LEGAL
Privacy Policy
ISSUED BY
LAST UPDATED
Galleria Tours FZCO
19 October 2026
IN BRIEF
This Privacy Policy explains how Galleria Tours FZCO collects, uses, stores, discloses and otherwise processes personal data in connection with its website, enquiries, quotations, reservations, travel arrangements, commercial partnerships and related services.
By accessing the website, submitting information or communicating with Galleria Tours, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject to applicable law. Where applicable law requires consent for a particular activity, Galleria Tours will seek that consent separately.
CONTENTS
01
About Galleria Tours
02
Scope of This Policy
03
Information We May Collect
04
How Information Is Collected
05
Information About Other People
06
Purposes of Processing
07
Legal Grounds
08
Disclosure of Information
09
International Processing
10
Data Accuracy
11
Data Retention
12
Security
13
Electronic Communications
14
Cookies and Analytics
15
Marketing and Business Communications
16
Children and Minors
17
Your Rights
18
External Websites and Third-Party Platforms
19
Corporate Transactions
20
Changes to This Privacy Policy
21
Contact and Complaints
Section 01
About Galleria Tours
Galleria Tours FZCO is an inbound and outbound tour operator registered in the Dubai Multi Commodities Centre, Dubai, United Arab Emirates.
In this Privacy Policy, “Galleria Tours,” “the Company,” “we,” “our” and “us” refer to Galleria Tours FZCO.
Company: Galleria Tours FZCO
Address: Office 812, Goldcrest Executive Tower, Cluster C, Jumeirah Lakes Towers, Dubai, United Arab Emirates
Email: info@galleriatours.com
Website: www.galleriatours.com
Where applicable, Galleria Tours acts as the controller of personal data collected directly by the Company.
In certain transactions, Galleria Tours may process information on behalf of a corporate client, travel agency, tour operator or another contracting party. In those circumstances, the relevant contracting party may be responsible for determining how the information is used.
Section 02
Scope of This Policy
This Privacy Policy applies to personal data collected through:
-
The Galleria Tours website
-
Online enquiry and partnership forms
-
Email communications
-
Telephone and WhatsApp communications
-
Quotations and booking requests
-
Contracts, invoices and payment records
-
Corporate and agency accounts
-
Supplier and commercial-partner relationships
-
Events, meetings and business communications
-
Customer-service and complaint procedures
-
Other interactions connected with our services
This Policy does not govern the independent processing practices of hotels, airlines, attractions, payment providers or other third parties.
Section 03
Information We May Collect
The information collected depends on the nature of the interaction and the services requested.
Identification and Contact Information
-
Full name
-
Email address
-
Telephone and WhatsApp number
-
Residential or business address
-
Nationality
-
Country of residence
-
Date of birth
-
Gender where relevant to a travel service
-
Company name
-
Job title
-
Corporate contact details
-
Signature
Travel and Reservation Information
-
Travel dates
-
Destination and itinerary information
-
Hotel and room preferences
-
Flight and transfer details
-
Passport information
-
Visa information
-
Traveller names and dates of birth
-
Nationality and residency information
-
Emergency-contact details
-
Loyalty-programme details
-
Rooming lists
-
Dietary requirements
-
Accessibility requirements
-
Medical information voluntarily disclosed when relevant to the requested service
-
Other information necessary to arrange or manage travel
Financial and Transaction Information
-
Billing information
-
Invoice details
-
Payment status
-
Bank-transfer references
-
Refund information
-
Transaction records
-
Fraud-prevention information
-
Corporate credit information where applicable
Complete card information may be collected directly by an authorised payment provider rather than by Galleria Tours.
The payment provider’s own privacy and security terms will apply to its processing.
Website and Device Information
-
Internet Protocol address
-
Browser type
-
Device type
-
Operating system
-
Approximate geographical location
-
Website pages accessed
-
Referring website
-
Date and time of access
-
Session information
-
Cookie and similar technology identifiers
-
Website performance and interaction information
Commercial and Partnership Information
-
Trade-licence and registration details
-
Ownership or authorised-signatory information
-
Company profile
-
Corporate references
-
Bank and settlement information
-
Contractual documentation
-
Rates and commercial terms
-
Tax information
-
Compliance and due-diligence documentation
-
Product and service information
-
Business correspondence
-
Estimated or historical transaction volumes
Communications
We may retain records of communications with the Company, including emails, forms, messages, call notes, instructions, complaints, approvals and other correspondence.
Calls or electronic communications may be monitored or recorded where permitted by law and where reasonably required for training, security, quality assurance, dispute management or record-keeping. Any notification or consent required by law will be provided or obtained.
