PRIVACY POLICY

Last Updated: 25 July 2026

1. Introduction

Mai Tai LLC, referred to in this Privacy Policy as “Mai Tai,” “we,” “us,” or “our,” respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you:

• Visit https://maitai.ae;

• Contact us through our website;

• Communicate with us by telephone, email, WhatsApp or social media;

• Request information about our services;

• Book or receive a home massage, wellness or beauty service;

• Purchase or receive a gift certificate;

• Participate in an offer, promotion or corporate wellness programme; or

• Otherwise interact with Mai Tai.

This Privacy Policy should be read together with our Terms and Conditions and any additional privacy notice provided when we collect particular information.

2. Who We Are

The data controller responsible for your personal data is:

Mai Tai LLC
JLT One
Dubai, United Arab Emirates

Email: maitaiuae@gmail.com
Telephone and WhatsApp: +971 50 801 2644
Website: https://maitai.ae/

For privacy-related requests, please use the subject line “Privacy Request.”

3. Applicable Data-Protection Laws

We process personal data in accordance with applicable laws and regulations, including:

• UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, together with its implementing regulations and subsequent amendments;

• Other applicable UAE laws concerning consumer protection, electronic communications, electronic transactions and cybersecurity; and

• Regulation (EU) 2016/679, the General Data Protection Regulation, or “GDPR,” where its territorial scope applies to our processing activities.

References to rights under the GDPR apply only where the GDPR is legally applicable to the relevant processing.

4. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

4.1 Identity and contact information

This may include:

• Full name;

• Email address;

• Telephone or WhatsApp number;

• Residential, hotel or service address;

• Building, apartment or room number;

• Location and access instructions; and

• The identity and contact information of another person where you book a service on their behalf.

4.2 Booking and service information

This may include:

• Selected service;

• Preferred appointment date and time;

• Service duration;

• Therapist preferences;

• Number of customers;

• Booking history;

• Gift certificate information;

• Promotion or discount information;

• Special instructions; and

• Communications relating to appointments, changes, cancellations, complaints or feedback.

4.3 Health and wellness information

Because massage and wellness services involve physical contact, you may choose to provide information such as:

• Allergies or skin sensitivities;

• Pregnancy or postpartum status;

• Recent surgery or injury;

• Areas of pain or discomfort;

• Physical limitations;

• Medical conditions relevant to the requested service;

• Medication or treatment information you consider relevant; and

• Other contraindications or wellness preferences.

Health-related information may constitute sensitive or special-category personal data. We request that you provide only the information reasonably necessary for us to determine whether and how a service may be safely provided.

We normally process this information with your explicit consent or where another lawful exception applies. You may withdraw your consent, although doing so may prevent us from safely providing the requested service.

4.4 Payment and transaction information

We may collect:

• Payment method;

• Amount paid;

• Transaction reference;

• Invoice or receipt information;

• Deposit, cancellation or refund information; and

• Limited payment confirmation information received from our payment service providers.

Where card payment is made through a POS terminal or external payment provider, your complete card details are generally processed directly by the relevant payment provider. We do not intend to store complete card numbers, card security codes or PIN information.

4.5 Communications

We may retain communications sent through:

• Our contact form;

• Email;

• WhatsApp;

• Telephone;

• SMS;

• Social media platforms; and

• Customer-support channels.

This may include message content, attachments, timestamps and information voluntarily provided during the communication.

4.6 Website and technical information

When you use our website, we or our technology providers may automatically collect:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Language settings;

• Referring website;

• Pages viewed;

• Links selected;

• Approximate location derived from an IP address;

• Date, time and duration of visits;

• Cookie identifiers; and

• Diagnostic, security and performance information.

4.7 Reviews and social media information

When you publish a review, tag us, communicate with our social-media accounts or permit us to use a testimonial, we may process your name, account name, review, photograph, video or related social-media information.

We will request permission where required before using identifiable customer content in our own marketing materials.

5. How We Collect Personal Data

We may collect personal data:

• Directly from you;

• From a person making a booking for you;

• Through our website and contact form;

• Through WhatsApp, telephone, email or social media;

• When you communicate with one of our therapists or representatives;

• From payment providers;

• From corporate clients arranging wellness services;

• From publicly available reviews or social-media content; and

• Through cookies, analytics and similar website technologies.

