This policy explains what personal data WonderWay L.L.C-FZ (“WonderWay”, “we”, “us”) collects when you use wonderway.uk or ask us to plan a journey, why we collect it, who sees it, and what choices you have. We are a company licensed in the Meydan Free Zone, Dubai, United Arab Emirates (licence no. 2653132.01), and we are the controller of the data described here. Our registered address is Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
WonderWay plans private journeys to Britain and Ireland. This website is for adults. By using it you accept this policy.
1. Information we collect and process
We collect the following, depending on whether you are a visitor, you have sent us a request, or you are our client.
| Category | Examples | Where it comes from | Why we use it |
|---|---|---|---|
| Contact details | Name, email address, telephone number, the city and state where you live | You, through the live chat, the journey quiz, email or telephone | To reply, arrange a call and plan your journey |
| Your preferences and messages | Quiz answers, your chat messages, preferred time for a call, the advisor you choose, the places and family history you want to explore | You | To design proposals that fit you |
| Traveller and booking details (clients) | Full names, dates of birth, passport details, dietary and mobility needs, health-related requirements | You, once you decide to book | To make the bookings and keep you safe while you travel |
| Payment records (clients) | Amounts paid, dates, the name on the payment | You, and our payments provider, Ebury | To take payments, pay suppliers and keep accounts |
| Device and usage data | Pages viewed, device and browser type, approximate location (country and city), how you arrived at the site, including the campaign or link | Automatically, through cookies and similar technologies, if you allow analytics | To keep the site working and secure, and to see which pages help |
Please do not put health details, passport numbers or payment card numbers in the live chat. If we need them to plan your journey, we will ask for them separately.
Sensitive information
Only for clients, we collect passport details and health-related needs, which the laws of some US states treat as sensitive. We use them only to arrange your journey and keep you safe, and we do not use them to build a profile of you.
Why the law lets us use your data
We use your data to carry out an agreement with you or to take steps you ask for before one, to meet legal obligations such as keeping accounting records, and for our legitimate interests in running a secure and useful site. Where the law requires your consent, we ask for it, and you can withdraw it at any time.
2. Disclosures of personal information
We do not sell your personal data, and we do not share it for advertising. We disclose it only to:
- Suppliers who deliver your journey: hotels, guides, drivers, restaurants, attractions and other local partners, and only as much as they need for your booking.
- Service providers that help us run WonderWay: tawk.to, which runs the live chat on our contact page and journey quiz; Ebury, for payments; Google Analytics, for site statistics; and the email, spreadsheet and hosting services we use to run the business. They may use your data only to provide their service to us.
- Our team and contractors. Our team works remotely from several countries, including the United Kingdom, Spain and Ukraine. They are bound by confidentiality and see data only as far as their work requires.
- Authorities and advisers, such as lawyers and accountants, where the law requires it, to protect our rights, or to get advice, under duties of confidentiality.
- A buyer or partner, if WonderWay is merged, restructured or sold. The new owner would be bound by this policy.
- Anyone else you ask us to, with your consent.
We may also share information that has been combined or stripped of anything that identifies you.
3. Advertising and analytics provided by others
We use Google Analytics to understand how the site is used. It runs only if you allow analytics in the cookie banner. Until you do, it is not loaded and sets no cookies. If you allow it, it sets cookies (_ga and _ga_*) and receives the usage data described above. We also keep in your browser how you found us: the campaign link or advert you followed (its utm_ tags and Google or Facebook click id), the website that linked to us and the page you arrived on. If you send us a request, this is sent with it.
You can change your answer at any time under “Cookie settings” at the foot of every page. Declining deletes what was kept. Strictly necessary cookies cannot be switched off. They are those tawk.to sets to keep a live chat connected, which load only when you start a chat, and the one that remembers your answer to the cookie banner for six months. We do not run advertising on the site, and we do not use interest-based advertising. You can also block or delete cookies in your browser settings. If you do, some parts of the site may not work.
4. Cross-border transfers
We are based in the United Arab Emirates. Your data may be processed there, in the United States, and in the European countries where our team and providers are located. These countries may have data protection rules different from those where you live, including countries without a rule equal to yours. Where we send data abroad, we use contracts and access controls to protect it.
5. Retention of personal information
We keep data only as long as we need it for the purposes above or the law requires:
- enquiries that do not become a booking: 24 months;
- records of journeys and payments: 7 years, because we must keep accounting records;
- analytics data: 14 months, as set in Google Analytics.
After that we delete the data or make it anonymous.
6. Security of personal information
We use reasonable administrative, technical and physical safeguards to protect your data, including access controls and secure providers. No online system is entirely secure, and we cannot promise it. If a breach affects you, we will tell you and the authorities as the law requires.
7. Your choices and rights
You can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct data that is wrong;
- delete it, or restrict or stop certain uses of it;
- give it to you in a form you can reuse;
- stop using data on the basis of your consent, by withdrawing that consent.
Email [email protected]. We will reply within 30 days. We may need to confirm who you are first. You may also ask someone to make a request for you, and we may ask for proof that they may. These rights come from the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where they apply to you, the laws of your US state. We do not currently send marketing email.
For California residents
If you live in California you may also ask us to tell you what categories of personal information we collected, used and disclosed in the past 12 months, to delete or correct it, and to limit how we use sensitive information. You have the right to opt out of the sale or sharing of your personal information, but we neither sell nor share it. We will not treat you differently for using your rights.
Do Not Track
Some browsers send a Do Not Track signal. We do not currently respond to these signals.
If you are not satisfied
You may complain to the UAE Data Office, or to the data protection authority or attorney general of your state.
8. Third-party links
The site may link to websites run by others. We do not control them and are not responsible for their content or privacy practices. Read their policies before you share anything.
9. Children
Our services are for adults. We do not knowingly collect data from anyone under 18. If you believe a child has sent us data, email [email protected]and we will delete it.
10. Changes to this privacy policy
We may update this policy. The date at the top shows when it last changed. If the changes matter to you, we will say so on the site. Using the site after a change means you accept it.
11. Contact us
WonderWay L.L.C-FZ
[email protected]
Registered address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Please write by email rather than by post. Our registered address is shared with other companies and is not staffed for correspondence.