Book GCC Trip
Legal

GDPR Statement

Effective date: 1 August 2026  ·  Last updated: 6 August 2026
Policy Version 1.0  ·  Policy Owner: Book GCC Trip

Book GCC Trip is a UAE-based platform, operated by a company licensed in Ras Al Khaimah, United Arab Emirates, with no establishment in the European Union or European Economic Area ("EU/EEA"). We nonetheless serve guests who are based in, or travelling from, the EU/EEA, and this statement explains how we approach their personal data.

We do not claim that the EU General Data Protection Regulation ("GDPR") applies to us generally as a matter of law simply because our platform is accessible from the EU/EEA or because some of our guests are EU/EEA residents. Where GDPR genuinely applies to specific processing as a matter of law, we comply with it; in addition, as our own voluntary standard, we extend GDPR-style rights and protections to EU/EEA-connected guests more broadly, as described below. This statement should be read together with our Privacy Policy and our Data Subject Rights procedure.

On this page
1. Definitions2. Our Jurisdictional Position3. When These GDPR-Style Commitments Apply4. Relationship to Our Privacy Policy5. Rights We Honour for EU/EEA-Connected Guests6. Lawful Bases We Rely On7. International Transfer Safeguards8. How to Exercise These Rights9. Limitations10. Changes to This Statement

1. Definitions

"GDPR":
Regulation (EU) 2016/679, the EU General Data Protection Regulation.
"EU/EEA-connected guest":
a guest who is resident in, or was located in, the EU/EEA at the time their personal data was collected.
"Personal Data":
as defined in our Privacy Policy — information relating to an identified or identifiable individual.

2. Our Jurisdictional Position

Book GCC Trip is not established in the EU/EEA, does not direct its services specifically at the EU/EEA market, and does not represent itself as generally subject to GDPR as a matter of law. Where a specific processing activity has a genuine legal nexus to the EU/EEA — for example, where GDPR's own territorial-scope rules apply to that activity — we comply with GDPR for that activity. This statement is honest about that distinction: it is not a blanket claim of GDPR applicability, and it is not a claim of any GDPR certification.

3. When These GDPR-Style Commitments Apply

As a matter of our own voluntary standard, we extend the practical rights and protections described in this statement to any guest who identifies themselves to us as an EU/EEA-connected guest and asks to exercise a GDPR-style right, regardless of whether GDPR strictly applies to the specific processing in question as a matter of law. We do this because we want EU/EEA guests to have a consistent, familiar standard of control over their data when booking with us.

4. Relationship to Our Privacy Policy

Our Privacy Policy identifies who is responsible for your personal data and sets out, in full, what we collect, why, who we share it with, how long we keep it, and how we secure it. This statement does not repeat that detail — it focuses on the GDPR-style rights we honour for EU/EEA-connected guests and how to exercise them.

5. Rights We Honour for EU/EEA-Connected Guests

For EU/EEA-connected guests, we honour the following GDPR-style rights, on the same practical basis described in our Data Subject Rights procedure:

  • Access — a copy of the personal data we hold about you and information about how we use it.
  • Rectification — correction of inaccurate or incomplete personal data.
  • Erasure — deletion of your personal data, subject to any retention we are required or entitled to keep.
  • Restriction — limiting how we use your personal data in certain circumstances.
  • Data portability — receiving certain data you provided to us in a structured, commonly used, machine-readable format, or having it transmitted to another provider, where technically feasible.
  • Objection — objecting to processing based on legitimate interests or to use of your data for marketing.

6. Lawful Bases We Rely On

For processing connected to EU/EEA guests, we rely on the same bases described in our Privacy Policy: performance of the contract with you (processing your booking), compliance with a legal obligation, our legitimate interests (such as fraud prevention and platform security), and your consent (such as marketing communications and optional analytics cookies).

7. International Transfer Safeguards

Personal data relevant to an EU/EEA-connected guest may be processed or stored outside the EU/EEA, including in the United Arab Emirates and by service providers located elsewhere. Where this occurs, we take reasonable steps appropriate to the circumstances — such as using providers that offer contractual or equivalent safeguards — to protect that data to a standard consistent with this statement and our Privacy Policy.

8. How to Exercise These Rights

Send your request to support@bookgcctrip.com, telling us which right you would like to exercise and, if relevant, why you consider yourself an EU/EEA-connected guest (for example, your EU/EEA residency). We may ask you to verify your identity before acting on the request. Our Data Subject Rights procedure sets out our response-time target and the limited circumstances in which a request may be restricted, such as where we must retain certain financial or booking records.

9. Limitations

This statement does not create rights broader than those described above, and does not affect the mandatory rights you may separately have under UAE law or another applicable law. We will assess and respond to each request based on the standard that genuinely applies to it, explaining our reasoning where we decline or limit a request.

10. Changes to This Statement

We may update this statement as our practices evolve. We will update the "Last updated" date above when we do.

Related policies
Privacy PolicyUAE Personal Data Protection Compliance StatementData Subject RightsComplaint Handling Procedure
Revision History
Version 1.0Initial publication6 August 2026
Questions or Complaints

Contact our support team at support@bookgcctrip.com or +971 54 339 3555 (09:00–18:00 UAE time, English; Arabic support planned for a future phase). If you are not satisfied with our response, see our Complaint Handling Procedure.