GDPR Policy

General Data Protection Regulation (GDPR) Compliance Policy

Last Updated: August 1, 2026

1. Introduction and Scope of GDPR Compliance

At uae.namebangla.com (referred to as “UAE Premium Travel,” “we,” “us,” or “our”), accessible from https://uae.namebangla.com, we are deeply committed to respecting the privacy, data protection rights, and digital freedom of all our users. As a world-class digital publishing portal providing expert insights into luxury resort bookings, premium indoor staycations, and VIP hotel rewards across the United Arab Emirates, we frequently attract international visitors, including residents and citizens of the European Economic Area (EEA), the United Kingdom, and Switzerland.

This General Data Protection Regulation (GDPR) Compliance Policy outlines our technical and legal commitment to Regulation (EU) 2016/679. Under the visionary leadership of our founder and managing director, Mizanur Rahman Hridoy, our platform adheres strictly to the highest global data privacy standards. This policy serves to transparently inform EEA residents about how their personal data is collected, processed, secured, and stored when they interact with our high-net-worth travel content, explore luxury staycation guides for the August-September 2026 travel season, or navigate third-party Online Travel Agency (OTA) recommendations.

2. Data Controller Details

For the purposes of the GDPR and applicable European data protection legislation, uae.namebangla.com acts as the “Data Controller” for the personal information collected directly through your interactions with our platform. This means that we determine the purposes and means of processing your personal data.

  • Data Controller Legal Entity: UAE Premium Travel (uae.namebangla.com)
  • Founder & Managing Director: Mizanur Rahman Hridoy
  • Corporate Headquarters: Level 41, Emirates Towers, Sheikh Zayed Road, Dubai, United Arab Emirates
  • Data Protection Officer (DPO) Email: support@uae.namebangla.com
  • General Privacy Inquiries: info@uae.namebangla.com
  • Business & Partnership Data Inquiries: business@uae.namebangla.com

3. Legal Bases for Processing Personal Data Under GDPR

Under Article 6 of the GDPR, we must have a legal basis to collect and process personal data belonging to individuals located in the EEA. Depending on how you interact with our luxury travel portal, we rely on the following lawful grounds for data processing:

A. Consent (Article 6(1)(a))

We process your personal data based on your explicit, affirmative consent when you voluntarily subscribe to our VIP luxury travel newsletters, consent to non-essential cookies via our consent management framework, or submit personal details through our contact forms to inquire about hotel reward status upgrades.

B. Legitimate Interests (Article 6(1)(f))

We process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental privacy rights. This includes optimizing website performance, maintaining firewall security, preventing programmatic ad fraud, measuring audience engagement on our luxury travel guides, and ensuring continuous site stability.

C. Compliance with Legal Obligations (Article 6(1)(c))

In certain circumstances, we may process or retain your personal data to comply with statutory legal duties, regulatory requirements in the UAE, or legitimate requests from law enforcement authorities.

4. Categories of Personal Data Collected and Processed

We believe in data minimization and collect only the personal information that is strictly necessary to deliver an exceptional, highly engaging browsing experience. The categories of data we process include:

  • Technical and Device Data: Internet Protocol (IP) address (anonymized or pseudonymized where required), browser type, operating system, language preferences, device identifiers, and referring web addresses.
  • Usage and Interaction Data: Pages visited on uae.namebangla.com, time spent on specific luxury resort articles, internal links clicked (such as our guides on Booking.com Genius Level 3, Expedia VIP, or Marriott Bonvoy), scroll depth, and interaction with programmatic advertising units.
  • Voluntary Contact Data: Your full name, email address, and message content when you initiate direct communication with info@uae.namebangla.com or support@uae.namebangla.com.
  • Geographic Location Data: Non-precise, broad geographical location inferred from your IP address (e.g., country or city level) to display relevant seasonal UAE travel information and currency values.

5. Comprehensive Breakdown of Your Data Subject Rights Under GDPR

If you are residing in the European Economic Area (EEA) or the United Kingdom, you possess extensive statutory rights regarding your personal data under Chapter III of the GDPR. Founder Mizanur Rahman Hridoy and the technical administration of UAE Premium Travel guarantee full compliance with the following rights:

1. The Right to be Informed (Articles 13 & 14)

You have the right to receive clear, transparent, and easily understandable information about how we collect, process, and protect your personal data. This GDPR Policy document fulfills that obligation.

2. The Right of Access (Article 15)

You have the right to request confirmation as to whether we are processing your personal data and to obtain a copy of the specific personal data we hold about you, alongside detailed explanations of our processing activities.

3. The Right to Rectification (Article 16)

You have the right to request that we correct or update any inaccurate, outdated, or incomplete personal information held in our records without undue delay.

4. The Right to Erasure / “Right to be Forgotten” (Article 17)

You have the right to request the complete deletion or removal of your personal data from our systems when there is no compelling legal or legitimate business reason for us to continue processing it.

5. The Right to Restrict Processing (Article 18)

You have the right to “block” or suppress further processing of your personal data under certain conditions, such as when you contest the accuracy of the data or object to our legal processing grounds.

6. The Right to Data Portability (Article 20)

You have the right to receive your personal data, which you provided to us, in a structured, commonly used, and machine-readable format (e.g., CSV or JSON) and to transmit that data to another data controller without hindrance from us.

