Privacy Policy

When you submit our contact form or otherwise communicate with us, we may collect the following categories of personal data:

• Identity data — full name and, where you choose to share it, title or company.
• Contact data — email address, telephone or WhatsApp number.
• Request data — the content of the message you send us, including any preferences, dates, locations or other lifestyle details you disclose.
• Technical data — IP address, device, browser and language settings, and pages viewed, collected automatically through standard web logs.

We ask that you do not submit special-category data (such as health, religious or biometric information) through the contact form. If such data is necessary to fulfil a request, we will collect it separately under appropriate safeguards.

We use personal data only for the purposes for which it was collected, namely:

• To respond to your enquiry and arrange the services you request.
• To manage our relationship with you as a member, client or prospect.
• To comply with legal, regulatory and licensing obligations in the UAE.
• To maintain the security and proper functioning of our website.

Our legal bases under the UAE PDPL include your consent (given when you submit the form), the necessity of processing for the performance of a contract or pre-contractual steps at your request, compliance with a legal obligation, and our legitimate interests in operating a private concierge business.

We do not sell personal data. We may disclose it to carefully selected third parties strictly to the extent required to deliver a service you have requested — for example, hotels, airlines, transport providers, restaurants, venues and other suppliers — and to professional advisers, auditors, IT service providers and competent UAE authorities where required by law.

Where a request involves arrangements outside the UAE, personal data may be transferred internationally. We only transfer data to jurisdictions that provide an adequate level of protection or under appropriate safeguards as recognised by UAE law.

We retain personal data only for as long as necessary to fulfil the purposes described above and to satisfy any legal, accounting or reporting requirements under UAE law. Contact-form submissions that do not result in an engagement are typically deleted within 24 months.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Access is restricted to authorised personnel bound by confidentiality obligations.

Subject to the UAE PDPL, you have the right to access the personal data we hold about you, to request correction or deletion, to object to or restrict certain processing, to withdraw consent at any time, and to lodge a complaint with the UAE Data Office. To exercise any of these rights, please contact us using the details below.

This website uses only the cookies and similar technologies strictly necessary for it to function and to measure aggregate, anonymised traffic. We do not use advertising or cross-site tracking cookies.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be notified through this website.

For any privacy-related question or request, please contact our Data Controller:

Granpay Concierge Service L.L.C
ALSAFI 1 – 204, Al Mararr, 297-0, Dubai, United Arab Emirates
Email: info@granpay.com
Telephone: +971 50 225 6563