Privacy Policy | Happybundlezyppy Dubai

1. Commitment to Client Confidentiality

Happybundlezyppy Haute Living & Concierge FZ-LLC ("Happybundlezyppy", "we", "us", or "our"), incorporated within the Dubai International Financial Centre (DIFC), is dedicated to maintaining the absolute discretion, confidentiality, and protection of all personal, financial, and itinerary data entrusted to us by our high-net-worth patrons, corporate clients, and website visitors.

This Privacy Policy explains the methods and protocols we utilize to gather, store, process, and safeguard your data under the Dubai International Financial Centre Data Protection Law No. 5 of 2020, UAE Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (PDPL), and international standards including the EU General Data Protection Regulation (GDPR).

2. Data Collection Categories

In delivering high-touch concierge, aviation booking, real estate coordination, and maritime services, we may collect the following categories of information:

Identity & Diplomatic Data: Full legal names, passport scans, diplomatic credentials, national identification copies, and emergency contact details necessary for aviation manifests and harbor authorities.
Contact & Communication Data: Verified telephone numbers, encrypted messaging identifiers (Signal/WhatsApp), secure corporate email addresses, and physical residential addresses.
Transaction & Security Data: Encrypted banking details, wire confirmations, proof of funds documentation (for off-market property acquisitions), and biometric clearance logs.
Itinerary & Lifestyle Preferences: Dietary profiles, private chef instructions, security detail requirements, flight paths, and preferred vessel specifications.
Technical Telemetry: Anonymized IP addresses, browser fingerprinting, and device interaction metrics gathered through essential cookies.

3. Lawful Basis for Processing

We process personal data solely on lawful grounds established by DIFC Data Protection Law:

Contractual Performance: To execute chartered flights, private yacht itineraries, residential leases, and culinary bookings requested by you.
Legal & Regulatory Mandates: To fulfill mandatory civil aviation manifests (GCAA), maritime border clearances, anti-money laundering (AML) protocols, and counter-terrorist financing checks.
Legitimate Interests: To protect our digital portal against cybersecurity intrusions and ensure the physical safety of assets and personnel.
Explicit Consent: Where you have expressly authorized us to tailor lifestyle recommendations and bespoke seasonal invitations.

4. Data Sharing & Third-Party Clearances

We do not sell, rent, or commercialize patron data under any circumstance. Your information is disclosed strictly on a need-to-know basis to certified execution partners, including:

UAE General Civil Aviation Authority (GCAA) and private Fixed Base Operators (FBOs).
Dubai Maritime City Authority (DMCA) and certified yacht captains.
Dubai Land Department (DLD) and licensed luxury brokerage partners for deed registration.
Authorized private security companies and close-protection personnel.

5. Your Sovereign Data Rights

Under DIFC Data Protection legislation, patrons enjoy the right to:

Request complete access to all personal dossiers held in our secure offline systems.
Demand the immediate rectification of inaccurate identity details.
Exercise the Right to Erasure ("Right to be Forgotten") following completion of statutory charter auditing periods.
Restrict or object to automated profiling or marketing communications.

To exercise any statutory data right, please contact our Data Protection Officer directly at [email protected].

6. Data Security & Retention Standard