Privacy Policy

1. Who We Are

GATE MAIN INFORMATION TECHNOLOGY L.L.C S.O.C is a technology company providing B2B travel technology and marketplace solutions.

GATE MAIN provides technology that may enable travel businesses to access, distribute, purchase, sell, book, and manage travel-related services, including accommodation, transfers, activities, transportation and other travel products.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• The GATE MAIN website;
• GATE MAIN client and partner portals;
• Registration and account-management processes;
• Booking and marketplace services;
• APIs, XML connections, integrations, and related technology;
• Communications with GATE MAIN;
• Customer and technical support;
• Marketing communications;
• Applications and other digital services operated by GATE MAIN; and
• Other interactions in which this Privacy Policy is presented or referenced.

GATE MAIN primarily provides B2B services. Accordingly, personal information may relate to representatives, employees, agents, administrators, customers, suppliers, partners, and other individuals interacting with our business clients.

3. Information We Collect

Depending on how you interact with GATE MAIN, we may collect the following categories of information.

3.1 Business and company information

When a business registers for our Services, we may collect:

• Company name;
• Business registration information;
• Company address;
• Country of registration;
• Tax or regulatory information where required;
• Business contact information;
• Website and business profile information;
• Supplier or client information;
• Contract and commercial information; and
• Information required to conduct business verification or due diligence.

3.2 Account and user information

We may collect information about individuals authorized to use a GATE MAIN account, including:

• Full name;
• Job title or position;
• Business email address;
• Telephone number;
• Username and account identifiers;
• Login and authentication information;
• Account permissions and roles;
• Communication preferences; and
• Information submitted during account verification.

Clients are responsible for ensuring that individuals whose information they provide to GATE MAIN are appropriately informed about the relevant processing where required by applicable law.

3.3 Booking and travel information

Where our Services are used to create or manage travel bookings, we may process information necessary to fulfill those bookings, which may include:

• Traveler name;
• Contact details;
• Booking reference;
• Travel dates;
• Destination;
• Accommodation information;
• Flight or transportation information;
• Transfer information;
• Activity or excursion information;
• Special booking requests;
• Cancellation or amendment information; and
• Other information required by a travel supplier to provide the requested service.

Certain travel services may require additional information. We will seek to limit the information processed to what is reasonably necessary for the relevant transaction or service.

3.4 Payment and financial information

Where payments or wallet transactions are made through our Services, we may process:

• Transaction amount;
• Currency;
• Payment status;
• Transaction reference;
• Billing information;
• Wallet balance and transaction history;
• Refund information; and
• Other information necessary to process or reconcile payments.

Where third-party payment providers process payment-card or other payment information, such providers may collect and process that information directly under their own privacy policies and terms.

3.5 Technical and usage information

When you use our website or technology platform, we may automatically collect information such as:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Language and regional settings;
• Login dates and times;
• Pages or platform features accessed;
• Referring and exit pages;
• API and system activity;
• Error logs;
• Authentication and security logs; and
• Other technical information necessary to operate, secure, and improve our Services.

3.6 Communications

If you contact us, we may retain information contained in your communication, including your name, contact details, company, correspondence, attachments, and other information you voluntarily provide.

4. How We Collect Information

We may collect personal information:

1. Directly from you;
2. From your employer or organization;
3. From a GATE MAIN client or partner using our Services;
4. From travel suppliers or other service providers;
5. Through bookings or transactions;
6. Automatically through our website, platform, APIs, and systems;
7. Through cookies and similar technologies;
8. From service providers assisting us with business operations;
9. From publicly available or commercially available business sources where permitted by law; and
10. From governmental, regulatory, fraud-prevention, or compliance sources where appropriate.

5. How We Use Personal Information

We may use personal information for the following purposes:

5.1 Providing and operating the Services

We may process information to:

• Create and manage accounts;
• Authenticate users;
• Provide access to the platform;
• Process bookings;
• Facilitate travel-service transactions;
• Connect clients with suppliers;
• Process amendments and cancellations;
• Provide customer support;
• Operate APIs and integrations;
• Maintain wallets and transaction records; and
• Deliver requested products and services.

5.2 Business administration

We may use information to:

• Manage commercial relationships;
• Verify businesses and users;
• Conduct due diligence;
• Manage contracts;
• Process invoices and payments;
• Maintain business records;
• Communicate with clients, suppliers, and partners; and
• Manage our internal operations.

5.3 Security and fraud prevention

We may process information to:

• Protect accounts and systems;
• Detect unauthorized access;
• Prevent fraud and abuse;
• Investigate suspicious activity;
• Monitor system security;
• Enforce our Terms and Conditions; and
• Protect GATE MAIN, clients, suppliers, users, and other parties.

