High Class Travel Experiences
Privacy Policy
Understand how High Class Experiences Travel LLC handles personal data across its customer service channels and bookings.
Controller and scope
The data controller is High Class Experiences Travel LLC, located at Office 1701, Burj Al Salam Tower, Trade Centre 1, Dubai, United Arab Emirates.
This policy describes the processing of personal data on the website, chat, WhatsApp, social media and bookings. Legal review is recommended before publishing or updating this policy.
Data collected
On the website, we may collect data submitted through contact areas, chat and cookies. On WhatsApp and social media, we may process name, number and messages. For bookings, we process travelers’ names, dates and preferences; the passport is requested only when required by the supplier.
Payments are processed through the payment gateway. The agency does not receive card data.
Purposes and legal bases
Data may be used to respond to inquiries and quotes, make bookings with suppliers, communicate during travel, send marketing subject to revocable consent, and comply with legal and tax obligations.
Processing is carried out according to the applicable legal basis, including consent, contract performance and compliance with legal obligations.
Conversational service
24-hour conversational service is available in the traveler’s original language. Natural questions are asked one at a time, and preferences are understood throughout the conversation. Conversations are recorded to provide the service and improve quality, and personal data are masked in technical logs where applicable.
When there is an intention to book, a request for a proposal, price, refund or emergency support, or an explicit request, the conversation is passed to a High Class team member in Dubai.
Sharing and transfers
We may share data with suppliers necessary for the trip, such as hotels, licensed DMCs, transport providers, attractions and insurers, as well as the payment gateway, infrastructure providers, service providers and authorities when required.
Data may be processed in the United Arab Emirates and by operators in other countries, with contractual safeguards where applicable.
Retention and rights
Leads and conversations may be retained for 24 months. Booking data are kept for the applicable legal and tax period. Passports are deleted 30 days after travel.
The data subject may request access, correction, deletion, portability, objection, withdrawal of consent and information about sharing via the service channels. Requests will be answered within 15 days. Minors’ data are provided by their guardians only for the booking.
Applicable laws and updates
Processing observes, according to the data subject’s residence and the applicable operation, the UAE PDPL, Brazilian LGPD, UK GDPR and GDPR, India’s DPDP Act 2023, Saudi Arabia’s PDPL and California’s CCPA.
This policy may be updated to reflect operational, legal or regulatory changes.