details. We do not ask for passport, Emirates ID or other identity-document numbers — if a visa service needs those, you provide them to that provider directly, not to us. We do not offer sign-in through Google, Facebook or any other social account, so we receive nothing from those services.

3. Why we collect it

• To give you an account — signing in, verifying your email and phone, and resetting a forgotten password.
• To pass on your enquiries — a provider cannot answer you without your message and a way to reply.
• To protect providers from spam — requiring a verified account before revealing a direct phone number is the reason we ask for one.
• To keep the site working and secure — logs, rate limits and account lockouts.
• To remember your preferences — your language and your saved wishlist.

We do not sell your personal data. We do not use it for advertising, and we do not send marketing email unless you have asked us to.

4. Who we share it with

• The provider you contact. When you send an enquiry, the provider receives your name, your email address and your message so they can reply. They are an independent business and handle your data under their own privacy policy. We share your details with a provider only when you choose to contact them.
• Our hosting and email suppliers. The site runs on hosted infrastructure, and account emails (verification, password reset, enquiry notifications) are sent through an email delivery service. These suppliers process data on our instructions only.
• Authorities, where the law requires it.

That is the complete list. We do not share your data with advertisers, data brokers, or any other third party.

5. Cookies

The site sets a small number of cookies, all of them necessary for it to work:

• Authentication — keeps you signed in as you move between pages. Set only once you sign in, and cleared when you sign out.
• Security (anti-forgery) — protects forms against cross-site request forgery.

We do not use advertising or tracking cookies. If website analytics are enabled in future, this section will be updated before they are switched on, and any cookie that is not strictly necessary will be introduced with a proper consent choice rather than silently.

6. How long we keep it

• Account data — for as long as your account is open. Ask us to close it and we delete or anonymise the account.
• Enquiries — retained as a record of the exchange. Note that once a provider has received your enquiry, their copy is theirs to keep, and deleting your account here does not remove it from their inbox.
• Server access logs — kept for a limited period for security and diagnostics, then rotated out.

7. Where it is stored

Your data is stored on servers used to run this website. Some of our suppliers — email delivery in particular — may process data outside the UAE. Where that happens we use suppliers that offer appropriate safeguards for the data entrusted to them.

8. How we protect it

• the whole site is served over HTTPS, so traffic between you and us is encrypted;
• passwords are stored only as salted cryptographic hashes;
• accounts lock temporarily after repeated failed sign-in attempts;
• sign-in, password reset and one-time-code endpoints are rate-limited against brute force;
• forms are protected against cross-site request forgery.

No system is perfectly secure. Please use a strong, unique password and tell us promptly if you think your account has been accessed by someone else.

9. Your rights

You can ask us to:

• show you the personal data we hold about you;
• correct anything inaccurate — you can edit your name and phone number yourself on your profile page;
• delete your account and the data attached to it;
• stop a particular use of your data, where the law gives you that right.

Contact us using the details in section 12 and we will respond within a reasonable period. We may need to verify who you are before acting on a request — that protection is for your benefit.

10. Children

DubaiTripHub is intended for adults. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We will update this page when our practices change. The version published here is always the current one, and the "last updated" date at the top tells you when it changed. Where a change materially affects how we use your data, we will make that clear rather than relying on the date alone.

12. Contacting us

Questions about this policy, or a request about your data, can be sent through the contact page.

See also our Terms & Conditions and About pages.