5.4 Legal and regulatory compliance

We may process information where necessary to:

• Comply with applicable laws and regulations;
• Respond to lawful requests from authorities;
• Meet accounting and record-keeping obligations;
• Establish, exercise, or defend legal claims;
• Conduct compliance checks; and
• Fulfill other legal obligations.

5.5 Service improvement

We may use information to:

• Monitor platform performance;
• Troubleshoot technical issues;
• Analyze usage;
• Improve functionality;
• Develop products and services;
• Test new features; and
• Improve the security and reliability of our technology.

Where appropriate, information may be aggregated or de-identified for analytical or operational purposes.

5.6 Marketing

Where permitted by applicable law, we may use business contact information to send information about GATE MAIN products, services, updates, events, and other business communications.

You may opt out of marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us.

6. Legal Bases for Processing

Where data-protection laws such as the EU General Data Protection Regulation (“GDPR”) apply to our processing, we may rely on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to provide Services or perform a contract with you or your organization;
• Legitimate interests: where processing is necessary for legitimate business interests, provided those interests are not overridden by applicable privacy rights;
• Legal obligation: where processing is necessary to comply with applicable law;
• Consent: where we have obtained valid consent where required; and
• Protection of vital interests: where applicable and permitted by law.

The appropriate legal basis depends on the specific circumstances of the processing.

7. Sharing Personal Information

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These parties may include:

7.1 Travel suppliers

Where required to fulfill a booking or provide a requested travel service, relevant information may be shared with hotels, airlines, transfer providers, activity providers, transportation providers, car-rental companies, cruise or ferry operators, train providers, and other travel suppliers.

7.2 Clients and business partners

Where GATE MAIN provides services to a business client, relevant information may be shared with that client or its authorized users to operate the account and fulfill transactions.

7.3 Payment providers

We may share necessary transaction and payment information with payment processors, financial institutions, banks, and other payment-service providers.

7.4 Technology and service providers

We may use third-party providers that support:

• Cloud hosting;
• Software infrastructure;
• Cybersecurity;
• Data storage;
• Communications;
• Customer support;
• Analytics;
• Email delivery;
• Payment processing;
• Fraud prevention; and
• Other business operations.

These providers may process personal information only as necessary to provide services to us and subject to appropriate contractual or legal requirements.

7.5 Professional advisers

We may disclose information to lawyers, auditors, accountants, insurers, consultants, and other professional advisers where reasonably necessary.

7.6 Government and regulatory authorities

We may disclose information where required or permitted by law, including in response to lawful requests, court orders, regulatory requirements, or investigations.

7.7 Corporate transactions

If GATE MAIN is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable legal requirements.

8. International Data Transfers

Because GATE MAIN operates in an international travel-technology environment, personal information may be accessed, stored, or processed in countries outside the country in which it was originally collected.

Where applicable law requires safeguards for international transfers, GATE MAIN will implement appropriate mechanisms, which may include contractual safeguards, adequacy decisions, consent where legally valid, or other lawful transfer mechanisms.

Travel suppliers and service providers may also process information in the countries where the relevant travel services are provided.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide and maintain our Services;
• Maintain business and transaction records;
• Meet contractual obligations;
• Comply with legal, tax, accounting, and regulatory requirements;
• Resolve disputes;
• Prevent fraud and abuse;
• Enforce agreements; and
• Establish, exercise, or defend legal claims.

Retention periods may vary depending on the nature of the information and the purpose for which it was collected.

When personal information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

10. Data Security

GATE MAIN takes reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Depending on the circumstances, security measures may include:

• Access controls;
• Authentication mechanisms;
• Role-based permissions;
• Monitoring and logging;
• Secure communications;
• Backup and recovery procedures;
• Security monitoring;
• Internal access restrictions; and
• Other appropriate technical and organizational safeguards.

No electronic transmission, storage system, or online service can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should notify GATE MAIN promptly if they suspect unauthorized access.

11. Cookies and Similar Technologies

GATE MAIN may use cookies and similar technologies to operate, secure, analyze, and improve our website and Services.

These technologies may be used for purposes including:

• Essential website functionality;
• Authentication;
• Security;
• Remembering preferences;
• Analytics;
• Performance monitoring; and
• Marketing or communication activities where applicable.

The use of cookies may be subject to our separate Cookie Policy.

You may be able to control cookies through your browser settings and, where applicable, through the cookie-management tools provided on our website.

Disabling certain cookies may affect the functionality of our website or Services.

12. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information.

These may include the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information in certain circumstances;
• Request restriction of processing;
• Object to certain processing;
• Request portability of information where applicable;
• Withdraw consent where processing is based on consent;
• Opt out of certain marketing communications; and
• Lodge a complaint with an applicable data-protection authority.

These rights are subject to applicable legal limitations and exceptions.

