This document explains, in plain language, how to exercise your data protection rights with Book GCC Trip — what each right means in the context of a hotel booking platform, how to submit a request, what identity verification we may ask for, how long we aim to take, and when a request may be limited.
This is the practical companion to our UAE Personal Data Protection Compliance Statement and our GDPR Statement, which explain the legal frameworks these rights come from. For what personal data we collect and why, see our Privacy Policy.
Depending on your location and the applicable law, you may have the following rights over your personal data. Sections 3–9 explain each one in more detail.
You can ask us to confirm whether we hold personal data about you and to give you a copy of it — in practice, this typically means a summary of your account data and the booking and payment data associated with your account. We will also tell you the categories of data involved, why we process it, and who we share it with, consistent with our Privacy Policy.
If any personal data we hold about you is inaccurate or incomplete — for example, a misspelled name or an outdated phone number on your account — you can ask us to correct or update it. We will act on verified correction requests promptly. Note that correcting guest details on a booking already shared with a hotel may require us to notify the hotel of the update separately.
You can ask us to delete your personal data. We will do so unless we are required or entitled to keep some or all of it — most commonly, booking and payment records we must retain for a defined period to meet financial or legal record-keeping obligations. Where a full deletion is not possible, we will explain what we can delete now, what we must retain and for how long, and delete the remainder once the retention period has passed.
In certain circumstances — for example, while we are verifying a correction you have requested, or while a dispute about your data is being resolved — you can ask us to limit how we use your personal data rather than deleting it outright. We will let you know once the restriction is lifted or if it needs to continue.
You can object to certain uses of your personal data, such as processing based on our legitimate interests, or receiving marketing communications. Where you object to marketing, we will stop promptly. Where you object to other processing (for example, fraud-prevention checks), we will assess whether we have an overriding basis to continue and let you know the outcome.
Where applicable and technically feasible, you can ask us to provide certain personal data you gave us — such as your account or booking details — in a structured, commonly used, machine-readable format, or to have it transmitted directly to another provider you name.
Where we process your data based on your consent — for example, optional marketing communications or non-essential analytics cookies — you can withdraw that consent at any time, using the same method you gave it (such as an unsubscribe link, or your cookie preference settings) or by contacting us. Withdrawing consent does not affect the lawfulness of processing we already carried out before you withdrew it.
Send your request to support@bookgcctrip.com, describing which right you would like to exercise and any details that will help us locate your records, such as your account email address or a booking reference. There is no need to use a particular form of words — just tell us clearly what you would like us to do.
Because these requests can involve sensitive personal data, we will verify your identity before fulfilling them — typically by confirming details associated with your account or a recent booking. This protects your data from being disclosed to, or altered by, someone impersonating you. We will only ask for what is reasonably necessary to verify your identity.
We aim to respond to verified requests within 30 days. If a request is complex, involves a large volume of data, or we need more information from you to complete it, we will let you know and explain any expected delay. There is no fee for a reasonable, non-repetitive request; if a request is manifestly unfounded, excessive, or repetitive, we may ask for a reasonable administrative fee or decline to act on it, and will explain why.
Some requests cannot be fully honoured where the law requires us to keep certain data — most commonly, financial and booking records that must be retained for a defined period for tax, accounting, or fraud-prevention purposes. Where this applies, we will tell you what we can and cannot do, and for how long any retained data will be kept before it is deleted or anonymised in the ordinary course.
| Version 1.0 | Initial publication | 6 August 2026 |
Contact our support team at support@bookgcctrip.com or +971 54 339 3555 (09:00–18:00 UAE time, English; Arabic support planned for a future phase). If you are not satisfied with our response, see our Complaint Handling Procedure.