§ Legal

Privacy policy.

Effective 6 May 2026 · Arabian Wonders DMC, Ramz al Masira International LLC

Arabian Wonders DMC, operated by Ramz al Masira International LLC (registered in the Sultanate of Oman), is committed to protecting your privacy. This policy explains what information we collect, why we collect it, what we do with it, and the rights you have over it under the EU General Data Protection Regulation (GDPR). The policy applies to www.arabian-wonders.com.

For questions, write to info@awdmc.com.

1. Information we collect

1.1 Personal information you give us.

When you contact us via email or the brief form, you share:

Name and work email address.
Agency or company name, the country it is based in, and the type of business.
Phone or WhatsApp number (optional).
The contents of your brief — trip type, hotel tier, dates, number of travellers, and how you found us (optional).

1.2 Non-personal information collected automatically.

When you visit the website, our hosting provider and analytics processor may collect technical information including:

Browser type and version.
Operating system.
Truncated IP address (full IP is not stored — see §3.2).
Referring website or search engine.
Pages viewed and approximate time spent.

Analytics data is collected only after you give consent via the cookie banner. If you decline, analytics are not loaded.

2. How we use your information

To respond to your inquiry and prepare a quote.
To deliver the trip you have booked, where applicable.
To send occasional, non-marketing operational updates (e.g., trade-show invitations or new-itinerary notes) — only if you have opted in.
To improve the website by understanding which pages are useful.
To meet legal and tax obligations (e.g., audit trails for booked trips).

We do not sell, rent, trade, or share your personal data for third-party marketing.

3. Sub-processors

We rely on a small number of vetted service providers to operate this website and process inquiries.

3.1 Hosting — Firebase Hosting (Google LLC).

The website is hosted on Firebase Hosting, a service of Google LLC. Server logs (request URL, timestamp, truncated IP, user agent) are retained for security and abuse-prevention purposes. Google's data-processing terms apply. Data may be transferred to and stored in countries outside the EU/EEA, including the United States, under standard contractual clauses. See: firebase.google.com/support/privacy.

3.2 Analytics — Google Analytics 4.

We use Google Analytics 4 (GA4) to count visits and understand which pages are useful. GA4 is loaded only after you consent via the cookie banner. GA4 does not log or store IP addresses. Cookies set by GA4 (_ga, _ga_*) expire after 13 months. See: policies.google.com/privacy.

3.3 Inquiry form — email relay (FormSubmit).

The brief you send via the form on our contact page is delivered to our mailbox (info@awdmc.com) through FormSubmit, a form-to-email relay. The relay transmits the submission and does not use it for any other purpose; it sets no cookies and runs no tracking on our pages. The content of your brief is then stored in our email system for as long as the inquiry or resulting booking is active (see §5). If you prefer not to use the relay, write to us directly by email. See: formsubmit.co/privacy.pdf.

3.4 Consent management — Klaro.

The cookie consent banner is provided by Klaro (KIProtect GmbH, Germany), an open-source tool. Klaro stores your preferences in a first-party cookie (aw-consent) on your device only — no data is sent to third parties. See: klaro.kiprotect.com.

4. Cookies

We use the following cookie categories:

Strictly necessary. The Klaro consent cookie (aw-consent). Cannot be disabled.
Analytics (optional). Google Analytics 4 cookies. Loaded only after consent.

You can change or withdraw your consent at any time via the "Manage cookies" link in the footer. Disabling cookies does not affect site functionality.

5. Data retention

Inquiries that do not lead to a booking: retained for up to 24 months, then deleted.
Booking records: retained for the period required by Omani tax and accounting law (currently 10 years).
Analytics data: retained for 14 months.
Server logs: retained for 30 days.

6. Your rights under GDPR

As a data subject in the EU/EEA, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion ("right to be forgotten"), subject to our legal retention obligations.
Restrict or object to processing.
Receive your data in a portable format.
Lodge a complaint with your national supervisory authority.

To exercise any of these rights, write to info@awdmc.com. We will respond within 30 days.

7. International transfers

Some of our sub-processors (Google, FormSubmit) operate primarily from the United States. Where data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses, supplemented by sub-processor-side safeguards.

8. Security

The website is served exclusively over HTTPS. Hosting and CDN security is provided by Firebase Hosting / Google Cloud infrastructure. Inquiries submitted via the contact form are encrypted in transit (HTTPS) and delivered to our mailbox. We acknowledge that no internet transmission method is 100% secure.

9. Children

The website is intended for travel professionals aged 18 and older. We do not knowingly collect personal data from children.

10. Third-party links

This site links to external services (Google, FormSubmit, Klaro, partner operators). We are not responsible for the privacy practices of those external services.

11. Changes to this policy

We may update this policy as our practices or applicable law changes. Material updates will be reflected in the effective date at the top of this page.

12. Contact

Ramz al Masira International LLC (trading as Arabian Wonders DMC)
Kharais Street, G7 Building, Al Hail, Seeb, Muscat, Oman.
Email: info@awdmc.com.