Privacy Policy
Arabian Tour Packages ("we", "us") is operated by Desert Monster Tourism. This policy explains what personal information we collect when you use this website, why, and what choices you have.
Information we collect
When you book a tour, with or without an account, we collect:
- the lead traveller's first and last name, email address and phone number;
- the hotel or pickup address you give us (optional);
- your booking details: tour, date, booking option, number of adults, children and infants, add-ons, the price, any promo code used, and your chosen payment option.
When you create an account, we collect your name, email address and password. We never store your password in readable form, only a secure one-way hash. You may add a phone number to your profile. We record when you last signed in.
Saved tours (wishlist): if you are signed in and save a tour, we store which tours you saved.
Booking lookup and password reset: to protect these features from abuse, we keep short-lived counters of attempts. They are keyed on a one-way coded form of your IP address and are not linked to your identity. A password-reset link uses a single-use code that expires after 60 minutes; we store only a coded (hashed) form of it.
Payments: card and online payments are taken on the secure pages of our payment provider ([Stripe and/or Ziina, as enabled]). We never receive or store your card details. We keep the payment reference, amount, currency and status the provider confirms to us, so we can match the payment to your booking.
Technical information: like any website, our web server processes your IP address and browser information to deliver pages, and may record them in standard server logs.
Cookies and similar storage
We use only cookies needed to run the site:
- a session cookie, which keeps your cart, checkout, language and currency choices, and your sign-in while you browse;
- a country cookie (atp_country), which remembers which country's storefront you chose.
We do not use advertising cookies or analytics tracking.
Third parties your browser connects to
- Google Fonts: pages load fonts from Google's servers, so your browser shares your IP address with Google when a page loads.
- YouTube: some tour pages include videos embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com). The video player loads from YouTube when the page is displayed.
- WhatsApp: if you choose to contact us on WhatsApp, the conversation takes place on WhatsApp.
- Payment providers: when you pay online you are taken to the provider's page, and their own privacy policy applies there.
How we use your information
- to make, manage and deliver your booking, including pickup;
- to send you booking messages (booking received, payment received, booking updates) and password-reset emails you ask for;
- to let you view your bookings: in your account, or as a guest with your booking reference and email address;
- to apply promo codes, including limits such as one use per customer;
- to protect the site against abuse and fraud.
We do not sell your personal information. We do not use it for advertising. We send no marketing emails unless you separately agree to them.
Who we share it with
We share only what is needed to deliver your tour: with the tour operator, guides and drivers who carry out your booking, and with the payment provider you choose. We may disclose information if the law requires it.
Keeping your information
We keep booking and account information for as long as needed to provide our services and meet our legal and accounting obligations. [Owner: state a specific period if one is required.]
Your choices
You can view and update your profile and change your password in your account. To ask for a copy of your data, or for its correction or deletion, contact us at [privacy contact email]. Some booking records may need to be kept for legal or accounting reasons.
Changes
We may update this policy. The current version is always published on this page.
Contact
Desert Monster Tourism, trading as Arabian Tour Packages, [address], [email].