Privacy Policy

White Sky Travel & Tourism LLC (“White Sky Travel,” “we,” “our,” or “us”) is committed to protecting the privacy and personal data of every individual who visits our website at whitesky.travel, contacts us through any channel, or engages our travel services. This Privacy Policy explains how we collect, use, store, share, and protect your information, and describes the rights you hold over your personal data.

By accessing our website or using any of our services — including flight bookings, hotel reservations, UAE tourist visas, tour packages, travel insurance, UAE attractions, and related travel solutions — you acknowledge that you have read and understood this policy.

White Sky Travel & Tourism LLC is a licensed travel agency registered and operating in the United Arab Emirates. Our principal office is located at:

We are the data controller for all personal information collected through our website whitesky.travel and through our customer communication channels, including WhatsApp, telephone, and email.

We collect personal information necessary to provide our travel services and to communicate with you. The categories of information we may collect include:

Identity & Contact Information

• Full name, date of birth, nationality, and gender
• Passport number, expiry date, and a copy of your passport (for visa applications and flight bookings)
• Emirates ID (where required for UAE visa services)
• Email address, telephone number, and WhatsApp contact
• Residential or billing address

Travel & Booking Information

• Flight preferences, travel dates, departure and destination details
• Hotel preferences, room type, and special requests
• Tour package selections and itinerary details
• UAE attraction bookings and activity preferences
• Travel insurance requirements and beneficiary information
• Visa type, purpose of travel, and travel history (as required by immigration authorities)

Financial Information

• Payment method selection (Tabby, Tamara, UAE credit/debit card)
• Transaction references and booking confirmation numbers
• We do not store full card numbers; payment processing is handled by authorised third-party payment providers

Technical & Usage Data

• IP address, browser type, and operating system
• Pages visited, time spent on site, and referring URLs
• Cookie identifiers and session data
• Device information including screen resolution and language settings

Communications

• Enquiries submitted through contact forms, WhatsApp, or email
• Feedback, complaints, and correspondence records

We use your personal information only for legitimate purposes directly related to providing our travel services and operating our business.

Service Delivery

• Processing flight, hotel, and tour package bookings on your behalf
• Applying for UAE tourist visas, transit visas, and visa extensions
• Arranging travel insurance and UAE attraction tickets
• Coordinating inbound and outbound tour packages and transfers
• Processing payments through Tabby, Tamara, and UAE bank card facilities

Communication & Support

• Responding to enquiries and providing booking confirmations
• Sending important updates about your bookings or visa status
• Providing customer support before, during, and after travel

Legal & Regulatory Compliance

• Submitting required data to UAE immigration authorities (ICA / GDRFA) for visa processing
• Sharing necessary information with airlines, hotels, and tour operators to fulfil bookings
• Maintaining records as required by UAE commercial and regulatory law

Business Operations

• Improving the performance and usability of our website
• Analysing booking trends to enhance our service offerings
• Sending promotional communications (where you have opted in)
• Preventing fraud and ensuring the security of our systems

We process your personal data on the following legal grounds in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and applicable international data protection standards:

• Contractual necessity — to fulfil travel bookings, visa applications, and related services you request
• Legal obligation — to comply with UAE immigration, tax, and regulatory requirements
• Legitimate interests — to improve our services, prevent fraud, and manage our business operations
• Consent — for marketing communications and non-essential cookies, where required

We do not sell your personal data to third parties. We share your information only where necessary to deliver our services or comply with legal obligations, with the following categories of recipients:

Travel Service Providers

• Airlines and Global Distribution Systems (GDS) for flight ticketing
• Hotels, resorts, and accommodation providers for reservations
• Tour operators and ground handling agents for package tours
• UAE attraction operators for ticket bookings (Burj Khalifa, Global Village, Dubai Safari, etc.)
• Travel insurance underwriters and administrators

