At Aura Infinity SkyPool, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book tours online, or buy attraction tickets through our services.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account on our website
• Book tours online or buy attraction tickets
• Subscribe to our newsletter or promotional communications
• Contact our customer service team
• Participate in surveys, contests, or promotions
• Leave reviews or feedback about our services

The personal information we may collect includes:

• Contact Information: Name, email address, phone number, mailing address
• Account Credentials: Username, password, and security questions
• Payment Information: Credit card details, billing address, and transaction history
• Identification Documents: Passport information, visa details (when required for specific tours)
• Travel Preferences: Preferred destinations, interests, accessibility requirements
• Emergency Contact Information: For safety purposes during tours

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms when you connect your account
• Payment processors and financial institutions
• Marketing partners and analytics providers
• Tour operators and attraction venues
• Public databases and demographic information providers

2. How We Use Your Information

We use the collected information for various purposes to provide and improve our services:

2.1 Service Delivery

• Process and fulfill your bookings for tours and attraction tickets
• Send booking confirmations, tickets, and itinerary details
• Provide customer support and respond to your inquiries
• Communicate important updates about your reservations
• Facilitate payment processing and prevent fraud

2.2 Personalization and Marketing

• Customize your experience on our website based on your preferences
• Send promotional offers, including our special 50% discount for new customers
• Recommend tours and attractions that match your interests
• Provide personalized content and advertisements
• Send newsletters and updates about Dubai attractions and events

2.3 Business Operations

• Analyze website usage and improve our services
• Conduct market research and customer satisfaction surveys
• Detect and prevent fraudulent activities
• Comply with legal obligations and enforce our terms of service
• Maintain security and protect against unauthorized access

3. Data Sharing and Disclosure

We may share your information with third parties in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: To process your transactions securely
• Tour Operators: To fulfill your bookings and provide services
• Technology Providers: For website hosting, data storage, and analytics
• Marketing Partners: To deliver targeted advertisements and promotions
• Customer Service Platforms: To provide support and communication services

3.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your information.

3.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our terms of service and other agreements
• Protect the rights, property, or safety of Aura Infinity SkyPool, our users, or others
• Investigate and prevent fraud, security issues, or illegal activities

3.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Data Security

We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

4.1 Technical Safeguards

• Encryption: All sensitive data is encrypted using SSL/TLS technology during transmission
• Secure Servers: Data is stored on secure servers with restricted access
• Firewalls: Network security measures to prevent unauthorized access
• Regular Security Audits: Periodic assessments to identify and address vulnerabilities
• Access Controls: Limited employee access to personal information on a need-to-know basis

4.2 Payment Security

We use PCI-DSS compliant payment processors to handle all credit card transactions. We do not store complete credit card information on our servers. Payment data is tokenized and encrypted to ensure maximum security.

4.3 Employee Training

Our employees receive regular training on data protection and privacy practices. All staff members are bound by confidentiality agreements and understand the importance of safeguarding customer information.

5. Your Privacy Rights

You have certain rights regarding your personal information. Depending on your location, these rights may include:

5.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you
• Data Portability: Receive your data in a structured, commonly used format
• Information About Processing: Learn how we collect, use, and share your data

5.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Account Closure: Close your account and remove associated data

5.3 Control and Restriction

• Right to Object: Object to certain types of data processing, including marketing
• Right to Restrict: Limit how we use your personal information
• Withdraw Consent: Revoke previously given consent at any time

5.4 Marketing Preferences

You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Updating your communication preferences in your account settings
• Contacting our customer service team

Note: Even if you opt out of marketing communications, we will still send you transactional messages related to your bookings and account.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and collect information about your browsing behavior.

6.1 Types of Cookies We Use

6.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies (may affect website functionality)
• Receive notifications when cookies are set

6.3 Third-Party Analytics

We use third-party analytics services, such as Google Analytics, to understand how visitors use our website. These services may use cookies to collect information about your online activities across different websites.

7. Children's Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

For bookings involving minors, we require that a parent or legal guardian provide consent and complete the booking process. The adult booking the tour is responsible for the accuracy of all information provided, including information about accompanying minors.

8. International Data Transfers

Aura Infinity SkyPool operates in the United Arab Emirates. If you are accessing our services from outside the UAE, please be aware that your information may be transferred to, stored, and processed in the UAE and other countries where our service providers operate.

We ensure that international data transfers comply with applicable data protection laws by:

• Using standard contractual clauses approved by relevant authorities
• Ensuring adequate data protection measures are in place
• Obtaining your consent when required by law
• Implementing appropriate safeguards to protect your information

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9.1 Retention Periods

• Account Information: Retained while your account is active and for a reasonable period after closure
• Booking Records: Kept for 7 years for accounting and legal compliance purposes
• Marketing Data: Retained until you opt out or request deletion
• Website Analytics: Aggregated data retained indefinitely for business analysis
• Customer Service Records: Maintained for 3 years for quality assurance

9.2 Deletion Process

When we no longer need your information, we securely delete or anonymize it. Deletion methods include:

• Permanent removal from active databases
• Secure erasure from backup systems
• Anonymization for statistical purposes
• Physical destruction of paper records

10. Third-Party Links and Services

Our website may contain links to third-party websites, including social media platforms, tour operator sites, and attraction venues. This Privacy Policy does not apply to these external sites.

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit. When you click on third-party links, you leave our website and are subject to the privacy policies of those sites.

10.1 Social Media Integration

Our website includes social media features that may collect information about your visit and enable you to share content. These features are governed by the privacy policies of the respective social media platforms:

• Instagram
• Facebook
• Twitter
• Telegram

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have an account with us
• Display a prominent notice on our website
• Request your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

12. Special Offers and Promotions

As part of our commitment to providing exceptional value, we offer special promotions such as our 50% discount for new customers who book within one hour. When you participate in these offers:

• We collect information necessary to verify eligibility and prevent abuse
• Your participation data may be used for marketing analysis
• We may send you information about similar future promotions
• Promotional terms and conditions apply in addition to this Privacy Policy

13. Your California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Exercise your privacy rights without discriminatory treatment

To exercise these rights, please contact us using the information provided below. We will verify your identity before processing your request.

14. European Union Privacy Rights

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our obligations under booking agreements
• Legitimate Interests: To improve our services and prevent fraud
• Legal Compliance: To comply with applicable laws and regulations
• Consent: When you have given explicit consent for specific purposes

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving any privacy concerns promptly and transparently. When you contact us, please provide:

• Your full name and contact information
• A detailed description of your inquiry or request
• Any relevant account information or booking references
• Proof of identity (for data access or deletion requests)

We will respond to your inquiry within 30 days or as required by applicable law. For urgent matters, please call our customer service line during business hours.

Last Updated: December 15, 2024
Effective Date: December 15, 2024