Privacy Policy

At Oryx Routes, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. This Policy and any disputes arising out of it shall be governed by and construed in accordance with the laws of the United Arab Emirates.

1. Information We Collect

We collect information that you provide directly to us, which may include:

• Personal identification information (name, date of birth, passport details)
• Contact information (email address, phone number, mailing address)
• Travel information (itineraries, destinations, purpose of travel)
• Financial information (limited payment details for processing transactions)
• Documents required for visa applications
• Communication records when you contact our support team

2. How We Use Your Information

We use the information we collect to:

• Process your visa applications and provide our services
• Communicate with you about your applications and account
• Improve and personalize our services
• Comply with legal obligations
• Detect and prevent fraud or abuse
• Send you updates about relevant visa requirements (with your consent)

3. Information Sharing and Disclosure

We may share your information with:

• Government agencies and embassies (as required for visa processing)
• Service providers who perform services on our behalf (if mandatory)
• Legal and regulatory authorities (when required by law)
• Professional advisors (such as lawyers, accountants, and auditors)

We do not sell your personal information to third parties.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include encryption, secure server facilities, and regular security assessments.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

6. Your Rights

Under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations, you have the following rights as a data subject:

• Right of Access

  You may request confirmation of whether we are processing your personal data and obtain a copy of that data.

• Right to Rectification

  You may request correction of inaccurate or incomplete personal data we hold about you.

• Right to Erasure (“Right to be Forgotten”)

  You may request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful.

• Right to Restrict Processing

  You may request that we restrict processing of your personal data in certain circumstances (e.g., while accuracy is contested).

• Right to Object

  You may object to processing of your personal data for direct marketing, statistical surveys, or other grounds under the PDPL.

• Right to Data Portability

  You may request transfer of your personal data to another data controller in a structured, commonly used, and machine-readable format.

• Right to Withdraw Consent

  Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us using the details provided in Contact Us

7. International Data Transfers

We may transfer your personal data outside the UAE for visa processing purposes only if:

• The destination country provides an adequate level of data protection, as determined by the UAE Data Office; OR
• You have explicitly consented to the transfer; OR
• We have implemented appropriate safeguards (e.g., standard contractual clauses approved by the UAE regulator).

8. Cookies and Tracking Technologies

We use limited cookies and tracking technologies for essential functionality and analytics:

• Google Analytics: We use Google Analytics to understand how visitors interact with our website. This helps us improve our services and user experience. Google Analytics collects information such as your IP address, browser type, device information, and pages visited.
• Cloudflare Turnstile: We use Cloudflare Turnstile as a CAPTCHA service to protect our website from spam and abuse. Turnstile may collect and process certain data about your device and browsing activity to determine if you are a human user.
• Essential cookies: We use a limited number of cookies that are necessary for the website to function properly.

You can control cookie settings through your browser preferences. Please note that blocking some types of cookies may impact your experience on our website.

9. Third-Party Service Providers

We work with trusted third-party service providers who assist us in delivering our services:

• Stripe: We use Stripe as our payment processor. When you make a payment, your payment information is securely handled directly by Stripe. We do not store your full credit card details on our servers. Stripe may collect and process personal data as described in their Privacy Policy.
• Google: We use Google Analytics as mentioned above. Google processes your data in accordance with their Privacy Policy.
• Cloudflare: We use Cloudflare for website security and their Turnstile service for CAPTCHA verification. Cloudflare processes data according to their Privacy Policy.

We ensure that our third-party service providers maintain appropriate security standards to protect your personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and, where appropriate, via email.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our team at support@oryxroutes.com