Last updated: 27 July 2026
TESSMA ("we", "us", "our") is a hotel booking platform operated from the United Arab Emirates. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 (PDPL), and where applicable, the EU General Data Protection Regulation (GDPR).
We collect: account information (name, email, phone), booking information (travel dates, hotel, payment reference), device and usage data (IP address, browser, pages visited), and communications (emails, support messages). We do not store full payment card numbers — payments are processed by Stripe who are PCI DSS Level 1 certified.
We use your data to: process and manage your hotel bookings, send booking confirmations and updates, comply with UAE VAT and financial regulations, improve our platform and personalise your experience (with your consent), and prevent fraud and ensure security.
We process your data on the following bases: contract (to fulfil your booking), legal obligation (VAT records, anti-money laundering), legitimate interests (fraud prevention, security), and consent (marketing emails, analytics cookies).
We share your data with: hotels you book with (necessary to fulfil your reservation), Stripe (payment processing), Anthropic (AI assistant features — no booking data stored permanently), and cloud infrastructure providers. We do not sell your data to advertisers.
Booking records are retained for 5 years as required by UAE financial regulations. Account data is deleted upon request unless retention is legally required. Marketing data is deleted immediately upon opt-out.
Under GDPR and UAE PDPL you have the right to: access your data (Article 15 GDPR), correct inaccurate data, request deletion (Article 17), data portability (Article 20), object to processing, and withdraw consent at any time. Exercise these rights by emailing nisar@tessmaholdings.com. Our Data Protection Officer (DPO) can be reached at nisar@tessmaholdings.com for any data protection inquiries.
We use essential cookies (required for the platform to function), analytics cookies (with consent), and marketing cookies (with consent). Manage your preferences at any time via our Cookie Settings.
Some processors operate outside the UAE. Where data is transferred outside the UAE or EU, we use Standard Contractual Clauses or rely on adequacy decisions to ensure equivalent protection.
Data Controller: TESSMA Destination Services FZ-LLC, Ras Al Khaimah, United Arab Emirates. Privacy queries: nisar@tessmaholdings.com. You may also lodge a complaint with the UAE Data Protection Authority or your local supervisory authority.