For example, GATE MAIN may need to retain certain information to comply with legal obligations, complete transactions, prevent fraud, or establish or defend legal claims.

13. How to Exercise Your Rights

To submit a privacy request, contact us using:

Email: info@gatemain.com

Please provide sufficient information to allow us to understand and respond to your request. We may need to verify your identity before fulfilling certain requests in order to protect personal information from unauthorized disclosure.

Where required by law, we will respond within the applicable statutory period.

If you are using GATE MAIN on behalf of a business client, certain requests may need to be directed to that organization, particularly where the organization determines the purposes and means of processing.

14. Business Clients and Data Processing

GATE MAIN may process personal information on behalf of its business clients in connection with the Services.

In such circumstances, the relevant business client may determine the purposes for which certain personal information is processed, while GATE MAIN acts as a service provider or processor where applicable.

Business clients are responsible for ensuring that their instructions and use of the GATE MAIN Services comply with applicable privacy and data-protection laws.

Where required, GATE MAIN and its business clients may enter into additional data-processing terms governing the processing of personal information.

15. Information Relating to Travelers

GATE MAIN may receive traveler information from travel agencies, OTAs, wholesalers, DMCs, suppliers, corporate travel clients, or other business users.

Where a client provides traveler information to GATE MAIN, the client is responsible for ensuring that it has a lawful basis to provide that information and that appropriate notices have been provided to the relevant individuals where required.

GATE MAIN processes such information only for legitimate purposes associated with providing, operating, supporting, securing, and improving the relevant Services, or as otherwise permitted or required by law.

16. Children's Privacy

GATE MAIN primarily provides B2B services and does not intentionally target children through its business platform.

Where traveler information relating to a child is required to fulfill a travel booking, such information should be provided by or through an appropriate adult, business client, travel provider, or other authorized party in accordance with applicable law.

If you believe that a child has provided personal information to GATE MAIN improperly, please contact us.

17. Third-Party Websites and Services

Our website or Services may contain links to websites, platforms, applications, or services operated by third parties.

GATE MAIN is not responsible for the privacy practices, security, content, or policies of third-party services.

You should review the privacy policy of each third party before providing personal information to that party.

18. Third-Party Travel Suppliers

Travel products available through the GATE MAIN marketplace may be supplied by independent third parties.

Those suppliers may independently process personal information in connection with the travel services they provide.

Their processing may be governed by their own privacy policies and legal obligations.

GATE MAIN is not responsible for privacy practices independently carried out by third-party suppliers outside GATE MAIN's control.

19. Automated Decision-Making and Profiling

GATE MAIN may use automated technical processes for purposes such as system security, fraud detection, account protection, platform optimization, or service personalization.

Where applicable law gives individuals rights concerning automated decision-making or profiling that produces legal or similarly significant effects, GATE MAIN will provide applicable information and safeguards required by law.

20. Do-Not-Track and Similar Signals

Browsers and devices may provide certain privacy preferences or signals.

The treatment of such signals may depend on the technology used and applicable legal requirements. Where legally required, GATE MAIN will implement applicable mechanisms for recognizing and responding to valid privacy preferences.

21. Marketing Communications

GATE MAIN may communicate with clients, users, suppliers, and business contacts regarding:

• Account activity;
• Bookings and transactions;
• Service updates;
• Security matters;
• Technical announcements;
• Product updates;
• Events; and
• Business or marketing opportunities.

Transactional and service-related communications may continue even after you opt out of marketing communications where necessary to provide the Services or comply with legal obligations.

22. Data Breaches and Security Incidents

If GATE MAIN becomes aware of a security incident involving personal information, we will assess the incident and take appropriate steps in accordance with applicable law.

Where legally required, we may notify affected individuals, clients, regulators, or other relevant parties.

23. Changes to This Privacy Policy

GATE MAIN may update this Privacy Policy from time to time to reflect:

• Changes to our Services;
• Changes to applicable laws;
• Changes to our business practices;
• New technologies; or
• Other operational or regulatory developments.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

We encourage you to review this Privacy Policy periodically.

24. Governing Law

This Privacy Policy is intended to operate in accordance with applicable privacy and data-protection laws.

Nothing in this Privacy Policy limits any mandatory rights or protections that apply to you under the laws of the jurisdiction in which you are located.

GATE MAIN's contractual Terms and Conditions provide that, subject to applicable mandatory law, its contractual relationship is governed by the laws of the United Arab Emirates and subject to the jurisdiction specified therein.

25. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of your personal information, please contact:

We will review privacy inquiries and respond in accordance with applicable law.

26. Acceptance

By using the GATE MAIN website, platform, marketplace, APIs, booking systems, or related Services, you acknowledge that you have had an opportunity to review this Privacy Policy.

Where applicable law requires consent for particular processing activities, GATE MAIN will obtain such consent through an appropriate mechanism.