Privacy Policy

1. Who this covers

This policy explains what Jebel Expeditions ("we", "us"), based in Dubai, United Arab Emirates, does with personal information collected through this website and through enquiries and bookings made with us. We are the controller of that information.

2. What we collect

• What you tell us. When you contact us by WhatsApp, email, phone or the enquiry form on this website: your name, email address, and optionally your phone number, the trip you're asking about, your preferred dates, party size, and whatever else you choose to include in your message.
• What you tell us when you book. Once a booking is confirmed we need more — passport details, date of birth, emergency contact, travel insurance details, and any medical, mobility or dietary information relevant to running the trip safely. We ask for this at the point it's needed, not before.
• What our servers record automatically. Standard web server logs: IP address, browser type, the pages requested and when. These are kept for security and troubleshooting.

3. Why we use it

• To answer your enquiry and give you the information you asked for.
• To arrange, run and support a trip you have booked — including passing what guides and local operators need in order to host you safely.
• To meet legal, licensing, insurance and accounting obligations.
• To keep the website secure and working.

We do not sell your personal information, and we do not use it for advertising. We will only send you marketing email if you have asked us to, and every such email will have an unsubscribe link.

4. Cookies and measurement

This website uses only the cookies it needs to function — a session cookie and a security token that protects forms against cross-site request forgery. We do not use advertising or social media tracking cookies, and we do not allow third-party advertising trackers on these pages.

We do not currently use analytics of any kind.

If that changes, we will update this section and the date at the top of this page before the change goes live.

5. Who else sees it

We share personal information only where it is needed to run your trip or operate the business:

• Guides, local operators, transport and accommodation providers for the trip you have booked — the details they need to host you, and no more.
• Service providers who run our infrastructure — website and database hosting, and Resend, who deliver the emails the enquiry form sends. They process information on our instructions and are not permitted to use it for their own purposes.
• Meta Platforms, if you choose to contact us on WhatsApp. Messages you send us there are handled under WhatsApp's own privacy terms as well as this policy. If you'd rather not, email or phone us instead.
• Authorities, insurers or medical services where the law requires it, or where it is necessary in an emergency to protect someone's safety.

6. Where it is held

Our website, database and email are run on service providers whose servers may be located outside the United Arab Emirates. Where information is transferred abroad, we take reasonable steps to ensure it remains protected to a comparable standard.

7. How long we keep it

Enquiries that don't lead to a booking are kept while there's a realistic chance you'll still travel with us, and then deleted. Booking records are kept for as long as accounting, tax, insurance and licensing rules require. Server logs are kept for a short period only.

8. Your rights

You can ask us to show you what we hold about you, correct it if it's wrong, delete it, or stop using it for a particular purpose — and where you gave us consent, you can withdraw it at any time. Email hello@jebelexpeditions.com and we'll deal with it. Some information we may have to keep, for example where accounting or insurance rules require it; if so, we'll tell you why.

These rights are given by UAE data protection law. If you're in the UK or the EU, you have equivalent rights under the UK GDPR and GDPR, including the right to complain to your local data protection authority.

9. Security

The site is served over HTTPS and access to booking records is limited to the people who need it. No system is perfectly secure, so please don't send us passport scans, card numbers or other sensitive documents unless we've asked you to and agreed how.

10. Children

We don't knowingly collect information about children except as part of a family booking made by a parent or guardian, who provides it on the child's behalf.

11. Changes

We'll update this policy when what we do changes, and the date at the top will tell you when it last happened.

12. Contact

Questions, requests or complaints about privacy: hello@jebelexpeditions.com, or see our contact page. Our terms and conditions cover the rest of the relationship.