Security Statement

This Security Statement describes, in general terms, the measures Book GCC Trip takes to protect your personal data, account, and booking information. It is written to be accurate and honest about what we do — it does not claim a specific certification or independently audited compliance status that we have not obtained, and it is not a guarantee that a security incident can never occur.

This statement should be read together with our Privacy Policy, which explains what data we collect and why, and our Terms and Conditions, particularly Section 24 (Account Security), which sets out the security responsibilities you share with us as an account holder.

1. Encryption in Transit

All traffic between your browser or app and Book GCC Trip is encrypted using HTTPS/TLS. This means data you submit — including account details, search activity, and booking information — is protected while it travels over the network between your device and our servers.

2. Access Controls

Access to systems holding personal or booking data is restricted to staff who need it to perform their role, using role-based access so that, for example, support staff and engineering staff see only the data their function requires. We review and adjust access as roles change, and remove access when it is no longer needed.

3. Payment Data Handling

Card details you enter at checkout are submitted directly to our payment service provider's own secure payment form and are handled by that provider, not by Book GCC Trip's own servers. Payment is collected through an authorised payment service provider on our behalf as described in our Payment Policy; we do not name a specific provider here because the provider used for a given transaction can vary. We receive confirmation that a payment has succeeded or failed, together with a reference token, rather than your full card number.

This describes how our checkout is configured, and reflects our payment service provider(s) being responsible for their own compliance with applicable payment-card industry standards for the systems they operate — it is not a certification we are making on our own behalf about our own systems.

4. Monitoring and Fraud Detection

We maintain logging and monitoring of our systems to help detect unusual activity, investigate issues, and support troubleshooting and security review. We also use automated and manual checks intended to flag bookings or account activity that may be fraudulent — see our Fraud Prevention section in our Terms and Conditions (Section 23) for how this can affect a booking.

5. Incident Response

If we identify, or are notified of, a suspected security incident affecting personal data, we investigate promptly, take reasonable steps to contain and remediate it, and, where legally required, notify affected individuals and the relevant authority in line with our obligations under applicable UAE law.

6. Your Part in Keeping Your Account Secure

Account security is a shared responsibility. You are responsible for keeping your account credentials confidential, choosing a password that is not reused from another service, and for all activity that occurs under your account, as set out in Section 24 (Account Security) of our Terms and Conditions. Notify us immediately if you believe your account has been accessed without your authorisation, so we can investigate and, where appropriate, suspend the account to protect you.

7. No Online System Can Guarantee Absolute Security

No online system can guarantee absolute security. We follow reasonable, honest security practices as described in this statement to protect your data, but we cannot promise that a security incident will never occur. This statement describes our approach; it is not a warranty and does not limit any right you have that cannot lawfully be excluded under applicable law.

8. Reporting a Security Concern

If you believe you have found a security issue affecting our platform, your account, or your data, please contact us at support@bookgcctrip.com so we can investigate. Please include enough detail for us to reproduce or understand the issue, and avoid accessing, modifying, or disclosing data that is not your own while reporting it to us.

Contact our support team at support@bookgcctrip.com or +971 54 339 3555 (09:00–18:00 UAE time, English; Arabic support planned for a future phase). If you are not satisfied with our response, see our Complaint Handling Procedure.