What we hold, and why.
This policy covers nwptrips.com. It is written to be read, not signed: if anything in it is unclear, write to us.
Last updated 5 October 2026The English version of this page prevails over any translation.
Who is responsible
NWP Travel and Tourism L.L.C-FZ, a free zone company licensed by Meydan Free Zone, Dubai, United Arab Emirates (Licence No. 2654499.01, Formation No. 2654499), is responsible for the personal data collected on this site. We handle it under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, for visitors in the European Union and the United Kingdom, the GDPR or UK GDPR as well.
Our other sites (experiencedubai.ae, dubaitransfers.ae and nwp.ae) have their own notices.
What we collect, and why
- The details you give in a request or message: your name, email address, phone number if you add one, the places, dates and travellers, and, for visas, passport nationality and country of residence. We use them to price and answer your request and to arrange what you then confirm.
- Messages you send us by email or WhatsApp, and our replies, so we can deal with your request and any later question.
- Payment details. When you pay by card, Stripe collects your card details on its own payment page. We receive confirmation that the payment succeeded or failed, never the full card number.
- Your currency, language and appearance choices, kept in cookies and in your browser so the site opens the same way next time.
- Your approximate country, read from your connection on your first visit, only to choose a currency to show prices in. It is not stored.
- The places and services you save or add to your trip, kept only in your browser until you send them to us as a request.
- Ordinary server logs (network address, page, time), used to keep the site running and secure.
Why we may use it
We use personal data to carry out what you ask us to do and to take steps at your request before a booking; to meet legal duties such as accounting and tax records; for our legitimate interests in running, securing and improving the site and answering questions; and, where we ask for it, with your consent, which you can withdraw at any time.
Who it goes to
A request is read by the people at our desk who answer it. When you confirm a booking, the details it needs go to the airline, hotel, transfer or activity operator or visa service named in your quote, and to no one else. Transfers and chauffeur services are delivered by licensed third-party operators that we engage; they receive only what they need to serve you.
We use these service providers (processors) to run the site:
- Vercel: hosting and Web Analytics.
- Supabase: the database behind our desk system, where requests are filed.
- Stripe: card payments.
- Our email provider: delivery of our messages to you.
- WhatsApp, if you choose to contact us there: your messages pass through WhatsApp under its own terms.
Analytics and advertising
The site uses Vercel Web Analytics, which is cookieless and does not build advertising profiles or follow you across sites. We do not sell personal data, and the site has no advertising trackers.
Where it is processed
Our service providers' servers may be outside the United Arab Emirates, including in the United States. We use them under their data-processing terms.
How long we keep it
- Booking records, and the payment and accounting records that go with them: at least five years, as UAE accounting law requires.
- Enquiries and requests that do not become a booking, and the correspondence about them: 24 months.
- Server logs and anything else: only as long as needed for the purpose they were collected for.
- Choices stored in your browser stay until you clear them.
Your rights
Under the PDPL, and under the GDPR or UK GDPR where they apply to you, you can ask for access to what we hold about you, have it corrected or deleted, object to or restrict its use, receive a copy of it in a portable form, and withdraw consent you gave. To use any of these rights, write to the privacy contact below from the email address you used, so we know it is you; we answer within the time the law allows. You can also complain to the data protection authority where you live, and in the UAE to the UAE Data Office.
Cookies
The site sets only functional cookies and no advertising cookies. Each one is listed in our Cookie Policy.
Changes
We update this policy when the site or the law changes. The date at the top is the date of the current version.