Privacy policy

The short version

• We collect only what we need to sell you tickets and help you: your name, email, phone number and booking details.
• Card payments are handled by Stripe through our booking partner's checkout. We never see your full card number.
• We share your details only with the partners needed to issue your tickets and run this site. We don't sell your data.
• You can ask to see, correct or delete your data at any time: [email protected].

1. Who we are

This website, bloomtopia.ae, is run by Bloomtopia Flowers – L.L.C – S.P.C, a company licensed in Abu Dhabi, United Arab Emirates (Abu Dhabi Economic Licence No. CN-5666456). We decide how your personal data is used for bookings made here, so we're responsible for it. This policy explains what we collect and why, in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

2. What we collect

• Booking details. Your name, email address, phone number, ticket type, number of tickets, visit date and booking reference, which you enter at checkout.
• Payment details. Payments are processed by Stripe. We receive confirmation that you've paid, not your full card number or security code.
• Messages. What you write to us by email, and your contact details.
• Technical data. Your IP address, browser and device type, and the pages you visit. This is logged by our hosting provider and by the services that deliver parts of this page.
• Advertising measurement. If you reach us through one of our Google ads, Google may use cookies or similar technology to tell us that a booking followed the ad. We only see this as totals.

3. How we use it

• To issue your tickets, send them to you and look after your booking. We need this to fulfil our contract with you.
• To answer your questions and handle refund requests.
• To keep the records that UAE tax and accounting laws require.
• To protect the site and our customers from fraud and misuse.
• To understand how the site is used and how well our ads work, using totals rather than individual profiles.

We don't send you marketing emails unless you've asked to receive them.

4. Who we share it with

We share personal data only where needed for the purposes above:

• Traveldesk, our booking partner, which runs the checkout and passes your booking to the ticket issuer.
• The attractions and their ticketing partners, to issue your tickets and let you in.
• Stripe, which processes your payment. If you pay with Apple Pay or Google Pay, Apple or Google are also involved, under their own privacy terms.
• Cloudflare, which hosts this website.
• Google, which provides the fonts on this site and, where used, ad measurement.
• cdnjs and jsDelivr, which deliver some of the scripts on this page, and Pexels and Unsplash, which deliver some photos. These services receive your IP address when your browser loads files from them.
• Our professional advisers, and public authorities when the law requires it.

We don't sell or rent your personal data.

5. Data outside the UAE

Some of these providers process data outside the United Arab Emirates. We use providers that protect personal data to a recognised standard, as the law requires.

6. How long we keep it

• Booking and payment records: as long as UAE tax and accounting laws require (currently up to seven years), then deleted.
• Emails: as long as we need them to help you, and no longer than two years after your last message, unless they form part of a booking record.
• Technical logs: kept by our providers for short periods under their own policies.

7. Your rights

You can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct it if it's wrong;
• delete it, where we don't have to keep it by law;
• restrict or stop a particular use of it;
• send it to you or another company in a common format.

Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we'll reply within 30 days. If you're not happy with our answer, you can complain to the UAE Data Office.

8. Keeping it safe

This site is served only over a secure (HTTPS) connection, and we use established providers for checkout and payments. No system is completely secure, so if you think your booking details have been misused, please tell us straight away.

9. Children

Our tickets are bought by adults. We don't knowingly collect personal data directly from children.

10. Changes to this policy

If we change this policy, we'll update the date at the top of this page.

11. Contact us

Bloomtopia Flowers – L.L.C – S.P.C
Abu Dhabi, United Arab Emirates
[email protected]