Privacy Policy
Avangate Hospitality Services FZE (“Avangate”, “we”, “us”), Al Shmookh Business Center M 1003, UAQ Free Trade Zone Authority, PO Box 7072, Umm Al Quwain, United Arab Emirates, is the data controller for personal data collected through the websites and services we operate, including dubairentals.com, dubaidirectory.com, uaelaw.ai, saudi-law.ai, qatarlaw.ai, kuwaitlaw.ai, egyptlaw.ai, moroccolaw.ai and the other platforms in our portfolio (the “Services”). This policy explains what we collect, why, and the choices you have.
1. Data we collect
- Account and contact data — name, email address, phone number, company, password (stored hashed), and messages you send us.
- Payment data — payments are processed by Stripe. We receive the payment status, amount, currency, the last four digits and card brand, and billing name/country. We never receive or store your full card number.
- Transaction data — subscriptions, orders, bookings (including traveller names and dates where you make a booking), listings you create, invoices and receipts.
- Usage and device data — IP address, browser and device type, pages viewed, referring URL, approximate location derived from IP, and cookies or similar identifiers.
- Content you submit — reviews, listing details, documents or questions you upload or type into the Services, including questions put to AI features.
2. How we use it
- To provide, operate and secure the Services, and to complete purchases, bookings and subscriptions.
- To answer support requests, send service messages (receipts, renewal notices, booking confirmations, security alerts).
- To detect and prevent fraud, abuse and misuse, and to comply with legal, tax and accounting obligations.
- To improve and develop the Services, including analytics and testing.
- To send marketing about our own Services where you have opted in or where the law allows; you can opt out at any time via the unsubscribe link or by emailing us.
Where UAE Federal Decree-Law No. 45 of 2021 (PDPL), the EU/UK GDPR or similar laws apply, our legal bases are performance of a contract, our legitimate interests (running and protecting the Services), legal obligation, and consent where required.
3. AI features
Some Services use third-party large-language-model providers to generate answers or summaries. The text you submit to those features is sent to the provider to produce a response and is handled under our contracts with them; it is not used by us to identify you beyond what is needed to operate the feature. Do not enter passwords, card numbers or sensitive personal information into AI prompts.
4. Sharing
We share personal data only as needed to run the Services, with:
- Payment processing — Stripe.
- Suppliers that fulfil what you buy — for example hotels, airlines, car-rental companies and their booking systems, who receive traveller details required for the booking.
- Infrastructure and tooling — hosting (Vercel), databases (Supabase), email delivery (Amazon SES, Google Workspace), content delivery and security (Cloudflare), analytics and AI providers.
- Professional advisers and authorities where required by law, to enforce our terms, or to protect rights, safety or property.
- A successor business in the event of a merger, acquisition or asset sale.
We do not sell personal data.
5. International transfers
We are based in the UAE and use service providers in the United States, the European Union and elsewhere. Where data leaves your country we rely on the safeguards available under applicable law (such as contractual clauses) and on the providers' own security commitments.
6. Cookies
We use strictly necessary cookies (login sessions, security, preferences) and, on some Services, analytics cookies to understand how the site is used. You can control cookies through your browser settings; blocking necessary cookies may stop parts of a Service from working.
7. Retention
We keep personal data for as long as your account is active or as needed to provide the Services, and afterwards for as long as required for legal, tax, accounting or dispute-resolution purposes (transaction records are typically kept for at least five years under UAE commercial and tax law). Data no longer needed is deleted or anonymised.
8. Security
We use encryption in transit (TLS), access controls, hashed passwords and monitored infrastructure. No system is completely secure; if we become aware of a breach affecting your data we will notify you and the relevant authorities as required by law.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to a supervisory authority. To exercise any right, email info@avangate.tech or use the support form. We may need to verify your identity first and will respond within the time the law requires (normally within 30 days).
10. Children
The Services are not directed at children under 18 and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes
We may update this policy from time to time; the date at the top shows the current version. Significant changes will be announced on the relevant Service or by email.
12. Contact
Avangate Hospitality Services FZE · Al Shmookh Business Center M 1003, UAQ Free Trade Zone Authority, PO Box 7072, Umm Al Quwain, United Arab Emirates · info@avangate.tech · Support page