Privacy Policy

Holidays Tours LLC, trading as Offsyte, decides how your information is used and is responsible for it. Our registered office is at Shop #35 Wilson Building B, 2nd December Street, Al Jafiliya, Dubai UAE. You can reach us about privacy at bookings@offsyte.ae.

We collect information you give us and information collected automatically when you use the website:

• Booking details: your title, name, email and phone number; the experience, date, time, option and number of travellers; your pickup and drop-off points; and any details the operator needs to run the experience, which for some experiences include nationality, date of birth, or passport number and expiry date.
• Payment details: your card is entered into a form provided by Stripe and goes straight to them. We receive the outcome and the amount, never your full card number or security code.
• Messages: what you send us by email, WhatsApp or phone, and any reason you give when you request a cancellation.
• Device and usage data: your IP address, browser and device type, time zone, the pages you view and the steps of a booking you reach.
• How you reached us: the website, search engine, campaign or advertisement that sent you, including any advertising click identifier in the link.

We use your information to:

• make, confirm and manage your booking, take payment and issue refunds;
• send your confirmation, voucher, tickets and updates about your booking, and answer your questions;
• let the operator, or us, contact you about your experience on the day;
• keep the website and bookings secure and prevent fraud and misuse;
• keep the records that accounting, tax and other laws require;
• understand how the website is used so we can improve it; and
• where you allow it, measure which advertising leads to bookings.

We do not sell your personal information. We share it only as needed to run your booking and our business:

• The operator of your experience, through our reservation system, Bókun: the details they need to run it, such as names, contact number, travellers, pickup point and any information they asked for.
• Stripe, which processes card payments and refunds under its own privacy policy.
• Service providers that work on our behalf, for website hosting, our booking database, email delivery and staff notifications, under confidentiality obligations.
• Google, Meta and Microsoft, for analytics and advertising measurement, as described below and only on the consent terms described there.
• Authorities, courts or advisers, where the law requires it or to protect our customers, our business or others.
• A buyer or successor, if the business is reorganised or sold, under the same protections.

We use some browser storage to make the website work: to remember your cookie choice, keep your place in a booking and remember answers such as your language. These are always on.

We also use optional analytics and advertising technologies. If you are in the European Economic Area, the United Kingdom or Switzerland, they stay off until you accept them. Elsewhere they are on unless you decline. Wherever you are, you can change your choice at any time with "Cookie settings" at the bottom of every page.

Google Analytics shows us how visitors use the website: the pages viewed and how far into a booking they get.

Microsoft Clarity records how pages are used, such as clicks, taps, scrolling and the pages you visit, so that we can find and fix what is confusing. Anything you type into a form is masked and never leaves your browser, and we also mask contact details, booking codes and pickup points where they appear. Clarity sets cookies of its own (such as _clck and _clsk). Microsoft's use of this data is described in the Microsoft Privacy Statement.

Our own visit log records the pages you view, how long each is open, how far into a booking you get, where your visit came from and your browser's time zone, which we use to estimate your country. It uses identifiers stored in your browser, never records what you type, and is not shared with any advertising platform. We keep individual visits for 120 days, after which only daily totals remain.

We also keep a cookie for up to 90 days that records how you first reached us, such as the site, campaign or advertisement, and store it with your booking so that we can see which channels bring bookings. It is not sent to any advertising platform.

If you arrive through a Google or Meta (Facebook or Instagram) advertisement, we keep the advertisement's click identifier, such as a gclid or fbclid, with your booking. Meta's pixel may also place an identifier in your browser (the _fbp cookie) on an ordinary visit.

Google's and Meta's tags in your browser receive the pages you view and the steps of a booking, including that a booking was completed and its value. When you complete a booking, Google's tag may also send your email address and phone number in hashed form: each is turned in your browser, before it is sent, into a one-way code that cannot be turned back into the original. Google uses these codes to match the booking to an advertisement you saw.

When a booking is confirmed, our servers may also report it: to Google, the advertisement's click identifier with the booking reference, value, currency and time; and to Meta, your name, email address and phone number in hashed form only, with Meta's click and browser identifiers and your browser's user agent. Our servers never send your name, email or phone number to Google in any form.

All of this happens only on the consent terms above: in the EEA, the UK and Switzerland only after you accept, and elsewhere only if you have not declined. We use this information only to measure and improve our advertising.

We are based in Dubai, United Arab Emirates. Some of our service providers, including Stripe, Bókun, Google, Meta and Microsoft, process information in other countries, such as the European Union and the United States. Where information leaves the UAE, we rely on those providers' contractual and security safeguards to protect it in line with this policy and applicable law.

We keep booking and payment records for as long as UAE accounting and tax law requires, currently at least five years after the booking. We keep messages for as long as they are needed to deal with your booking or request. Visit records are kept for 120 days and the attribution cookie for up to 90 days, as described above. After that, information is deleted or made anonymous.

The website runs over an encrypted connection, card details are handled by Stripe and never touch our servers, and a booking can only be opened with both its confirmation code and the email it was booked with. Our staff sign in to our systems with two-step verification. No system is completely secure, but we work to keep your information safe and will act promptly if something goes wrong.

Subject to the data protection law that applies to you, including the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, for visitors in the EEA and the UK, the GDPR, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or incomplete;
• delete your information, except where the law requires us to keep it;
• restrict or object to some uses of it; and
• stop optional analytics and advertising, which you can also do yourself with "Cookie settings".

Email bookings@offsyte.ae with your request. We may ask you to confirm your identity, for example with a booking's confirmation code, and we aim to reply within 30 days. If you are unhappy with our answer, you can complain to the data protection authority where you live.

Bookings must be made by an adult. We collect information about children only when the adult booking for them gives it, such as a child's age or the details an operator requires.

We may update this policy as our services or the law change. The current version is always on this page with its last-updated date.

Questions about this policy or your information? Contact us:

• Email: bookings@offsyte.ae
• Phone and WhatsApp: +971 4 589 0001
• On the day of your experience, at any hour: +971 52 343 5050
• Post: Holidays Tours LLC, Shop #35 Wilson Building B, 2nd December Street, Al Jafiliya, Dubai UAE