When providing another person’s information, you confirm that you are authorised to provide it and that the person has been informed about this Privacy Policy.

6. How We Use Personal Data

We may use personal data to:

• Respond to enquiries;

• Create, confirm and manage bookings;

• Provide requested home massage, wellness and beauty services;

• Communicate appointment confirmations, reminders, delays or changes;

• Assign and coordinate therapists;

• Locate and access the service address;

• Assess relevant contraindications and service-safety concerns;

• Personalise a service based on disclosed preferences;

• Process payments, deposits, gift certificates and refunds;

• Provide invoices and receipts;

• Investigate complaints, incidents or suspected misconduct;

• Maintain service, financial and compliance records;

• Protect customers, therapists, employees and property;

• Prevent fraud, abuse and unauthorised activity;

• Improve our website and services;

• Analyse website performance and customer demand;

• Send offers or marketing communications where permitted;

• Establish, exercise or defend legal claims;

• Comply with legal, regulatory, licensing and governmental obligations; and

• Manage a business restructuring, sale or transfer.

7. Legal Bases for Processing

Depending on the circumstances, we may rely on one or more of the following grounds:

7.1 Consent

We may rely on your consent for:

• Optional marketing;

• Non-essential cookies;

• Processing relevant health or wellness information;

• Publishing identifiable testimonials or customer content; and

• Other activities where consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect processing lawfully completed before withdrawal.

7.2 Performance of a contract

We process information necessary to:

• Take steps at your request before a booking;

• Confirm and perform a booking;

• Provide services;

• Process payments; and

• Manage cancellations, refunds and complaints.

7.3 Legal obligations

We may process information to satisfy applicable accounting, taxation, consumer-protection, regulatory, licensing, public-health, law-enforcement or court requirements.

7.4 Legitimate interests

Where permitted, we may process information for legitimate business interests such as:

• Operating and improving our business;

• Maintaining records;

• Securing our website;

• Preventing fraud and misconduct;

• Managing customer relationships;

• Analysing service demand; and

• Defending legal rights.

Where GDPR applies, we balance these interests against your rights and reasonable expectations.

7.5 Protection of persons and legal claims

We may process data where necessary to protect the vital interests of a person, respond to an emergency, investigate an incident or establish, exercise or defend legal claims.

8. WhatsApp Communications

Our website may contain WhatsApp buttons or links that allow you to communicate with us.

When you select a WhatsApp link or send us a WhatsApp message:

• You are also using a service operated by WhatsApp and its affiliated companies;

• WhatsApp may process information independently under its own privacy terms;

• Information may be transmitted or stored outside the UAE or your country of residence; and

• Your telephone number, profile information, message content and communication metadata may be available to WhatsApp in accordance with its service.

You should avoid sending unnecessary identification documents, card information or detailed medical records through WhatsApp.

We may retain relevant WhatsApp conversations as part of our booking, customer-service, safety and transaction records.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Enable essential website functions;

• Maintain security;

• Remember user preferences;

• Understand website traffic;

• Measure advertising or campaign performance; and

• Improve website content and usability.

Cookies may be:

• Essential cookies, which are required for website operation;

• Preference cookies, which remember selected settings;

• Analytics cookies, which help us understand website usage; or

• Marketing cookies, which may support advertising and campaign measurement.

Where required, non-essential cookies will be activated only after consent. You can also control or delete cookies through your browser settings. Disabling certain cookies may affect website functionality.

10. Marketing Communications

We may send marketing messages where:

• You have requested them;

• You have provided consent; or

• They are otherwise permitted under applicable law.

You may opt out at any time by:

• Selecting an unsubscribe option, where available;

• Replying “STOP” to an applicable message; or

• Contacting us at maitaiuae@gmail.com.

Opting out of marketing will not prevent us from sending operational messages concerning an existing enquiry, booking, payment, safety issue or legal obligation.

11. Disclosure of Personal Data

We may disclose personal data to:

• Therapists and personnel assigned to provide or coordinate services;

• Website, hosting, email, CRM and technical-support providers;

• WhatsApp and other communication-platform providers;

• Payment, banking and POS providers;

• Analytics, advertising and website-performance providers;

• Accountants, auditors, insurers, lawyers and professional advisers;

• Corporate clients where a service is organised through an employer or organisation;

• Government, regulatory, licensing, judicial or law-enforcement authorities;

• Emergency services where necessary to protect a person;

• Parties involved in a complaint, incident or legal claim; and

• Potential purchasers, investors or successors in connection with a business transaction.