Government & Regulatory Bodies

• UAE immigration authorities (ICA, GDRFA) for visa and entry permit applications
• Relevant embassies and consulates for Schengen and international visa processing
• UAE tax and regulatory authorities as required by law

Payment Service Providers

• Tabby — for instalment payment processing (up to 12 months)
• Tamara — for flexible BNPL payment processing
• UAE-licensed payment gateways for credit and debit card transactions

Technology & Operations

• Website hosting and cloud service providers (data processed under strict confidentiality agreements)
• Communication platform providers (email and WhatsApp Business API)
• Analytics providers (aggregated, non-personally identifiable data)

All third parties with whom we share your data are required to handle it securely and in accordance with applicable data protection laws. We do not transfer personal data internationally without ensuring adequate safeguards are in place.

White Sky Travel offers flexible payment options to make travel accessible and convenient. All travel services — including flights, hotel bookings, visa packages, tour packages, travel insurance, and UAE attraction tickets — may be booked using:

• Tabby — Split payments into instalments over up to 12 months
• Tamara — Flexible, extendable payment terms tailored to your needs
• UAE Credit Card — EMI options available for up to 12 months through participating UAE banks

For card payments, we use PCI-DSS compliant payment gateways. Full card numbers are never stored on our systems or servers.

Our website uses cookies and similar technologies to ensure proper functionality, improve your browsing experience, and analyse website usage patterns.

Types of Cookies We Use

• Essential Cookies — Required for the website to function correctly. These cannot be disabled.
• Functional Cookies — Remember your preferences and settings for a better experience.
• Analytics Cookies — Help us understand how visitors use our site (e.g., Google Analytics). Data is aggregated and anonymised.
• Marketing Cookies — Used to deliver relevant advertisements and track campaign effectiveness. These are only placed with your consent.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law and regulations.

• Booking and visa records — Retained for a minimum of 5 years following completion of service, in line with UAE commercial record-keeping requirements
• Passport and identity copies — Retained for the duration of visa processing and deleted within 6 months of visa issuance or rejection, unless longer retention is required by law
• Customer communications — Retained for up to 3 years for quality assurance and dispute resolution purposes
• Financial transaction records — Retained for a minimum of 5 years as required by UAE financial regulations
• Website analytics data — Retained in aggregated, anonymised form for up to 26 months
• Marketing consent records — Retained until you withdraw consent or request deletion

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised.

White Sky Travel takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction, including:

• SSL/TLS encryption for all data transmitted through our website
• Access controls restricting staff access to personal data on a need-to-know basis
• Secure storage of physical documents at our licensed Dubai office premises
• Regular review of our data handling practices and security measures
• Staff training on data protection obligations and confidentiality

While we apply robust security measures, no method of transmission over the internet is completely secure. We encourage you to contact us immediately if you suspect any unauthorised access to your personal data.

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and where applicable, international data protection regulations, you have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your data where it is no longer necessary for the original purpose (subject to legal retention obligations)
• Right to Restrict Processing — Request that we limit how we use your data in certain circumstances
• Right to Data Portability — Receive a copy of your data in a structured, commonly used format
• Right to Object — Object to processing based on our legitimate interests, including direct marketing
• Right to Withdraw Consent — Withdraw consent for marketing or non-essential cookies at any time

To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to all valid requests within 30 days. We may need to verify your identity before processing certain requests.

Our website may contain links to third-party websites, including airline portals, hotel booking platforms, attraction websites, and payment platforms. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit through links on our site.

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. Where travel services are booked for minors (such as family tour packages), personal data relating to children is collected solely for the purpose of fulfilling the travel booking and is handled with the same care and security as all other personal data. Parents or guardians who believe we have inadvertently collected data relating to a child should contact us immediately for deletion.

White Sky Travel reserves the right to update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify customers by email or through a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website or services following any updates constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact us through any of the following channels. Our team is available daily from 8:00 AM to 8:00 PM (UAE time), 7 days a week.