Privacy Policy

Effective Date: 12 April 2026

Your privacy matters to us. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have. Please read it carefully before using the Thrillark platform.

At a Glance

Here is a plain-language summary of the key things you should know. The full details are in the sections that follow.

• Who we are: Thrillark FZC, an experience booking marketplace based in the UAE.
• What we collect: Your name, contact details, payment information, booking history, and usage data.
• Why we collect it: To process your bookings, personalise your experience, and keep the platform secure.
• Who we share it with: Suppliers (to fulfil your booking), payment processors, and analytics partners. We do not sell your data.
• Your rights: You can access, correct, delete, or restrict how we use your data. See Section 9.
• Contact: hello@thrillark.com

1. Who We Are

Thrillark FZC ("Thrillark", "we", "us", or "our") is incorporated in the United Arab Emirates and operates an online marketplace for booking travel experiences worldwide. Our registered address is Block B-B30-105, SRTI Park, Sharjah, United Arab Emirates.

Thrillark is the data controller for the personal information collected through the Platform. This means we determine the purposes and means of processing your personal data.

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at hello@thrillark.com.

2. What Personal Information We Collect

We collect personal information in the following categories:

a) Information You Give Us

• Identity information: your name, date of birth, and nationality (where relevant to an experience);
• Contact information: email address, phone number, and postal address;
• Account credentials: username and password;
• Payment information: card number, cardholder name, expiry date, and billing address (processed securely via our payment partners — we do not store full card details);
• Booking details: the experiences you book, travel dates, and any special requirements;
• Communications: messages you send to our customer support team, including call recordings where applicable;
• User content: reviews, ratings, photos, and other content you submit to the Platform.

b) Information We Collect Automatically

• Device and technical data: IP address, browser type, operating system, and device identifiers;
• Usage data: pages you visit, links you click, search queries, and time spent on the Platform;
• Location data: general location inferred from your IP address;
• Cookie and tracking data: as described in Section 7 below.

c) Information From Third Parties

• If you connect a social media account (such as Google or Facebook) to log in, we may receive basic profile information from that provider;
• Our Suppliers may share information relevant to your booking (for example, to confirm participation requirements);
• Payment processors and fraud prevention partners may share transaction verification data with us.

If you provide us with information about other travellers (for example, names of guests joining an experience), you are responsible for ensuring those individuals have consented to their data being shared with us.

3. Why We Use Your Personal Information

We only use your personal information where we have a valid legal basis to do so. The table below explains our purposes and the legal basis we rely on for each.

To provide and manage your booking
We use your identity, contact, and payment information to process bookings, issue Vouchers, and communicate with you about your experience. This is necessary to perform our contract with you.

To process payments
We share your payment details with our payment processors to complete transactions securely. This is necessary to perform our contract with you and to comply with financial regulations.

To provide customer support
We use your contact information and booking history to respond to your queries and resolve issues. This is in our legitimate interest to maintain service quality, and in some cases necessary to perform our contract.

To personalise your experience
We use your usage data and booking history to tailor content, recommendations, and offers to your interests. This is in our legitimate interest to improve engagement with the Platform. You can opt out of personalised communications at any time.

To send you marketing communications
Where you have given us consent (or where permitted by applicable law for existing customers), we may send you promotional emails or notifications about offers and new experiences. You can unsubscribe at any time using the link in any marketing email or by contacting us.

To detect and prevent fraud
We use your identity, payment, and usage data to identify suspicious activity and protect both you and Thrillark from fraud and abuse. This is in our legitimate interest and, where applicable, a legal obligation.

To improve the Platform
We use aggregated and anonymised usage data to understand how people use the Platform and how we can improve it. This is in our legitimate interest as a business.

To comply with legal obligations
We may process your data to comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms of Use.

4. Who We Share Your Information With

We do not sell your personal information to third parties. We may share it in the following circumstances:

Suppliers
When you make a Booking, we share the relevant personal information (such as your name, contact details, and booking details) with the Supplier responsible for delivering the experience. This is necessary to fulfil your booking.

Payment Processors
We use trusted third-party payment processors to handle transactions securely. They receive your payment information solely to process payments on our behalf.

