Last updated 4 October 2026
Privacy policy
This policy explains how Oravia ("Oravia", "we") collects, uses and protects personal data when you use our website, our AI booking assistant and our WhatsApp service, and how you can ask us to delete it.
What we collect
- Contact details you give us: your name, phone or WhatsApp number and, if you share it, your email address.
- Booking details: the services, dates, times, locations, number of guests and requirements you tell us about (for example the driver's age for a car rental or a flight number for a transfer).
- Conversations: the messages and files you send to our AI assistant on the website or to our WhatsApp number, and our replies.
- Payments: the amount, status and reference of each payment. Card payments are handled by our payment provider, Ziina; we never see or store your full card number, and keep only the card type and its last four digits.
- Technical data: your IP address, browser and device information, and cookies needed to keep your booking session, plus basic usage statistics that help us improve the website.
How we use it
- To answer your requests, check availability with our service partners, prepare quotes and manage your bookings.
- To contact you about your booking by WhatsApp, phone or email. We message you on WhatsApp only after you have given us your number and agreed to it.
- To take payments, issue booking documents and keep the records the law requires (for example tax invoices).
- To provide customer support, prevent fraud and misuse, and keep our services secure.
Our AI assistant uses an AI provider to understand your messages and draft replies. Prices, availability and booking status come from our own systems, not from the AI, and the assistant cannot book, pay or change a price on its own.
Who we share it with
- Service partners (the companies that operate the car, yacht, chauffeur, experience or flight you book): only what they need. Before you book they receive the request details without your name or number; after you pay, the confirmed partner receives your booking reference, the operational details and your first name.
- Providers that run our service for us: Meta (WhatsApp messaging), Ziina (payments), our AI provider, and our hosting and email providers. They process data on our instructions.
- Authorities, when the law requires it.
We do not sell your personal data.
How long we keep it
We keep your data for as long as we need it to provide your booking and support, and afterwards for as long as the law requires us to keep booking, payment and tax records. Conversations that did not lead to a booking are deleted or anonymised when they are no longer needed.
Your rights
Depending on the law that applies to you, you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and withdraw your consent to WhatsApp messages at any time. To do any of this, use the contact details on our website.
How to delete your data
To ask us to delete your personal data, use the contact details on our website, with the subject or message "Delete my data" and the phone number or email you used with us.
We will confirm your request, delete or anonymise your contact details, conversations and booking requests within 30 days, and tell you when it is done. We keep only the records the law requires us to keep (for example invoices for completed bookings), and only for as long as required.
Security and international transfers
We protect your data with access controls, encryption of stored credentials and secure connections. Some of our providers may process data outside the United Arab Emirates; when they do, we use providers that apply appropriate safeguards.
Contact us
For any question about this policy or your personal data, use the contact details on our website.
We may update this policy; the date at the top shows the latest version.