Section 04
How Information Is Collected
We may collect information:
-
Directly from you
-
From the person responsible for a group or booking
-
From a family member or travelling companion
-
From your employer or corporate travel department
-
From a travel agency or tour operator
-
From hotels, airlines and other travel providers
-
From payment and fraud-prevention providers
-
From public business sources
-
From professional advisers
-
Through website cookies and technical systems
-
From government or regulatory authorities where legally permitted
-
From another party involved in the requested transaction
Section 05
Information About Other People
A person submitting information concerning another traveller confirms that they:
-
Are authorised to provide the information
-
Have informed the relevant person about the intended processing
-
Have obtained any consent required by law
-
Have ensured that the information is accurate
-
Are authorised to receive communications and make decisions relating to the booking where applicable
Galleria Tours is entitled to rely on this confirmation unless it has a reasonable basis to believe otherwise.
Section 06
Purposes of Processing
We may process personal data to:
-
Respond to enquiries
-
Prepare quotations and itineraries
-
Assess availability and pricing
-
Create, confirm and manage reservations
-
Arrange accommodation, transportation, activities and other services
-
Communicate operational information
-
Coordinate with travel suppliers
-
Provide customer support
-
Manage changes, cancellations and refunds
-
Process payments and invoices
-
Verify transactions
-
Prevent fraud and misuse
-
Manage corporate, agency and supplier accounts
-
Review partnership proposals
-
Perform due diligence
-
Negotiate and administer contracts
-
Maintain commercial records
-
Handle disputes and complaints
-
Establish, exercise or defend legal claims
-
Meet accounting, audit, tax and regulatory obligations
-
Protect the security of the Company, its systems and its users
-
Improve the website and business operations
-
Analyse service performance
-
Conduct internal administration
-
Communicate relevant products and commercial opportunities where permitted
-
Comply with lawful instructions from competent authorities
-
Carry out any other purpose reasonably connected with the original purpose of collection and permitted by law
Section 07
Legal Grounds
Depending on the circumstances and applicable law, processing may be based on:
-
Your consent
-
Steps requested before entering into a contract
-
Performance of a contract
-
Compliance with a legal or regulatory obligation
-
Protection of legitimate interests
-
Protection of the rights and security of the Company or another person
-
Establishment or defence of legal claims
-
Protection of vital interests
-
Another lawful ground recognised under applicable legislation
Where processing is based on legitimate interests, the Company may consider its interests in operating, protecting and developing its business, managing contractual relationships, preventing fraud and maintaining accurate records.
Section 08
Disclosure of Information
Galleria Tours may disclose relevant personal data to:
-
Hotels and accommodation providers
-
Airlines and aviation-service providers
-
Ground-transportation operators
-
Tour guides
-
Attractions and theme parks
-
Destination management companies
-
Restaurants and event venues
-
Cruise and yacht operators
-
Visa and document-processing providers
-
Insurance providers
-
Travel agencies and tour operators
-
Corporate clients responsible for the booking
-
Payment processors and banks
-
Technology, cloud, website and communication providers
-
Fraud-prevention and security providers
-
Accountants, auditors and professional advisers
-
Insurers
-
Debt-recovery providers
-
Legal representatives
-
Government, immigration, judicial or regulatory authorities
-
Prospective purchasers, investors or advisers in connection with a corporate transaction
-
Other parties where disclosure is necessary to provide the requested service or protect a lawful interest
The fact that information has been disclosed does not mean that the recipient acts on behalf of Galleria Tours.
Independent suppliers may process information according to their own legal obligations and privacy policies.
Section 09
International Processing
Travel arrangements frequently require information to be transferred outside the United Arab Emirates, including to countries whose data-protection standards may differ from those of the UAE.
By requesting an international service, you acknowledge that relevant information may need to be provided to suppliers, authorities and service providers in the destination, transit country or supplier location.
Where required by applicable law, Galleria Tours will use reasonable measures intended to support lawful international transfers. However, the Company cannot control the security systems or legal obligations of independent recipients, government authorities or travel suppliers.
Section 10
Data Accuracy
You are responsible for ensuring that information provided to Galleria Tours is accurate, complete and current.
The Company is not responsible for consequences arising from information that is inaccurate, incomplete, fraudulent, outdated or submitted without authority, except to the extent such responsibility cannot lawfully be excluded.
You must notify us promptly if information relevant to an enquiry, booking, payment or travel arrangement changes.
Section 11
Data Retention
Galleria Tours may retain personal data for as long as reasonably required to:
-
Provide and administer services
-
Maintain commercial and transaction records
-
Comply with legal, tax and accounting obligations
-
Respond to enquiries or complaints
-
Manage supplier or customer disputes
-
Prevent fraud
-
Enforce agreements
-
Establish or defend legal claims
-
Protect the Company’s legitimate business interests
Retention periods may vary according to the nature of the information, applicable contractual requirements and legal limitation periods.
Information may be retained for a longer period where a dispute, investigation, legal hold, unpaid balance, regulatory requirement or potential claim exists.
