Welcome to Aalabu (“Aalabu“, “we“, “our“, “us“). We operate the website https://www.aalabu.com (the “Site“). This page combines our Privacy Notice (UK/EU GDPR) and our Terms of Use. If you have any questions, contact aalabu@aalabu.com.

1) Privacy Notice (UK/EU GDPR)

1.1 Who we are (Data Controller)

• Controller: AALABU LIMITED (Company No. 16660516) trading as Aalabu
• Website: https://www.aalabu.com
• Email: aalabu@aalabu.com
• Registered address: Office 13953, 182–184 High Street North, East Ham, London, E6 2JA, United Kingdom

We comply with the UK GDPR and, where applicable, the EU GDPR.

1.2 Scope

This notice explains how we collect, use, disclose, and protect personal data when you browse the Site, create an account, make or manage a booking, subscribe to communications, or otherwise interact with us.

1.3 The data we collect

We only collect data necessary for delivering our services:

• Identity & Contact Data: name, title, billing address, email, phone number, nationality (when needed for travel requirements).
• Account Data: username, password, preferences, saved travellers/guests.
• Booking & Transaction Data: itinerary details, dates, property/room or package selected, special requests, price, currency, payment status, invoices, refunds.
• Verification Data (where required): copies of ID documents necessary for bookings (e.g., guest names for hotel check‑in) and applicable legal requirements.
• Technical & Usage Data: IP address, device identifiers, browser type, operating system, referral URLs, pages viewed, time on page, clicks, error logs.
• Marketing & Communications Data: your preferences in receiving marketing, and your communication choices.
• Communications Content: messages you send to us (e.g., email queries, forms) and your review content if you post ratings or feedback on our Site.

1.4 How we collect data

• Directly from you: when you browse, register, book, contact support, or subscribe.
• Automatically: via cookies and similar technologies (see 1.7 Cookies & similar technologies).
• From third parties: payment providers, analytics providers, fraud‑prevention tools, identity verification vendors, and travel suppliers (e.g., hotels, activity operators) where needed to fulfil a booking.

1.5 Purposes and legal bases

We process personal data only when permitted by law. Typical purposes and corresponding legal bases are:

• Provide and operate the Site; create and manage your account; process and confirm bookings; customer support.
  Legal basis: performance of a contract (UK/EU GDPR Art. 6(1)(b)); legitimate interests (to run our business) (Art. 6(1)(f)).
• Take payment, issue invoices, manage refunds and chargebacks; prevent fraud.
  Legal basis: performance of a contract; legitimate interests; legal obligation (tax, accounting).
• Send service emails about your bookings, policy updates, and security alerts.
  Legal basis: performance of a contract; legal obligation; legitimate interests.
• Personalise content, improve the Site, fix bugs, and perform analytics and A/B testing.
  Legal basis: legitimate interests; consent where cookies require it.
• Marketing communications (news, offers) where you opt in.
  Legal basis: consent (Art. 6(1)(a)); you can withdraw at any time.
• Compliance and legal claims.
  Legal basis: legal obligation; establishment, exercise or defence of legal claims; legitimate interests.

1.6 Sharing your data

We share only what is necessary, under contracts and safeguards:

• Travel suppliers (e.g., hotels, activity operators, transfer companies) to fulfil your booking; they usually act as independent controllers for their own compliance.
• Service providers / processors: hosting and cloud infrastructure (e.g., Hostinger or equivalent), content delivery networks, email services, analytics providers, security/fraud tools, identity verification, and customer support tools.
• Payment processors: e.g., PayPal and/or other card processors you select at checkout. They process your payment data directly and provide us with status/transaction identifiers.
• Professional advisers and authorities: auditors, insurers, regulators, courts and law enforcement where required.

We do not sell your personal data.

1.7 Cookies & similar technologies

We use cookies, SDKs, and similar technologies to operate our Site, remember your preferences, and understand performance. Categories include:

• Strictly necessary: core functions like security, load balancing, login, and checkout.
• Functional: remembering preferences (e.g., language, currency).
• Analytics: aggregated usage insight to improve the Site.
• Marketing: only with your consent where required.

You can manage non‑essential cookies via our cookie banner or your browser settings at any time. For details of specific cookies we use, please see our Cookie Policy (link: /cookie-policy). Where WordPress is used, typical cookies include login and preference cookies; exact names and durations may vary by configuration and plugins.

1.8 International data transfers

We may transfer your personal data outside the UK/EEA (for example to our service providers and travel suppliers). Where we do so, we rely on an adequacy decision or approved safeguards such as the UK International Data Transfer Agreement and/or the EU Standard Contractual Clauses. For transfers necessary to fulfil your booking with suppliers located in countries without an adequacy decision, we rely on GDPR Article 49(1)(b) (performance of a contract). You can contact us to obtain further information about these safeguards.

1.9 Data retention

We keep data only as long as necessary:

• Account & profile: while your account is active and for up to 24 months after inactivity, unless you ask us to delete sooner.
• Bookings & finance records: typically up to 7 years to meet tax and accounting obligations.
• Support communications: typically up to 24 months after resolution.
• Marketing consents and opt‑outs: retained to honour your preferences.