Analytics and Technology Partners
We use third-party tools for website analytics, customer support, and platform performance monitoring. These partners process data on our behalf and are contractually required to protect it.

Affiliated Companies
We may share data within the Thrillark group of companies for operational and administrative purposes, subject to the same protections described in this Policy.

Legal and Regulatory Disclosure
We may disclose your information where required by law, to comply with a court order or legal process, to protect our rights and property, or to investigate suspected fraud or illegal activity.

Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. International Data Transfers

Thrillark operates globally, and your personal information may be transferred to and processed in countries outside your own — including countries that may not have the same level of data protection laws as your home country.

Where we transfer data internationally, we take appropriate steps to ensure it is protected in accordance with applicable law. This may include using standard contractual clauses, relying on adequacy decisions, or other lawful transfer mechanisms.

By using the Platform, you acknowledge that your data may be transferred and processed internationally as described above.

6. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In practice, this means:

• Account information is retained for as long as your account is active, and for a reasonable period afterwards in case you return or have outstanding queries;
• Booking records are retained for a minimum of 7 years to comply with financial and legal obligations;
• Marketing preferences are retained until you withdraw consent or opt out;
• Call recordings and customer support communications are typically retained for up to 2 years.

When your data is no longer needed, we will securely delete or anonymise it. Please note that certain backup copies may persist for a short additional period due to the nature of our systems.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (such as pixels and local storage) to make the Platform work, remember your preferences, understand how you use our services, and show you relevant content and ads.

The main types of cookies we use are:

• Essential cookies: required for the Platform to function (e.g. keeping you logged in, processing payments). These cannot be disabled.
• Analytics cookies: help us understand how visitors use the Platform so we can improve it.
• Preference cookies: remember your settings and preferences (e.g. language or currency).
• Marketing cookies: used to show you relevant ads and track the effectiveness of our campaigns.

You can control non-essential cookies through your browser settings or through our cookie preference centre on the Platform. Disabling certain cookies may affect your experience.

8. How We Protect Your Information

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (SSL/TLS), access controls, and secure data storage practices.

All payment transactions are processed via encrypted connections. We do not store your full card details on our servers.

While we take every reasonable precaution, no system is completely secure. We cannot guarantee the absolute security of information transmitted over the internet. If you believe your account has been compromised, please contact us immediately at hello@thrillark.com.

9. Your Rights

Depending on where you are located, you may have the following rights regarding your personal information:

• Right of access: you can request a copy of the personal information we hold about you;
• Right to rectification: you can ask us to correct inaccurate or incomplete information;
• Right to erasure: you can ask us to delete your personal information, subject to certain legal exceptions;
• Right to restrict processing: you can ask us to limit how we use your data in certain circumstances;
• Right to data portability: you can request a copy of your data in a structured, machine-readable format;
• Right to object: you can object to our processing of your data where we rely on legitimate interests;
• Right to withdraw consent: where we rely on consent, you can withdraw it at any time, without affecting any prior processing.

To exercise any of these rights, please contact us at hello@thrillark.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are unhappy with how we have handled your data, you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

10. Children's Privacy

The Platform is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child without verified parental consent, we will take prompt steps to delete it.

If a booking includes participants who are minors, that information must be provided by a parent or guardian, who by doing so confirms they have authority to share that information on the child's behalf.

If you believe we may have collected information from or about a child, please contact us at hello@thrillark.com.

11. Third-Party Websites and Services

The Platform may contain links to third-party websites or integrate third-party services. This Privacy Policy applies only to information collected by Thrillark. We are not responsible for the privacy practices of any third-party site or service, and we encourage you to read their privacy policies before providing any information to them.

12. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes arising in connection with this Policy shall be subject to the jurisdiction of the courts of the UAE, except where mandatory local law requires otherwise.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform, and update the Effective Date at the top of this page.

Your continued use of the Platform after any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a privacy-related concern, please contact us:

• General enquiries: hello@thrillark.com
• Data privacy requests (access, deletion, correction): hello@thrillark.com
• Registered address: Thrillark FZC, Block B-B30-105, SRTI Park, Sharjah, United Arab Emirates

We aim to respond to all privacy-related requests within 30 days of receipt.