Legal

Privacy Policy

Last updated: 15/06/2026

This Privacy Policy explains how AL NOOR PARTNERS L.L.C-FZ (“we”, “us”, “our”), operating under the brand VIP Noor Concierge, collects, uses, shares, stores and protects your personal data when you visit our website https://alnoor.agency (the “Website”), contact us, or use our concierge and lifestyle-management services (the “Services”).

We are committed to protecting your privacy and to processing your personal data lawfully, fairly and transparently in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data of the United Arab Emirates (the “PDPL”), together with any Executive Regulations, decisions and guidance issued under it, and any other data-protection rules applicable to us. Where required, the supervisory authority for personal data in the UAE is the UAE Data Office.

Please read this Privacy Policy carefully. By using our Website or Services, or by providing personal data to us, you confirm that you have read and understood this Policy. If you do not agree with it, please do not use the Website or provide your personal data to us.

Scope

This Policy applies to all personal data we process about clients, prospective clients, website visitors, the guests and companions of our clients, and other individuals whose data we receive in the course of arranging Services (for example, travel companions, family members for relocation or school placement, or named beneficiaries of a booking). It covers data collected through the Website, by email, telephone, messaging applications, our contact and subscription forms, and in the course of providing the Services.

1. Definitions

In this Policy, the following terms have the meanings given below, consistent with the PDPL:

“Personal Data” means any information relating to an identified natural person, or one who can be identified directly or indirectly, by reference to identifiers such as name, voice, picture, identification number, electronic identifier, geographic location, or one or more physical, physiological, economic, cultural or social characteristics.

“Sensitive Personal Data” means data that reveals, directly or indirectly, racial or ethnic origin, political or philosophical opinions, religious beliefs, criminal records, biometric data, or any data relating to a person’s health, sex life, physical, psychological, mental, genetic or sexual condition.

“Processing” means any operation performed on Personal Data, such as collection, storage, recording, organisation, use, disclosure, transfer, restriction or erasure.

“Controller” means the person who determines the purposes and means of Processing. For the purposes of this Policy, the Controller is AL NOOR PARTNERS L.L.C-FZ.

“Processor” means the person who processes Personal Data on behalf of, and under the instructions of, the Controller.

“Data Subject” means the natural person to whom the Personal Data relates.

“Consent” means any freely given, specific, clear and unambiguous indication by which the Data Subject agrees, by a statement or affirmative action, to the Processing of their Personal Data.

2. Who we are and how to contact us

The Controller of your Personal Data is:

AL NOOR PARTNERS L.L.C-FZ
Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates
Email: info@alnoor.agency
Telephone: +971 50 578 4911

If you have any questions about this Policy or wish to exercise your rights, please contact us using the details above.

3. The personal data we collect

The categories of Personal Data we collect depend on the Services you request. They may include:

• Identity and contact data — full name, title, date of birth, nationality, passport and visa details, Emirates ID details where relevant, email address, telephone number and postal address.
• Booking and travel data — itineraries, flight, private-jet, yacht, hotel and transport preferences, loyalty programme numbers, travel companions and the details you provide about them, and special occasion information.
• Lifestyle and preference data — dietary requirements, accessibility needs, preferences for events, real estate, relocation and schooling, and other bespoke requests.
• Financial data — billing details and information required to process payments. Card and bank details are generally handled by our payment and banking providers; we do not store full card numbers on the Website.
• Communications data — the content of your enquiries, instructions, correspondence and any files you attach when you contact us.
• Technical and usage data — IP address, device and browser type, language settings, and information about how you use the Website, collected through cookies and similar technologies (see our Cookie Policy).

Sensitive Personal Data

In limited cases, providing a Service may require Sensitive Personal Data — for example health, accessibility or dietary information needed to arrange travel, accommodation or events safely. We process such data only where you have given your explicit Consent, or where Processing is otherwise permitted under the PDPL, and we limit it to what is necessary for the requested Service.

4. How we collect your data

We collect Personal Data: (a) directly from you when you complete a form on the Website, subscribe to our newsletter, email or call us, or instruct us to arrange a Service; (b) from people acting on your behalf, or from you in respect of your companions and family members; (c) automatically through cookies and similar technologies when you use the Website; and (d) from third parties such as suppliers and partners who help us deliver the Services, where this is lawful.

