Privacy Policy

Last updated [July 2026]

This Privacy Policy explains how Galleria Tours FZCO collects, uses, stores, discloses and otherwise processes personal data in connection with its website, enquiries, quotations, reservations, travel arrangements, commercial partnerships and related services.
By accessing the website, submitting information or communicating with Galleria Tours, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject to applicable law. Where applicable law requires consent for a particular activity, Galleria Tours will seek that consent separately.

1. About Galleria Tours

Galleria Tours FZCO is an inbound and outbound tour operator registered in the Dubai Multi Commodities Centre, Dubai, United Arab Emirates.
In this Privacy Policy, “Galleria Tours,” “the Company,” “we,” “our” and “us” refer to Galleria Tours FZCO.

Company Galleria Tours FZCO
Address Office 812, Goldcrest Executive Tower, Cluster C, Jumeirah Lakes Towers, Dubai, United Arab Emirates
Email info@galleriatours.com
Website www.galleriatours.com

Where applicable, Galleria Tours acts as the controller of personal data collected directly by the Company.
In certain transactions, Galleria Tours may process information on behalf of a corporate client, travel agency, tour operator or another contracting party. In those circumstances, the relevant contracting party may be responsible for determining how the information is used.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through:

The Galleria Tours website
Online enquiry and partnership forms
Email communications
Telephone and WhatsApp communications
Quotations and booking requests
Contracts, invoices and payment records
Corporate and agency accounts
Supplier and commercial-partner relationships
Events, meetings and business communications
Customer-service and complaint procedures
Other interactions connected with our services

This Policy does not govern the independent processing practices of hotels, airlines, attractions, payment providers or other third parties

3. Information We May Collect

The information collected depends on the nature of the interaction and the services requested.
Identification and Contact Information

Full name
Email address
Telephone and WhatsApp number
Residential or business address
Nationality
Country of residence
Date of birth
Gender where relevant to a travel service
Company name
Job title
Corporate contact details
Signature

Travel and Reservation Information

Travel dates
Destination and itinerary information
Hotel and room preferences
Flight and transfer details
Passport information
Visa information
Traveller names and dates of birth
Nationality and residency information
Emergency-contact details
Loyalty-programme details
Rooming lists
Dietary requirements
Accessibility requirements
Medical information voluntarily disclosed when relevant to the requested service
Other information necessary to arrange or manage travel

Financial and Transaction Information

Billing information
Invoice details
Payment status
Bank-transfer references
Refund information
Transaction records
Fraud-prevention information
Corporate credit information where applicable

Complete card information may be collected directly by an authorised payment provider rather than by Galleria Tours. The payment provider’s own privacy and security terms will apply to its processing

Website and Device Information

Internet Protocol address
Browser type
Device type
Operating system
Approximate geographical location
Website pages accessed
Referring website
Date and time of access
Session information
Cookie and similar technology identifiers
Website performance and interaction information

Commercial and Partnership Information

Trade-licence and registration details
Ownership or authorised-signatory information
Company profile
Corporate references
Bank and settlement information
Contractual documentation
Rates and commercial terms
Tax information
Compliance and due-diligence documentation
Product and service information
Business correspondence
Estimated or historical transaction volume

Communications

We may retain records of communications with the Company, including emails, forms, messages, call notes, instructions, complaints, approvals and other correspondence.

Calls or electronic communications may be monitored or recorded where permitted by law and where reasonably required for training, security, quality assurance, dispute management or record-keeping. Any notification or consent required by law will be provided or obtained

4. How Information Is Collected

We may collect information:

Directly from you
From the person responsible for a group or booking
From a family member or travelling companion
From your employer or corporate travel department
From a travel agency or tour operator
From hotels, airlines and other travel providers
From payment and fraud-prevention providers
From public business sources
From professional advisers
Through website cookies and technical systems
From government or regulatory authorities where legally permitted
From another party involved in the requested transaction

5. Information About Other People

A person submitting information concerning another traveller confirms that they:

Are authorised to provide the information
Have informed the relevant person about the intended processing
Have obtained any consent required by law
Have ensured that the information is accurate
Are authorised to receive communications and make decisions relating to the booking where applicable

Galleria Tours is entitled to rely on this confirmation unless it has a reasonable basis to believe otherwise.