7. The Right to Object (Article 21)

You have the absolute right to object at any time to the processing of your personal data based on our legitimate interests or for direct marketing purposes. Upon receiving an objection, we will cease processing your data unless we demonstrate compelling legitimate grounds that override your interests.

8. Rights Related to Automated Decision-Making and Profiling (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. uae.namebangla.com does NOT engage in automated decision-making that yields legal or contractual consequences for users.

6. How to Exercise Your GDPR Rights

Exercising your GDPR rights on uae.namebangla.com is simple, direct, and completely free of charge. If you wish to submit a Data Subject Access Request (DSAR), request data erasure, or object to any processing activities, please follow these steps:

  1. Send an official written request to our Data Protection Officer at support@uae.namebangla.com.
  2. State clearly in your email subject line the specific right you wish to exercise (e.g., “GDPR Data Access Request” or “GDPR Erasure Request”).
  3. Provide sufficient information to allow us to verify your identity. To protect user privacy, we cannot fulfill requests if we are unable to verify that you are the legitimate data subject.

In accordance with Article 12 of the GDPR, we will acknowledge receipt of your request promptly and respond in full within one (1) calendar month. If your request is particularly complex, we may extend this period by up to two additional months, and we will inform you of any such extension within the initial month.

7. International Data Transfers (EEA to UAE and Third Countries)

As uae.namebangla.com is headquartered in Dubai, United Arab Emirates, any personal data collected from EEA visitors may be transferred to, stored, and processed outside the European Economic Area. The UAE operates as a global hub for technology and commercial hospitality.

When transferring data outside the EEA, we ensure appropriate legal safeguards are in place pursuant to Chapter V of the GDPR. These safeguards include utilizing Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring our cloud storage and CDN providers maintain ISO/IEC 27001 certifications, and implementing robust end-to-end TLS/SSL encryption across all server communications.

8. Cookies and Consent Management Framework

To deliver a personalized, high-value experience, our platform utilizes cookies, web beacons, and tracking pixels. For visitors located in the EEA, we operate an explicit, GDPR-compliant Cookie Consent Management Banner.

  • Strictly Necessary Cookies: Essential for browsing, server load-balancing, and security. These are deployed automatically as they do not store personally identifiable data.
  • Analytics and Advertising Cookies: Require your prior, explicit opt-in consent before being activated. You may grant, customize, or revoke your cookie preferences at any time by clicking the “Cookie Settings” link located in our website footer.

9. Third-Party Processors and Programmatic Advertising

We partner with trusted third-party service providers to operate our platform, measure performance, and deliver high-value advertisements. These partners act as “Data Processors” under GDPR and are contractually bound to process data strictly in accordance with our instructions and legal privacy standards.

A. Programmatic Advertising Networks (Google AdX)

Our website utilizes Google Ad Manager (AdX) to serve relevant, non-intrusive advertisements to travelers interested in UAE luxury resorts and OTA hotel rewards (e.g., Jumeirah One, Agoda, GoZayaan Premium, Hilton Honors). In the EEA, ad serving complies fully with Google’s EU User Consent Policy, ensuring personalized ads are displayed only when valid consent is granted.

B. Online Travel Agencies (OTAs)

When you click on an external link pointing to Booking.com, Expedia, Marriott Bonvoy, or Radisson Rewards, you exit our platform. The processing of your data on those external platforms is governed by their respective GDPR privacy policies.

10. Data Retention and Archival Protocols

We adhere to a strict data minimization policy. Personal data collected for specific purposes will be retained only for as long as necessary to fulfill those purposes, manage administrative inquiries sent to info@uae.namebangla.com, or satisfy legal reporting requirements.

  • Server Log Files: Automatically purged or anonymized within 90 days.
  • Email Communications: Stored securely for up to 12 months for quality assurance and support verification, after which they are permanently deleted.
  • Consent Records: Retained for as long as necessary to demonstrate legal compliance with GDPR auditing standards.

11. Data Security and Breach Notification Protocol

Under the supervision of founder Mizanur Rahman Hridoy, we employ state-of-the-art technical, physical, and administrative security measures to protect your personal data against unauthorized access, loss, alteration, or destruction. Our infrastructure features enterprise-grade SSL encryption, secure web application firewalls (WAF), and regular vulnerability assessments.

In the unlikely event of a personal data breach that poses a high risk to your rights and freedoms, we will notify the appropriate Supervisory Authority within 72 hours of becoming aware of the incident, in accordance with Article 33 of the GDPR. Affected data subjects will also be notified directly without undue delay if required by law.

12. Right to Lodge a Complaint with a Supervisory Authority

While we encourage you to contact us first at support@uae.namebangla.com to resolve any privacy concerns or request fulfillment, you have the statutory right under Article 77 of the GDPR to lodge a complaint with a European Data Protection Supervisory Authority.

You may lodge a complaint with the Data Protection Authority (DPA) in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement if you believe that our processing of your personal data violates the GDPR.

13. Official Contact Information

For any questions regarding this GDPR Policy, your data rights, or our luxury travel publishing operations, please contact our administrative team at our headquarters:

  • Founder & Managing Director: Mizanur Rahman Hridoy
  • Entity: UAE Premium Travel (uae.namebangla.com)
  • Headquarters Address: Level 41, Emirates Towers, Sheikh Zayed Road, Dubai, United Arab Emirates
  • Data Protection Officer (DPO): support@uae.namebangla.com
  • General Inquiries: info@uae.namebangla.com
  • Business & Commercial Inquiries: business@uae.namebangla.com