Privacy Policy

1. Controller

Rate Extra Tourism L.L.C, Office 105-A75, Al Markaz Al Tejari 1 (Commercial Centre 1), Bur Dubai, Dubai, United Arab Emirates, is the controller for data collected through this Site and for its own contracting records. Contact: legal@rateextra.ae.

2. Data we collect

• Application data: company details, licence type and number, contact name, job title, business email, phone, products of interest, and the licence documents you upload (delivered to us by email).
• Contact messages: name, company, email, topic and message.
• Traveller data: names, contact details, travel documents and itinerary details that agencies submit to book products, processed on the agency's behalf.
• Technical data: a salted hash of your IP address and your browser's user agent on form submission, used for abuse prevention. We do not store raw IP addresses.
• Analytics: cookieless, aggregated web analytics without personal identifiers.

3. Purposes and legal bases

• Reviewing applications and onboarding agencies (pre-contractual steps and contract performance).
• Compliance checks: KYC/KYB and sanctions screening (legal obligation and legitimate interest).
• Delivering products booked for travellers (contract performance, on the agency's instructions).
• Responding to messages (legitimate interest).
• Security and abuse prevention (legitimate interest).
• Product updates, only with your opt-in (consent).

4. Applicable laws

We process personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, to the extent it applies to a particular agency or traveller, the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

5. Recipients and processors

• Vercel (hosting of this Site).
• Resend (email delivery of applications, messages and confirmations).
• Ahrefs Web Analytics (cookieless analytics).
• TravelDistro operations (fulfilment of API products).
• Safaryar Holidays (Sindibad Turizm Ticaret A.Ş.) for Hotel API bookings, as a separate contracting party.
• Professional advisers and authorities where required by law.

6. International transfers

Data may be processed in the United Arab Emirates, Türkiye, the European Union and the United States by the recipients above. Where required, transfers are protected by contractual safeguards.

7. Retention

Application and contracting records are kept for the duration of the relationship and as long as required by commercial and tax law. Personal fields in transfer bookings are anonymised 12 months after a booking closes; amounts and accounting records are kept. Contact messages are kept as long as needed to respond and for a reasonable period afterwards. Other retention periods are set in our internal retention schedule and are available on request.

8. Your rights

Subject to applicable law you may request access, correction, deletion, restriction, portability and may object to processing based on legitimate interest, or withdraw consent. Write to legal@rateextra.ae. You may also complain to the competent data protection authority.

9. Cookies

This Site uses only strictly necessary cookies and cookieless analytics. See the Cookie Policy.

• Cookie Policy: Essential Cookies Only

10. Changes

We may update this policy. The version and effective date at the top identify the current text.