Privacy Policy

1. Who We Are

Xclusive Yachts Lifestyle Club ("the Club", "we", "us") operates a members-only lifestyle and events platform based in Dubai, United Arab Emirates. This policy explains what personal data we collect, how we use it, and the choices you have. It applies to members, event guests, and visitors to our platform.

2. Data We Collect

Contact and membership details — your name, mobile number, email address, membership tier, and membership number.

Event and engagement data — your RSVPs, attendance, guest details you provide, no-show records, and votes or feedback you submit.

Payment data — we use MyFatoorah, a licensed third-party payment provider, to process payments. We do not store full card numbers; we retain only the transaction reference and status needed to confirm your booking or membership.

Technical data — limited device, browser, and session information used to keep you signed in and to operate the platform.

3. How We Use Your Data

We use your data to administer your membership, confirm and remind you of bookings, send you event communications by WhatsApp and email, process payments, maintain attendance and no-show records, and improve and secure the platform. We process this data to perform our contract with you (your membership) and for our legitimate interest in running the Club.

4. Communications

With your membership you receive transactional and event communications by WhatsApp and email — booking confirmations, reminders, updates, and feedback requests. You may opt out of non-essential marketing communications at any time by replying STOP on WhatsApp or contacting the team via official channels. Essential communications relating to an active booking or your membership may still be sent.

5. How We Store Your Data

Member and event data is stored using Supabase, a managed database and platform provider, with access restricted to authorised Club personnel. We apply reasonable technical and organisational measures to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

6. Sharing Your Data

We share data only with service providers that help us operate the Club — our payment provider (MyFatoorah), our messaging provider for WhatsApp and email delivery, and our hosting and database provider (Supabase) — and only to the extent needed to provide those services. We do not sell your personal data. We may disclose data where required by UAE law or to protect the rights, safety, and property of the Club, our members, or others.

7. Data Retention

We keep your data for as long as your membership is active and for a reasonable period afterwards to meet legal, accounting, and operational requirements. When data is no longer needed, we delete or anonymise it.

8. Your Rights

Subject to applicable UAE law, you may request access to the personal data we hold about you, ask us to correct inaccurate data, or request deletion where there is no overriding legal or operational reason to retain it. To make a request, contact the team via official channels. We may need to verify your identity before acting on a request.

9. Cookies

We use cookies and similar technologies for authentication, session management, and basic analytics. For details, see our Cookie Policy.

10. Children

Membership is intended for adults. We do not knowingly collect personal data from individuals under 18 without the consent of a parent or guardian.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or the platform. Continued use of your membership constitutes acceptance of the updated policy.

12. Contact & Governing Law

For any privacy question or request, contact the team via official channels. This policy is governed by the laws of the United Arab Emirates, and disputes are subject to the exclusive jurisdiction of the DIFC courts of Dubai.