1.10 Security

We apply administrative, technical, and organisational measures proportional to the risks, including encryption in transit (HTTPS), access controls, logging, and regular updates. No system is 100% secure; please use a unique, strong password and keep it confidential.

1.11 Your rights (UK/EU)

You have the right to access, rectify, erase, restrict or object to processing, port your data, and withdraw consent where processing is based on consent. You can exercise these rights by emailing aalabu@aalabu.com. We may need to verify your identity and will respond within one month where feasible.

1.12 Complaints

You can complain to your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO). See www.ico.org.uk. We would appreciate the chance to deal with your concerns first—please contact us at aalabu@aalabu.com.

1.13 Children

Our services are intended for persons 18+. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it. For UK users, the age of digital consent is 13; for EEA users, it may be up to 16 depending on the country.

1.14 Automated decision‑making

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Fraud‑screening tools may be used to protect our services.

1.15 Third‑party links and embeds

Our Site may include links or embedded content from other websites (e.g., videos, maps, articles). Those third parties may collect data according to their own policies. We are not responsible for their practices.

1.16 Changes to this notice

We may update this Privacy Notice from time to time. The “Effective date” above shows when it was last revised.

2) Terms of Use

2.1 About these Terms

These Terms govern your use of the Site and, where applicable, the services we provide. By accessing or using the Site, you agree to these Terms. If you do not agree, do not use the Site.

2.2 Definitions

• “Booking” means a reservation for accommodation, transport, activity, or package made via the Site.
• “Supplier” means the travel service provider (e.g., hotel, tour operator) that fulfils a Booking.
• “User”, “you” means the person accessing or using the Site.

2.3 Eligibility & account

You must be 18 or older and have legal capacity to enter into contracts. You are responsible for keeping your account credentials confidential and for all activity under your account.

2.4 Our role

We operate an online platform to facilitate Bookings with Suppliers. Unless expressly stated otherwise, we act as an agent for Suppliers. Your contract for the travel service is with the Supplier, whose terms and conditions also apply.

2.5 Prices, fees & taxes

Prices shown are based on your search parameters and may vary by dates, availability, currency, taxes, and fees. Obvious errors and misprints are not binding. We may charge service fees for certain Bookings; if applicable, these will be shown before you pay.

2.6 Payment

Payment methods are displayed at checkout (e.g., card or PayPal, depending on availability). You authorise us or our payment processor to charge the total amount, including applicable taxes and fees. For security, additional verification may be required.

2.7 Cancellations, changes & refunds

Cancellation, change, and refund rules are set by the Supplier and shown before you book. Some rates are non‑refundable. Our service fees (if any) may be non‑refundable unless required by law. Any refunds are processed to the original payment method where possible.

2.8 Travel requirements

It is your responsibility to meet all travel requirements (e.g., passports, visas, health documents, check‑in rules). We are not liable if you are refused service or entry due to failing to meet such requirements.

2.9 User responsibilities & acceptable use

Do not misuse the Site, attempt to circumvent security, scrape content without permission, or use the Site for unlawful purposes. You agree not to: (a) upload malicious code; (b) copy, modify, or distribute Site content without permission; (c) engage in fraudulent Booking behaviour.

2.10 Reviews & user content

If you submit reviews or other content, you grant us a worldwide, non‑exclusive, royalty‑free licence to host, display, and distribute that content in connection with our services. You warrant you own or have rights to the content and that it is accurate and lawful.

2.11 Intellectual property

All Site content, trademarks, logos, and software are owned by us or our licensors and are protected by IP laws. You may not use any trademarks without our prior written consent.

2.12 Disclaimers

The Site is provided on an “as is” and “as available” basis. We make no warranties of uninterrupted or error‑free operation. Descriptions and ratings may be provided by Suppliers or third parties; we do not warrant their accuracy beyond what the law requires.

2.13 Liability

To the maximum extent permitted by law, we are not liable for: (a) indirect or consequential losses; (b) loss of profits, revenue, or data; (c) acts or omissions of Suppliers. Our total liability for any claim arising out of or relating to these Terms is limited to the greater of GBP £100 or the total service fees you paid to us in the 12 months preceding the event giving rise to the claim. Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or other liabilities that cannot be limited by law.

2.14 Indemnity

You agree to indemnify and hold us harmless from claims arising out of your misuse of the Site or breach of these Terms.

2.15 Force majeure

We are not responsible for delays or failures caused by events beyond our reasonable control, including, without limitation, natural disasters, strikes, conflicts, or internet outages.

2.16 Termination

We may suspend or terminate your access if you breach these Terms or for security reasons. You may close your account at any time.

2.17 Governing law & jurisdiction

These Terms are governed by the laws of England and Wales. If you are a consumer residing in the UK or EU, you may benefit from mandatory consumer protections of your country of residence, and you may bring proceedings in your local courts.

2.18 Changes to the Terms

We may update these Terms from time to time. Continued use of the Site after changes take effect means you accept the updated Terms.

2.19 Contact

For any questions about these Terms or our Privacy Notice:
Email: aalabu@aalabu.com Office 13953, 182–184 High Street North, East Ham, London, E6 2JA, United Kingdom

By using the Site, you acknowledge that you have read and understood these GDPR Terms & Conditions.