We expect service providers processing information on our behalf to use it only for authorised purposes and to apply appropriate confidentiality and security safeguards.

We do not sell personal data in the ordinary meaning of selling customer information for money.

12. International Data Transfers

Our service providers, communication platforms or technical systems may process or store information outside the UAE.

Where required by applicable law, we use an appropriate basis for an international transfer, which may include:

• Transfer to a jurisdiction recognised as providing adequate protection;

• Contractual data-protection safeguards;

• Your explicit consent;

• A transfer necessary to perform a contract or take requested pre-contractual steps;

• A transfer necessary for legal claims; or

• Another transfer mechanism permitted by applicable law.

Where GDPR applies, transfers from the European Economic Area will be handled using a mechanism permitted under Chapter V of the GDPR.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:

• Complete and document services;

• Maintain financial and accounting records;

• Address complaints or safety incidents;

• Comply with legal or regulatory requirements;

• Prevent fraud;

• Resolve disputes; and

• Establish or defend legal claims.

Retention periods may vary according to the type of data and the applicable legal requirement.

When information is no longer required, we may securely delete, anonymise or restrict access to it. Backup copies may remain temporarily until they are overwritten through routine backup processes.

14. Data Security

We use reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;

• Accidental loss;

• Improper use;

• Alteration;

• Disclosure; and

• Destruction.

Measures may include access restrictions, passwords, security monitoring, staff confidentiality obligations and controlled access to customer records.

No internet transmission or storage system can be guaranteed to be completely secure. You are responsible for protecting access to your own device, email and WhatsApp account.

Where required by law, we will notify the appropriate authority and affected individuals of a qualifying personal-data breach.

15. Your Privacy Rights

Subject to applicable law and relevant exceptions, you may have the right to:

• Obtain information about how your personal data is processed;

• Request access to your personal data;

• Request correction of inaccurate or incomplete information;

• Request deletion of information;

• Restrict or object to certain processing;

• Withdraw consent;

• Object to direct marketing;

• Request transfer or portability of information in an appropriate format;

• Object to decisions based solely on automated processing, where applicable;

• Request that processing errors be corrected;

• Lodge a complaint with a competent data-protection authority; and

• Receive information concerning a serious personal-data breach where legally required.

We may request reasonable evidence of identity before completing a privacy request. We may also decline or limit a request where permitted by law, including where information must be retained for legal obligations, legal claims, safety records or the rights of another person.

To exercise a privacy right, contact maitaiuae@gmail.com with the subject line “Privacy Request.”

Where the UAE Personal Data Protection Law applies, you may also submit a complaint to the competent UAE data-protection authority.

Where GDPR applies, you may lodge a complaint with the supervisory authority in your EU or EEA country of residence, work or the location of an alleged infringement.

16. Automated Decision-Making

We do not currently intend to make decisions that produce legal or similarly significant effects solely through automated processing.

If this changes, we will provide any additional information required by applicable law.

17. Children and Minors

Our website and booking channels are intended primarily for adults.

A person under 18 should not independently book a service or provide health-related information. Services for a minor may be accepted only with the prior consent and appropriate involvement of a parent or legal guardian and subject to our safety and service policies.

We do not knowingly use a minor’s personal data for direct marketing.

A parent or guardian who believes that a minor has provided information without appropriate authorisation should contact us.

18. Third-Party Websites and Platforms

Our website may contain links to third-party services, including:

• WhatsApp;

• Facebook;

• Instagram;

• Google services;

• External booking or shortened links; and

• Other external websites.

We do not control the privacy practices of independent third parties. You should review their privacy policies before providing information.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our services;

• Website technologies;

• Business practices;

• Legal requirements; or

• Regulatory guidance.

The revised version will be posted on our website with an updated “Last Updated” date. Material changes may also be communicated through another appropriate method.

20. Contact Us

Questions, complaints and privacy requests may be sent to:

Mai Tai LLC
JLT One
Dubai, United Arab Emirates

Email: maitaiuae@gmail.com
Telephone and WhatsApp: +971 50 801 2644
Website: https://maitai.ae/