Legal

Privacy Policy

Effective date: 18 August 2026

1. Who We Are

DXB Lux Experiences ("we", "us", "our") operates the website at https://dxbluxexperience.com and provides luxury experience bookings in Dubai, United Arab Emirates. We are the data controller for the personal information described in this policy.

2. Information We Collect

We collect the following categories of personal data:

Identity documents — passport number, Emirates ID number and expiry, driving licence number and expiry date, nationality, date of birth, and full name. These are collected solely for driver verification on supercar rental bookings as required by our insurance and regulatory obligations.
Contact information — email address and phone number, used to send booking confirmations, verification status updates, and OTP codes.
Booking details — experience type, selected vehicle or package, rental dates, and payment reference.
Payment data — payment is processed by Stripe. We do not store card numbers or full payment credentials on our servers. We receive a booking reference and payment status from Stripe.
Technical data — IP address (hashed for rate-limiting), browser type, and pages visited, collected via Google Analytics 4 with your consent.

3. How We Use Your Information

To verify your eligibility to rent a supercar under UAE insurance requirements.
To process and confirm your booking and send you status updates.
To send one-time passcodes (OTP) to authenticate access to your booking status.
To comply with legal obligations under UAE law.
To improve our services using aggregated, anonymised analytics data.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance — processing necessary to fulfil your booking.
Legal obligation — identity verification required by UAE insurance and vehicle rental regulations.
Legitimate interests — fraud prevention, security, and service improvement.
Consent — analytics tracking, where you have accepted cookies.

5. Identity Documents — Special Notice

Passport scans, Emirates ID images, and driving licence images are sensitive personal data. We treat them with the highest level of care:

Document images are stored in an access-controlled database and are never publicly accessible.
Only authorised DXB Lux staff can view document images for verification purposes.
Document images are deleted within 90 days of the rental return date unless retention is required by law.
We do not share document images with third parties except as required by UAE law enforcement or regulatory authorities.

6. Data Sharing

We share your data only with:

Stripe — payment processing. Stripe's privacy policy applies to payment data.
Google — analytics (GA4), subject to your cookie consent.
Vehicle suppliers — your name, booking dates, and vehicle selection are shared with the relevant supplier to fulfil your booking.
Legal authorities — where required by UAE law.

We do not sell your personal data to any third party.

7. Data Retention

Booking records are retained for 5 years for accounting and legal compliance.
Identity document images are deleted within 90 days of the rental return date.
OTP codes and session tokens expire within 10 minutes and 24 hours respectively and are purged automatically.
Analytics data is retained per Google's standard GA4 retention settings (up to 14 months).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal retention obligations).
Object to or restrict certain processing.
Withdraw consent for analytics at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed authentication tokens, rate limiting, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take all reasonable precautions.

10. Cookies

We use cookies for analytics (Google Analytics 4) and essential site functionality. A cookie consent banner is displayed on your first visit. You may withdraw consent at any time by clearing your browser cookies.

11. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests, contact us at: [email protected]