The Company may anonymise information instead of deleting it. Anonymised information that no longer identifies an individual may be retained and used for business analysis, statistical or operational purposes.
Section 12
Security
Galleria Tours applies administrative, organisational and technical measures considered reasonable for the nature of the information processed.
However, no website, cloud system, email platform, mobile communication, electronic transfer or storage method is completely secure.
To the maximum extent permitted by law, Galleria Tours does not guarantee that information will never be accessed, intercepted, lost, altered or disclosed without authorisation.
Users are responsible for:
-
Protecting their devices and accounts
-
Using secure networks
-
Verifying recipients before sending documents
-
Avoiding transmission of sensitive documents through unsecured channels
-
Informing the Company promptly of suspected fraud or unauthorised communications
-
Verifying payment instructions through an official Galleria Tours contact
Section 13
Electronic Communications
Email, messaging and internet communications may be subject to delay, interception, corruption, loss or unauthorised access.
Galleria Tours is not responsible for loss resulting from reliance on fraudulent or altered communications where the recipient failed to take reasonable verification measures, except to the extent such responsibility cannot lawfully be excluded.
Official payment instructions should be independently verified before funds are transferred.
The Company may retain communications as evidence of instructions, approvals, bookings, amendments and contractual arrangements.
Section 14
Cookies and Analytics
The website may use cookies, pixels, analytics technologies and comparable tools for:
-
Essential website operation
-
Security
-
Session management
-
Performance measurement
-
Visitor analysis
-
Preference storage
-
Marketing measurement
-
Service improvement
Where required, non-essential cookies will be activated subject to the visitor’s consent.
Users may manage cookies through the website consent tool or browser settings. Disabling cookies may affect certain features.
Third-party analytics and social-media providers may collect information according to their own privacy policies.
Section 15
Marketing and Business Communications
Galleria Tours may send marketing or commercial communications where:
-
Consent has been provided
-
There is an existing commercial relationship
-
The communication is reasonably relevant to a business contact
-
The communication is otherwise permitted by law
Recipients may request removal from promotional communications.
Unsubscribing from marketing does not prevent the Company from sending booking confirmations, payment notices, service updates, security notices or other non-promotional communications.
Section 16
Children and Minors
Travel bookings may include minors. Information about a minor must be provided by a parent, legal guardian or appropriately authorised adult.
Galleria Tours may request evidence of authority where reasonably necessary.
The Company does not knowingly request information from children for independent marketing purposes.
Section 17
Your Rights
Subject to applicable law, verification requirements and legal exceptions, an individual may request:
-
Information regarding the processing of personal data
-
Access to eligible personal data
-
Correction of inaccurate information
-
Updating of incomplete information
-
Deletion in circumstances recognised by law
-
Restriction or suspension of certain processing
-
Transfer of eligible information
-
Withdrawal of consent where consent is the applicable ground
-
Objection to certain processing
-
Review of certain automated processing where applicable
A request may be refused, restricted or delayed where permitted by law, including where necessary to protect another person’s rights, preserve legal privilege, comply with retention obligations, prevent fraud, protect security or manage legal claims.
Galleria Tours may require proof of identity, authority and sufficient details to locate the relevant records.
The Company may communicate with the contracting customer, agency, employer or lead traveller where that party controls or submitted the relevant information.
Section 18
External Websites and Third-Party Platforms
The website may link to external websites, booking platforms, payment providers, maps, social-media services or supplier pages.
Galleria Tours does not control and is not responsible for:
-
External website content
-
Third-party security
-
Third-party availability
-
Tracking conducted by third parties
-
Independent privacy practices
-
Information voluntarily provided directly to another organisation
Users should review the relevant third party’s terms and privacy policy.
Section 19
Corporate Transactions
Personal data may be disclosed or transferred in connection with:
-
A restructuring
-
Investment
-
Merger
-
Acquisition
-
Sale of assets
-
Financing
-
Insolvency procedure
-
Transfer of business operations
Information may be shared with professional advisers and prospective transaction parties subject to appropriate confidentiality arrangements where reasonably available.
Section 20
Changes to This Privacy Policy
The Company may amend this Privacy Policy at any time to reflect operational, technological, contractual or legal changes.
The updated version becomes effective when published on the website unless a later date is expressly stated.
Continued use of the website after publication constitutes acknowledgement of the updated Policy, but additional consent will be obtained where specifically required by law.
Section 21
Contact and Complaints
Privacy-related requests should be submitted to Galleria Tours using the official contact details below.
Company: Galleria Tours FZCO
Address: Office 812, Goldcrest Executive Tower, Cluster C, Jumeirah Lakes Towers, Dubai, United Arab Emirates
Email: info@galleriatours.com
Website: www.galleriatours.com
The requester should include sufficient information to identify themselves, explain the request and identify the relevant interaction or booking.
Nothing in this Privacy Policy limits any non-waivable right available under applicable law.