Privacy Policy

1. Introduction

1.1. This Privacy Policy describes how YallaSail (“we”, “us”, “our”) collects, uses, and protects personal data when you use our platform at yallasail.com.

1.2. YallaSail is based in Dubai, United Arab Emirates.

1.3. By using the Platform, you consent to the collection and use of your data as described in this Policy. If you do not agree, please do not use the Platform.

2. Data We Collect

2.1. Information you provide:

• Name, email address, and phone number (during registration)
• Business information (company name, address, trade license details)
• Vessel information (name, type, capacity, photos)
• Payment information (processed securely through Stripe)

2.2. Information collected automatically:

• IP address and device information (browser, operating system)
• Usage data (pages visited, features used, timestamps)
• Cookies and similar tracking technologies

2.3. Information from third parties:

• Booking data from OTA platforms (via iCal integration)
• Payment confirmation from Stripe

3. How We Use Your Data

We use your personal data to:

• Provide and maintain Platform services
• Process bookings and payments
• Communicate with you about your account, bookings, and updates
• Improve the Platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations
• Send marketing communications (only with your consent)

4. Data Sharing

We may share your data with:

• Stripe — for payment processing. Full payment details are handled exclusively by Stripe in accordance with PCI DSS standards.
• SMS/Email providers — phone number and email for sending verification codes and transactional notifications.
• Cloud hosting providers — all data stored on our servers.
• Law enforcement — when required by applicable law or valid legal process.

We do not sell your personal data to third parties.

5. Data Retention

5.1. Account data is retained for as long as your account is active, plus 30 days after deletion.

5.2. Transaction and booking records are retained for 5 years for accounting and legal compliance purposes.

5.3. Technical logs are retained for 1 year.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at: privacy@yallasail.com

7. Cookies

7.1. We use cookies for authentication, session management, and analytics.

7.2. Essential cookies are required for the Platform to function. Analytics cookies help us understand how users interact with the Platform.

7.3. You can manage cookie preferences through your browser settings.

8. Data Security

We implement industry-standard security measures including:

• TLS 1.2+ encryption for all data in transit
• Encrypted data at rest
• Role-based access controls
• Regular security audits and monitoring
• Secure password hashing (bcrypt)

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform. The updated version will be effective upon posting at yallasail.com/privacy.

10. Contact Us