6. Purposes of Processing

We may process personal data to:

Respond to enquiries
Prepare quotations and itineraries
Assess availability and pricing
Create, confirm and manage reservations
Arrange accommodation, transportation, activities and other services
Communicate operational information
Coordinate with travel suppliers
Provide customer support
Manage changes, cancellations and refund
Process payments and invoices
Verify transactions
Prevent fraud and misuse
Manage corporate, agency and supplier accounts
Review partnership proposals
Perform due diligence
Negotiate and administer contracts
Maintain commercial records
Handle disputes and complaints
Establish, exercise or defend legal claims
Meet accounting, audit, tax and regulatory obligations
Protect the security of the Company, its systems and its users
Improve the website and business operations
Analyse service performance
Conduct internal administration
Communicate relevant products and commercial opportunities where permitted
Comply with lawful instructions from competent authorities
Carry out any other purpose reasonably connected with the original purpose of collection and permitted by law

7. Legal Grounds

Depending on the circumstances and applicable law, processing may be based on:
Your consent

Steps requested before entering into a contract

Performance of a contract

Compliance with a legal or regulatory obligation

Protection of legitimate interests

Protection of the rights and security of the Company or another person

Establishment or defence of legal claims

Protection of vital interests

Another lawful ground recognised under applicable legislation
Where processing is based on legitimate interests, the Company may consider its interests in operating, protecting and developing its business, managing contractual relationships, preventing fraud and maintaining accurate records.

8. Disclosure of Information

Galleria Tours may disclose relevant personal data to:

Hotels and accommodation providers

Airlines and aviation-service providers

Ground-transportation operators

Tour guides

Attractions and theme parks

Destination management companies

Restaurants and event venues

Cruise and yacht operators

Visa and document-processing providers

Insurance providers

Travel agencies and tour operators

Corporate clients responsible for the booking

Payment processors and banks

Technology, cloud, website and communication providers

Fraud-prevention and security providers

Accountants, auditors and professional advisers

Insurers

Debt-recovery providers

Legal representatives

Government, immigration, judicial or regulatory authorities

Prospective purchasers, investors or advisers in connection with a corporate transaction
Other parties where disclosure is necessary to provide the requested service or protect a lawful interest

The fact that information has been disclosed does not mean that the recipient acts on behalf of Galleria Tours. Independent suppliers may process information according to their own legal obligations and privacy policies.

9. International Processing

Travel arrangements frequently require information to be transferred outside the United Arab Emirates, including to countries whose data-protection standards may differ from those of the UAE.

By requesting an international service, you acknowledge that relevant information may need to be provided to suppliers, authorities and service providers in the destination, transit country or supplier location.

Where required by applicable law, Galleria Tours will use reasonable measures intended to support lawful international transfers. However, the Company cannot control the security systems or legal obligations of independent recipients, government authorities or travel suppliers.

10. Data Accuracy

You are responsible for ensuring that information provided to Galleria Tours is accurate, complete and current.

The Company is not responsible for consequences arising from information that is inaccurate, incomplete, fraudulent, outdated or submitted without authority, except to the extent such responsibility cannot lawfully be excluded.

You must notify us promptly if information relevant to an enquiry, booking, payment or travel arrangement changes.

11. Data Retention

Galleria Tours may retain personal data for as long as reasonably required to:

Provide and administer services
Maintain commercial and transaction records
Comply with legal, tax and accounting obligations
Respond to enquiries or complaints
Manage supplier or customer disputes
Prevent fraud
Enforce agreements
Establish or defend legal claims
Protect the Company’s legitimate business interests

Retention periods may vary according to the nature of the information, applicable contractual requirements and legal limitation periods.

Information may be retained for a longer period where a dispute, investigation, legal hold, unpaid balance, regulatory requirement or potential claim exists.
The Company may anonymise information instead of deleting it. Anonymised information that no longer identifies an individual may be retained and used for business analysis, statistical or operational purposes.

12. Security

Galleria Tours applies administrative, organisational and technical measures considered reasonable for the nature of the information processed.

However, no website, cloud system, email platform, mobile communication, electronic transfer or storage method is completely secure.