5. Purposes and legal bases for processing

We process your Personal Data for the following purposes, relying on the legal bases set out in the PDPL:

• To provide the Services — to respond to enquiries, arrange and coordinate bookings, and manage your requests. Basis: necessary for the performance of a contract, or steps taken at your request before entering into a contract.
• To process Sensitive Personal Data where needed for a Service. Basis: your explicit Consent, or another lawful basis under the PDPL.
• To communicate with you — to send confirmations, updates and service-related messages. Basis: performance of a contract and our legitimate interest in administering the relationship.
• For marketing — to send newsletters and offers where you have subscribed. Basis: your Consent, which you may withdraw at any time.
• To improve and secure the Website — analytics, troubleshooting and security. Basis: your Consent for non-essential cookies, and our legitimate interest in a safe, functional Website.
• To comply with the law — to meet legal, regulatory, tax and anti-money-laundering obligations and to respond to lawful requests from competent authorities. Basis: compliance with a legal obligation.
• To protect interests — where Processing is necessary to protect the vital interests of you or another person, or to establish, exercise or defend legal claims.

6. Sharing and disclosure of your data

Because our Services involve arranging third-party products and services, we share Personal Data only as necessary, with:

• Suppliers and partners — airlines and private-jet operators, yacht and charter providers, hotels, transport and security providers, real estate agents, schools, event and venue partners, and similar providers, strictly to fulfil your request.
• Service providers (Processors) — IT, hosting, communications, payment and professional advisers who process data on our behalf under written agreements requiring appropriate confidentiality and security.
• Authorities and regulators — where required to comply with the law, a court order, or a lawful request from a competent authority.
• Corporate transactions — in connection with a reorganisation, merger or transfer of our business, subject to appropriate safeguards.

We do not sell your Personal Data. We require recipients to handle your data lawfully and to use it only for the purposes for which it was shared.

7. International transfers

Delivering the Services frequently requires transferring Personal Data outside the UAE — for example to a hotel, airline or partner in your destination country. In accordance with the PDPL, we transfer Personal Data abroad only where: (a) the destination provides an adequate level of protection or is recognised as such; (b) appropriate safeguards (such as contractual commitments) are in place; (c) the transfer is necessary to perform the contract with you or to take steps at your request; or (d) you have given your Consent. Where you ask us to arrange a Service in a particular country, you understand that providing it necessarily involves transferring the data needed to do so.

8. Data retention

We keep Personal Data only for as long as necessary for the purposes described in this Policy, including to provide the Services, to maintain our business records, and to comply with legal, tax and regulatory requirements. When data is no longer needed, we securely delete or anonymise it. Retention periods vary by data type and the applicable legal requirements; we will provide further detail on request.

9. Data security

We apply appropriate technical and organisational measures designed to protect Personal Data against unauthorised or unlawful Processing and against accidental loss, destruction, alteration or damage, taking into account the nature of the data and the risks involved. These measures include access controls, encryption in transit where appropriate, confidentiality obligations and supplier due diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a personal-data breach is likely to prejudice your privacy, security or rights, we will handle it in accordance with the notification requirements of the PDPL, including notifying the UAE Data Office and, where required, affected individuals.

10. Your rights

Subject to the conditions and exceptions in the PDPL, you have the right to:

• be informed about how your Personal Data is processed;
• request access to your Personal Data and to obtain a copy of it;
• request correction of inaccurate or incomplete data;
• request erasure of your Personal Data in the circumstances allowed by law;
• request restriction of, or object to, Processing in the circumstances allowed by law, including the stopping of Processing;
• request transfer (portability) of certain data to you or to another controller in a structured, machine-readable format;
• withdraw Consent at any time where Processing is based on Consent, without affecting Processing carried out before withdrawal; and
• lodge a complaint with the UAE Data Office if you believe your data has been processed unlawfully.

To exercise any of these rights, contact us at info@alnoor.agency. We may need to verify your identity before acting on your request, and we will respond within the timeframe required by law.

11. Cookies

The Website uses cookies and similar technologies, including for analytics and security (such as reCAPTCHA). For details of the cookies we use and how to manage them, please see our Cookie Policy, which forms part of this Privacy Policy.

12. Children’s data

Our Services are directed at adults. We do not knowingly collect Personal Data from children except where a parent or guardian provides it to us for a Service (for example, school placement or family travel) and the necessary Consent is given. If you believe we hold a child’s data without the appropriate basis, please contact us and we will take appropriate action.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version is always available on the Website, and the “Last updated” date shows when it last changed. Where changes are material, we will take reasonable steps to notify you.

14. Contact us

If you have questions, requests or complaints about this Policy or our handling of your Personal Data, please contact us:

You also have the right to contact the UAE Data Office regarding the Processing of your Personal Data.