Privacy information

Who is responsible

Adventure Hub FZCO, DSO - IFZA, IFZA PROPERTIES, Dubai Silicon Oasis, Dubai, UAE, is responsible for the personal information handled for this commercial website and business enquiries. Contact us at info@advhub.co.

Website visits and direct email

Serving this website involves connection information such as the requested page, IP address and time of access. Technical records can be used to operate the service and address security incidents. If you contact us through the form or email, we receive the contact details, message and project information you choose to send, and use them to answer your request, discuss a Reservum demonstration or prepare a quotation. You are not required to email us, but we cannot answer a request without the contact information needed for a reply. Do not send passwords, card details, customer exports or sensitive personal information.

The form asks for your email and a short request; your website address is optional. Service and language come from the page. Details are sent only to info@advhub.co through the existing company email service. The website confirmation means acceptance by the email service, not verified receipt in the inbox. Email links remain an alternative and open your own email application. This commercial website does not add advertising trackers, a newsletter, profiling, an external CAPTCHA or an embedded payment checkout.

Purposes and grounds

For an enquiry made in preparation for a contract with you personally, the purpose is to take the steps you request before that contract. Where the EU or UK GDPR applies, the ground for this limited processing is Article 6(1)(b). For necessary communications with a business representative and proportionate website security, the ground under those rules is the legitimate interest in answering requested business communications and keeping the service secure, under Article 6(1)(f), subject to the required balancing assessment. An email enquiry is not treated as consent to unrelated marketing.

These EU/UK grounds are not asserted as UAE legal grounds. Where the UAE federal Personal Data Protection Law applies, its Article 4(9) provides for necessary contractual steps requested by the data subject; this does not establish a ground for every corporate-contact or security use. Any additional applicable ground must be established before the corresponding use begins.

We do not archive enquiries or message contents in the WordPress database or send automatic replies to visitors. To limit spam and duplicate submissions, we keep only temporary non-reversible identifiers derived from the IP address or form token with a site key. Rate-limit identifiers expire within 20 minutes. Duplicate-prevention identifiers expire with the form token, no later than two hours after its issue. Expired identifiers are removed during the next cleanup or request. These are not attribution cookies. Invalid, repeated or rejected submissions do not produce a success confirmation. The form does not subscribe you to marketing.

Who can receive information

Initial internal access to commercial enquiries is limited to the owner. The relevant external recipient categories are providers operating website hosting, technical security, company email and recovery backups; the hosting and company email service is supplied through AEserver. This internal access restriction does not exclude the technical access needed by those providers. Information may also be disclosed where a binding legal requirement applies.

Location and international processing

Adventure Hub is established in Dubai, UAE. This address does not establish the countries used by every hosting, mail or backup provider. No exclusive UAE storage, adequacy decision, signed transfer instrument or other international-transfer safeguard is claimed by this notice. Any information required about an actual regulated international transfer must be established and supplied before that transfer is relied on.

Retention

Enquiries that do not lead to a contract and related replies are retained for 12 months after the last substantive contact. The owner reviews expiry monthly and removes expired records from the active enquiry workflow and controlled mail clients, subject to an identified legal requirement to retain a particular record.

For contractual, payment and accounting records, the retention criterion is the time needed to fulfil the agreement, meet the applicable record-keeping duties and handle any relevant claim; no unverified statutory period is stated. For technical records and recovery copies, the applicable period must reflect the operational or security purpose, any identified incident or legal duty, and the provider's effective deletion or backup cycle. These are retention criteria, not a claim that provider logs or backups are automatically erased after 12 months or that a particular cycle has been verified.

Payments agreed separately

After a personalised quotation and payment configuration have been agreed, a separately supplied link can take you to a Stripe-hosted payment page. Stripe processes the details entered there under its privacy information. Adventure Hub checks the payment result and transaction reference against the agreed offer and customer details. Card numbers are not entered into or stored by this commercial website.

Your requests and rights

Write to info@advhub.co. The owner takes charge of privacy requests within five working days and responds within one calendar month, subject to any shorter applicable legal deadline. Any permitted extension must be explained. Identity checks must be proportionate. Where the applicable rules provide them, you may request access, correction, erasure, restriction or portability, and may object to processing based on legitimate interests. Those rights have conditions and exceptions. You may complain to the competent supervisory authority; for EU/UK processing this may include the Italian Garante or the UK ICO, as applicable.

Cookie information and consent preferences

We use CookieYes Free to present and record privacy choices. The provider is CookieYes Limited, UK. The connected service can process IP address, user agent, requested hostname, page-load data and consent choices or associated identifiers to deliver the banner, calculate usage and maintain consent evidence. These technical operations are distinct from Google Analytics and can occur when the banner is delivered, before you choose optional analytics.

The banner offers Accept, Reject and Customize. Necessary consent-preference storage supports remembering your choice; optional Analytics starts disabled. Closing the notice, scrolling or continuing to browse is not acceptance. Use the Cookie preferences button to reopen your choices, change them or withdraw optional consent. Preference expiration is configured to 180 days. This period does not automatically erase server-side consent evidence.

At this first release, Google Analytics, Google Tag Manager and advertising tags remain disabled, even if you select Analytics. A future Analytics activation requires an updated approved notice and a separate release. Contact email links remain available; clicking an email link does not establish that an enquiry was received. Private staging and the booking demo are outside this commercial integration.

The CookieYes published processing agreement identifies it as processor for customer data and provides SCC and UK-addendum terms for applicable restricted transfers. Its stated retention criterion is the service-agreement duration unless otherwise agreed. After termination, clause 14 specifies deletion within 60 days, with backups potentially retained up to one year and legal exceptions. No shorter cloud consent-log lifetime is claimed.

The published subprocessor list includes end-user processing in Ireland, Malta, the UK and the USA. The list does not establish which locations apply to every operation in this account. We do not claim exclusively EU storage or that an account-specific international-transfer assessment has been completed. Information on the safeguards applicable to your data may be requested at info@advhub.co.

The Free plan has a monthly page-load limit. If CookieYes is unavailable or its banner is suspended at that limit, this does not authorise optional measurement. No Google measurement tag is installed in this first release. Browser settings also let you remove stored choices; deleting them can cause the banner to ask again when available.