Privacy Policy

1. Who we are

Amyal (“we”, “us”) operates the website amyal.ae. We are a travel technology company based in the United Arab Emirates. [Legal entity name, licence number and registered address to be inserted.]

2. What we collect

• Concierge requests: your name, email address, optional phone number, travel details, the credit cards and loyalty programmes you tell us you hold, approximate points balances and any preferences or requirements you choose to share.
• Explore searches: the route, dates, cabin and cards you select. These are used to show results and are not linked to your identity unless you sign in.
• Technical data: standard server logs such as IP address, browser type and pages visited.

We never ask for, and you should never send us, loyalty programme or online banking passwords.

3. How we use it

• To research and respond to your concierge request.
• To operate, secure and improve the Amyal platform.
• To contact you about your request. We do not send marketing without your consent.

4. Storage and sharing

Concierge requests are stored in a database hosted by our infrastructure provider (Supabase) and are accessible only to authorised Amyal staff. We do not sell personal data. We share it only with service providers who process it on our behalf under contract, or where required by law. [Confirm data residency region and applicable law, e.g. UAE PDPL and UK GDPR, with counsel.]

5. Retention

We keep concierge request data for as long as needed to provide the service and for [retention period to be confirmed] afterwards, unless you ask us to delete it sooner.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal data. To exercise them, email mohammed@amyal.ae.

7. Cookies

The public website uses only strictly necessary cookies. Admin areas use session cookies for authentication. [Update if analytics are added.]

8. Contact

Questions about this policy: mohammed@amyal.ae.