SaveTravels Privacy Policy

Last updated: September 2025

1. Introduction

SaveTravels F.Z.C (“SaveTravels”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile application, or related services (together, the “Platform”).

By using SaveTravels, you acknowledge that your personal data will be handled in accordance with this Privacy Policy.

This Privacy Policy is designed in line with the requirements of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and is consistent with key principles of the EU General Data Protection Regulation (GDPR) to ensure a high and uniform standard of protection for all users.

2. Who we are 

SaveTravels F.Z.C is the data controller responsible for your personal data when you use our Platform. Registered address: Ajman Free Zone C1 Building, Ajman, UAE (License 38252).

Contact for privacy matters: info@savetravels.com.

We use trusted third-party technology and service providers to operate our booking engine, hosting, payment processing, and customer-support infrastructure. These providers act solely as data processors, under signed Data Processing Agreements, and are bound to follow our instructions and comply with applicable data protection laws.

3. What data we collect

We collect only the data necessary to deliver and improve our services. This may include:

-  Identification & contact: Name, email, phone number, country of residence

-  Account information: Username, password (encrypted), settings

-  Booking details: Hotel, car rental, or experience data, dates, traveller names, preferences

-  Payment data: Tokenised payment information, billing details (no full card numbers are stored by SaveTravels)

-  Device & usage: IP address, browser type, device identifiers, app logs

-  Communication data: Support messages, emails, feedback

-  Loyalty & gift cards: Points balance, redemption activity, gift recipient name/email

-  Corporate & access codes: Access code, employer or partner name (where applicable)

-  Optional data: Accessibility or health preferences if voluntarily provided

-  AI interaction data: Questions, preferences, and search inputs used for itinerary planning

We process any health/accessibility information you choose to provide only with your explicit consent or, where necessary to protect vital interests or fulfill your booking, under applicable law.

We may also receive limited information from partners or suppliers in connection with bookings made through the Platform.

4. How we use your data and legal basis

-  To process bookings, payments, and confirmations - Performance of contract

-  To manage your account and preferences- Performance of contract / legitimate interest

-  To provide loyalty rewards and gift card functionality - Performance of contract

-  To communicate with you about your bookings or account - Performance of contract / legitimate interest

-  To send marketing communications where you’ve opted-in - Consent

-  To prevent fraud, misuse, and ensure platform security - Legitimate interest

-  To improve and personalize our services, including AI recommendations - Legitimate interest (balanced)

-  To comply with tax, legal, or regulatory obligations - Legal obligation

We do not rely on automated decision-making that produces legal or similarly significant effects without human involvement.

5. How and when we share your data

We only share data where necessary, securely, and under strict contractual controls:

Travel suppliers – such as hotels, car rental companies, or experience providers, to fulfil your booking.Service providers / processors – who operate our technology infrastructure, payment systems, analytics, and customer support.Corporate partners – we may share aggregated and anonymised usage statistics to measure engagement, but never identifiable employee or user data unless required by law or with your explicit consent.Legal, regulatory, or enforcement authorities – when required to comply with law or to protect our rights.

All processors are bound by confidentiality and security obligations equivalent to UAE PDPL and GDPR standards.

6. International data transfers

Your information may be processed or stored outside the UAE (for example, within the EU or other countries where our service providers operate).

We ensure that any cross-border transfer complies with applicable law by using one or more of the following mechanisms:

Adequacy decisions recognized under the UAE PDPL or EU GDPR;Contractual clauses ensuring equivalent protection; orYour explicit consent where required.

You can request details of the specific safeguards in place by contacting us.

7. Data retention

We keep personal data only as long as needed for the purposes described above, or as required by law.

-  Account data: While active + up to 6 years (for legal claims or audits)

-  Booking and invoice data: 7 years (tax/accounting)

-  Customer support records: 3 years

-  Marketing consent records: Duration of consent + 2 years

-  Technical and analytics logs: 13–24 months (per vendor)

-  Fraud and risk data: Up to 7 years

After these periods, we delete or anonymise data securely.

8. Cookies and tracking technologies

Our Platform uses cookies and similar technologies to operate efficiently and improve your experience. We use:

Required cookies – essential for navigation and core features.Analytical cookies – to measure site usage (Google Analytics).Technical cookies – to manage sessions and secure access.Advertising cookies – from Google and Meta to deliver relevant offers.

You can manage or delete cookies through your browser settings. For more information, refer to our full Cookies Policy.

9. Security

We and our service providers apply administrative, technical, and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular monitoring.

All payment processing is handled through PCI-DSS compliant systems. SaveTravels itself does not store or have access to full card numbers.

10. Your rights 

Under the UAE Personal Data Protection Law (PDPL) and other applicable laws, you have the right to:

Access your personal dataRequest correction of inaccurate dataRequest deletion of data no longer neededObject to or restrict certain processingWithdraw consent to marketing at any timeRequest data portability (where feasible)

To exercise these rights, contact info@savetravels.com.

We may verify your identity before acting on a request and will respond within the legally permitted time.

You may also lodge a complaint with the UAE Data Office if you believe your rights have been violated.

11. Children 

SaveTravels is intended for users aged 18 and above.

Where bookings include minors, we process their data only as necessary to complete the booking and will not contact minors directly. Parents or guardians can exercise rights on behalf of minors.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by email or a notice on our Platform before they take effect.

The latest version will always be available on www.savetravels.com.

13. Contact us

For any questions, requests, or complaints about this Privacy Policy or how we handle your data, contact: info@savetravels.com.