To the maximum extent permitted by law, Galleria Tours does not guarantee that information will never be accessed, intercepted, lost, altered or disclosed without authorisation.

Users are responsible for:

Protecting their devices and accounts
Using secure networks
Verifying recipients before sending documents
Avoiding transmission of sensitive documents through unsecured channels
Informing the Company promptly of suspected fraud or unauthorised communications
Verifying payment instructions through an official Galleria Tours contact

13. Electronic Communications

Email, messaging and internet communications may be subject to delay, interception, corruption, loss or unauthorised access.

Galleria Tours is not responsible for loss resulting from reliance on fraudulent or altered communications where the recipient failed to take reasonable verification measures, except to the extent such responsibility cannot lawfully be excluded.

Official payment instructions should be independently verified before funds are transferred.

The Company may retain communications as evidence of instructions, approvals, bookings, amendments and contractual arrangements.

14. Cookies and Analytics

The website may use cookies, pixels, analytics technologies and comparable tools for:

Essential website operation
Security
Session management
Performance measurement
Visitor analysis
Preference storage
Marketing measurement
Service improvement

Where required, non-essential cookies will be activated subject to the visitor’s consent.

Users may manage cookies through the website consent tool or browser settings. Disabling cookies may affect certain features.

Third-party analytics and social-media providers may collect information according to their own privacy policies.

15. Marketing and Business Communications

Galleria Tours may send marketing or commercial communications where:

Consent has been provided
There is an existing commercial relationship
The communication is reasonably relevant to a business contact
The communication is otherwise permitted by law

Recipients may request removal from promotional communications.

Unsubscribing from marketing does not prevent the Company from sending booking confirmations, payment notices, service updates, security notices or other non-promotional communications

16. Children and Minors

Travel bookings may include minors. Information about a minor must be provided by a parent, legal guardian or appropriately authorised adult.

Galleria Tours may request evidence of authority where reasonably necessary.

The Company does not knowingly request information from children for independent marketing purposes.

17. Your Rights

Subject to applicable law, verification requirements and legal exceptions, an individual may request:

Information regarding the processing of personal data

Access to eligible personal data

Correction of inaccurate information

Updating of incomplete information

Deletion in circumstances recognised by law

Restriction or suspension of certain processing

Transfer of eligible information

Withdrawal of consent where consent is the applicable ground

Objection to certain processing

Review of certain automated processing where applicable

A request may be refused, restricted or delayed where permitted by law, including where necessary to protect another person’s rights, preserve legal privilege, comply with retention obligations, prevent fraud, protect security or manage legal claims.

Galleria Tours may require proof of identity, authority and sufficient details to locate the relevant records.

The Company may communicate with the contracting customer, agency, employer or lead traveller where that party controls or submitted the relevant information.

18. External Websites and Third-Party Platforms

The website may link to external websites, booking platforms, payment providers, maps, social-media services or supplier pages.

Galleria Tours does not control and is not responsible for:

External website content
Third-party security
Third-party availability
Tracking conducted by third parties
Independent privacy practices
Information voluntarily provided directly to another organisation

Users should review the relevant third party’s terms and privacy policy.

19. Corporate Transactions

Personal data may be disclosed or transferred in connection with:

A restructuring
Investment
Merger
Acquisition
Sale of assets
Financing
Insolvency procedure
Transfer of business operations

Information may be shared with professional advisers and prospective transaction parties subject to appropriate confidentiality arrangements where reasonably available.

20. Changes to This Privacy Policy

The Company may amend this Privacy Policy at any time to reflect operational, technological, contractual or legal changes.

The updated version becomes effective when published on the website unless a later date is expressly stated.
Continued use of the website after publication constitutes acknowledgement of the updated Policy, but additional consent will be obtained where specifically required by law.

21. Contact and Complaints

Privacy-related requests should be submitted to Galleria Tours using the official contact details below.

Company Galleria Tours FZCO

Address Office 812, Goldcrest Executive Tower, Cluster C, Jumeirah Lakes Towers, Dubai, United Arab Emirates

Email info@galleriatours.com

Website www.galleriatours.com

The requester should include sufficient information to identify themselves, explain the request and identify the relevant interaction or booking.

Nothing in this Privacy Policy limits any non-waivable right available under applicable law.