Privacy Policy

1. Who we are

Shalihati is a platform for booking private chalets in the United Arab Emirates. It is owned and operated by FOR ALL TOURISM & TRAVELS L.L.C, a limited liability company licensed in Dubai (Commercial Licence No. 237285), with its registered office at Al Maktoum St., Al Reem Tower, G2, Ground Floor, Dubai, United Arab Emirates ("Shalihati", "we", "us", "our").

We are the data controller for the personal data described in this policy.

This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it. It applies to our website at shalihati.com and to our iOS and Android applications (together, the "Platform").

2. What we collect

2.1 Everyone who creates an account

• Name as you provide it
• Email address
• Mobile phone number, stored in international format
• Profile photo, if you choose to upload one
• Preferred language (Arabic or English)
• Account role, meaning whether you use the Platform as a guest, as a chalet owner (a "host"), or both

2.2 Guests

• Booking details: the chalet booked, check-in and check-out dates, and number of guests
• Payment records: the amount, currency, date, status, and a reference from our payment provider. We do not collect or store your full card number, expiry date, or CVV. Card details are entered directly with our payment provider and never reach our servers.
• Reviews and ratings you submit after a stay
• Messages you exchange with a host through the in-app chat, in connection with a booking
• Survey responses if you choose to complete our short post-stay questionnaire
• Saved favourites

2.3 Hosts (chalet owners)

• Listing information you enter, including titles and descriptions, house rules, capacity, amenities, pricing, and availability
• Property location, including the address and map coordinates you set
• Photographs of your property that you upload
• Identity verification documents that you submit so we can verify you are entitled to list the property and to receive payouts. This may include government-issued identification.
• Payout records, meaning the amounts owed and paid to you and their status
• Messages you exchange with a guest through the in-app chat, in connection with a booking

2.4 Collected automatically

• Device and technical data: device type, operating system, app version, browser type, and IP address
• Usage data: pages and screens viewed, searches performed, and features used
• Approximate location, only where you grant permission, to show chalets near you. You can refuse or withdraw this permission at any time in your device settings.
• Error and diagnostic reports when something goes wrong, so we can fix it

3. Why we use your data

We rely on the following grounds for processing: performance of our contract with you, our legitimate interests in operating and securing the Platform, compliance with legal obligations, and your consent where consent is required (for example, for optional location access).

4. Who we share it with

We do not sell your personal data.

4.1 Between guests and hosts

When a booking is confirmed, we share limited contact details between the guest and the host of that booking so the stay can proceed: the counterparty's name and phone number.

Before a booking is confirmed, we do not share contact details in either direction. Contact details are also not shown for cancelled bookings.

Hosts see the guest's name and the details of bookings on their own properties. Guests see the host's name and the chalet details.

In-app chat. Guests and hosts can message each other through the Platform about a confirmed booking. Those messages are stored so both parties and, where necessary for support or dispute resolution, our support team can access them. Do not share payment details or sensitive personal information in chat.

4.2 Service providers

We use carefully selected providers to run the Platform. They may process personal data on our behalf and only under instruction:

4.3 Legal and safety

We may disclose personal data where we are required to do so by law, by a court, or by a competent authority, or where disclosure is necessary to protect our rights, the safety of users, or to investigate fraud or abuse.

4.4 Business transfer

If our business or the Platform is sold or transferred, personal data may be transferred as part of that transaction. We will inform you if this happens and if it changes how your data is handled.

5. Where your data is stored

Our infrastructure providers may store and process data on servers located outside the United Arab Emirates. Where data is transferred outside the UAE, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable UAE law.

6. How we protect your data

Security is built into the Platform rather than added afterwards:

• Data is transmitted over encrypted connections and encrypted at rest by our providers
• Access to every record is restricted at the database level, so a user can only access their own data. A guest cannot see another guest's bookings, and a host can only manage their own listings.
• All payment and payout operations run on our servers. Client applications have no ability to modify financial records.
• We do not store card numbers
• Access to production systems is limited to authorised personnel

No system can be guaranteed completely secure. If a data breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.

7. How long we keep it

• Account data: while your account is active, and for a reasonable period afterwards
• Booking, payment, and payout records: as long as required for accounting, tax, and legal purposes under UAE law
• Host identity documents: as long as needed for verification and to meet legal obligations
• Chat messages: retained for the booking they relate to, and for a reasonable period afterwards to support dispute resolution
• Survey responses: retained in aggregate to improve the service
• Reviews: these may remain visible after an account is closed, shown without identifying details
• Diagnostic and usage data: for a limited period

When data is no longer needed, we delete it or anonymise it.

8. Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other applicable law, you may:

• Access the personal data we hold about you
• Correct data that is inaccurate or incomplete
• Request deletion of your data, subject to records we must retain by law
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent where we rely on it, without affecting processing already carried out
• Complain to the competent UAE data protection authority

You can update much of your information directly in the Platform under your profile. For anything else, contact us using the details in section 12. We will respond within the period required by law. We may need to verify your identity before acting on a request.

9. Cookies and similar technologies

On our website we use cookies and similar storage for:

• Essential purposes: keeping you signed in, security, and remembering your language
• Analytics: understanding how the site is used so we can improve it

Essential cookies are necessary for the site to work. You can control cookies through your browser settings, though disabling essential cookies will prevent you from signing in.

10. Children

The Platform is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. If we make a material change, we will notify you through the Platform or by email before it takes effect. The "last updated" date above always reflects the current version.

12. Contact us

For any question about this policy or about your personal data:

FOR ALL TOURISM & TRAVELS L.L.C

Al Maktoum St., Al Reem Tower, G2, Ground Floor, Dubai, United Arab Emirates

• Email: shalihati.support@foralltours.com
• WhatsApp: +971 50 214 5142
• Telephone: +971 4 584 4511
• Website: shalihati.com