1
Introduction and Definitions
Nautical Vibes Dubai ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or interact with us.
Key Definitions: "Personal Data" means any information relating to an identified or identifiable individual. "Processing" covers any operation performed on personal data, including collection, storage, and deletion.
This policy complies with the UAE's Data Protection Law and other applicable regulations. By using our services, you consent to the practices described in this policy.
We collect various types of personal data to provide our services effectively:
| Data Category |
Examples |
Collection Method |
| Identity Data |
Full name, passport number, driver's license, nationality |
Booking forms, check-in process |
| Contact Data |
Email address, phone number, home address |
Website forms, booking systems |
| Financial Data |
Payment card details (securely processed), billing address |
Secure payment gateways |
| Health & Safety Data |
Medical conditions, emergency contact information |
Liability waiver forms |
| Technical Data |
IP address, browser type, device information |
Website analytics, cookies |
| Usage Data |
Service preferences, activity history, feedback |
Service records, surveys |
Sensitive Data: We only collect sensitive personal data (e.g., health information) when absolutely necessary for safety reasons, and with your explicit consent.
3
Purpose of Data Processing
We process your personal data for specific, legitimate purposes:
- Service Provision – To manage bookings, process payments, and deliver water sports services
- Safety & Compliance – To ensure participant safety and comply with maritime regulations
- Customer Support – To respond to inquiries and provide assistance
- Marketing – To send promotional offers (only with your consent)
- Legal Obligations – To comply with UAE laws and regulations
- Business Operations – To improve services and analyze usage patterns
We will never use your personal data for purposes incompatible with those described here without obtaining your additional consent.
4
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contractual Necessity: Processing necessary to fulfill our contractual obligations to you
- Legal Obligation: Processing required to comply with UAE laws and regulations
- Legitimate Interests: Processing for our legitimate business interests, balanced against your rights
- Consent: Processing based on your explicit, informed consent (which you may withdraw at any time)
- Vital Interests: Processing necessary to protect someone's life (emergency situations)
Reference: UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection
5
Data Sharing and Disclosure
We may share your personal data with trusted third parties in the following circumstances:
- Service Providers: Payment processors, IT service providers, and marketing agencies (under strict confidentiality agreements)
- Government Authorities: When required by law or for safety compliance
- Business Partners: Hotels and travel agencies (only with your consent for package deals)
- Legal Requirements: To comply with court orders or legal processes
- Emergency Services: Medical or emergency response teams in critical situations
We never sell your personal data to third parties for marketing purposes.
We implement comprehensive security measures to protect your personal data:
- Technical Measures: Encryption, firewalls, secure servers, and regular security updates
- Physical Measures: Secure premises, access controls, and locked storage
- Organizational Measures: Staff training, confidentiality agreements, and access limitations
- Procedural Measures: Regular security audits and incident response plans
Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security, but we commit to promptly notify you of any data breaches affecting your personal data as required by law.
7
International Data Transfers
As a Dubai-based company, we primarily store and process data within the United Arab Emirates. However, some service providers may be located outside the UAE.
When transferring data internationally, we ensure adequate protection through:
- Standard contractual clauses approved by relevant authorities
- Service providers certified under recognized privacy frameworks
- Your explicit consent for specific transfers
- Ensuring the receiving country provides adequate data protection
We maintain a record of all international data transfers and the safeguards implemented for each transfer.
8
Your Data Protection Rights
Under UAE data protection laws, you have the following rights regarding your personal data:
| Right |
Description |
How to Exercise |
| Access |
Request copies of your personal data |
Submit written request via email |
| Rectification |
Request correction of inaccurate data |
Update profile or contact us |
| Erasure |
Request deletion of your data |
Submit deletion request |
| Restriction |
Request limitation of processing |
Specify restrictions needed |
| Portability |
Receive your data in structured format |
Request data export |
| Objection |
Object to certain processing |
State objection reason |
| Withdraw Consent |
Withdraw previously given consent |
Use unsubscribe link or contact us |
9
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience.
Types of cookies we use:
- Essential Cookies: Necessary for website functionality
- Performance Cookies: Help us understand how visitors use our site
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used for targeted advertising (with your consent)
You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.
We do not use cookies to collect sensitive personal data without your explicit consent.
10
Policy Updates and Contact Information
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
Notification of Changes:
- We will notify you of significant changes via email
- The updated version will be posted on our website with a new "Last Updated" date
- Continued use of our services after changes constitutes acceptance
Data Retention Periods:
We retain personal data only as long as necessary for the purposes collected, including legal, accounting, or reporting requirements. Typical retention periods:
- Booking records: 7 years (for tax and legal compliance)
- Marketing consent: Until withdrawal of consent
- Customer service records: 3 years from last interaction
- Safety/medical data: 2 years from activity date
