RAS DEALS ("RAS DEALS", "we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website, make an enquiry, create an account, or book a tour with us. We process personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") and other applicable UAE regulations.
Data Controller: RAS DEALS, operated by Rukn Al Sahra Tourism L.L.C., holder of Dubai trade licence [Trade Licence No.], AL ZAHRAA TECHNO CENTRE 101, Dubai, United Arab Emirates. Email: info@rasdeals.com · Phone: +971 52 981 7405.
1. Personal data we collect
Depending on how you use our website, we may collect:
- Identity & contact data — your name, email address, phone/WhatsApp number and country.
- Booking & enquiry data — the tour selected, travel date, time slot, number of adults and children, package type and any message you send us.
- Account data — if you create an account, your email address and a securely hashed password (managed by our authentication provider). We never see or store your password in plain text.
- Technical & usage data — IP address, browser and device type, and pages viewed, collected via cookies and analytics tools.
- Marketing & measurement data — anonymised or hashed identifiers used to measure the performance of our advertising (see "Cookies & analytics").
2. How we use your data and our legal basis
- To process and confirm your bookings and enquiries — necessary to take steps at your request and perform our contract with you.
- To contact you about your booking (confirmation, changes, follow-up) — contractual necessity and our legitimate interest in serving you.
- To manage your account — contractual necessity and, where applicable, your consent.
- To improve our website and services, and for security and fraud prevention — our legitimate interests and, where relevant, legal obligations.
- For marketing and to measure our advertising — on the basis of your consent, which you may withdraw at any time.
Under the PDPL we process personal data only where we have a lawful basis: your consent, the performance of a contract, compliance with a legal obligation, or our legitimate interests. Where we rely on consent, it is freely given, specific and informed, and you can withdraw it at any time.
3. Cookies & analytics
We use cookies and similar technologies to make the site work, remember your preferences, and understand how visitors use it. With your consent, we also use Google Analytics and the Meta (Facebook) Pixel together with the Meta Conversions API to measure the performance of our advertising. These tools may set cookies and process technical identifiers. You can control cookies through your browser settings and, where offered, our cookie banner. Disabling cookies may affect some site features.
4. How we share your data
We do not sell your personal data. We share it only with trusted service providers who help us operate the website and serve you, under appropriate confidentiality and data-protection terms, including:
- Our secure database and authentication provider (Supabase), which hosts booking, enquiry and account data;
- Our email provider, used to send you booking confirmations and to notify our team of new bookings and enquiries;
- Analytics and advertising providers (Google, Meta) for the purposes described above;
- Our website host / content delivery network, which serves the site securely.
Some of these providers may process data outside the UAE. Where personal data is transferred abroad, we take steps to ensure an adequate level of protection consistent with the PDPL. We may also disclose data where required by law or a competent authority.
5. Data retention
We keep personal data only for as long as necessary for the purposes described above — for example, to deliver your tour, keep proper business records, and comply with legal obligations — after which it is securely deleted or anonymised.
6. How we protect your data
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. These include encryption of data in transit (HTTPS), row-level security controls on our database so that customer records are not publicly accessible, restricted staff access, and secure, industry-standard authentication.
7. Your rights under the PDPL
Subject to the conditions in the law, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data ("right to be forgotten") in certain circumstances;
- restrict or object to our processing of your data;
- request your data in a structured, machine-readable format (data portability);
- withdraw your consent at any time where we rely on it; and
- lodge a complaint with the UAE Data Office.
To exercise any of these rights, email us at info@rasdeals.com. We will respond within the timeframes required by law.
8. Children's privacy
Our website is intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian. Bookings for family tours are made by the responsible adult.
9. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised "Last updated" date.
10. Contact us
If you have any questions about this Privacy Policy or how we handle your data, contact us at info@rasdeals.com or +971 52 981 7405.