Privacy Policy

This policy explains how Chameleon Club Dubai handles personal data through this website and our reservation, guest-list, priority-list, enquiry and careers experiences. It is designed to align with the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021 (UAE PDPL).

For the processing described here, Chameleon Club Dubai determines why and how personal data is used. This policy is informational and should be read alongside any notice presented when you share information with us.

Depending on the form you use, we may collect:

• Booking and VIP requests: name, phone, email, requested date, party size, table tier, occasion and special requests.
• Guest list: name, phone, chosen night, party size, group composition, Instagram handle and marketing choice.
• Priority list: email address, WhatsApp number and signup source.
• General and private-event enquiries: contact details, event type, preferred date, group size and the information in your message.
• Careers: name, phone, email, role, experience, optional Instagram handle, CV details, message and consent confirmation.

We may also receive basic technical information such as device type, browser, approximate location, referral source and interactions with our website when analytics or advertising tools are enabled.

We use personal data to respond to enquiries; assess and confirm reservations; manage guest and priority lists; plan VIP, birthday, private and corporate occasions; review career applications; operate and secure the website; measure service performance; and meet legal or regulatory obligations.

We limit use to the purpose explained when the information is collected, or to a compatible purpose permitted by applicable law.

Our basis for processing depends on the context. It may include taking steps at your request before providing a service, performing an agreed reservation, complying with law, protecting legitimate operational and security interests, or your consent.

Where consent is required, it will be requested clearly and separately. You may withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully, but it may limit a service that depends on the information concerned.

We send promotional messages only where you have chosen to receive them or where otherwise permitted by law. Marketing consent is optional and is not a condition of submitting a booking, enquiry or application.

You may opt out through any unsubscribe instruction in a message or by emailing info@chameleondxb.ae. We may retain a minimal suppression record so that we can respect your choice.

The website may use essential browser storage to remember interface choices and information you intentionally submit. If analytics or advertising technologies such as Google Analytics 4 (GA4) or Meta Pixel are enabled, they may measure visits, actions and campaign performance through cookies or similar identifiers.

You can control non-essential cookies through any consent controls provided on the website and through your browser settings. Blocking some technologies may affect measurement or optional features but should not prevent access to core information.

Access is limited to team members who need the information for reservations, hosting, recruitment, guest relations, marketing, security or venue operations. Where you choose a WhatsApp contact link, your communication is handled under WhatsApp's own terms and privacy practices. Booking and enquiry information may also be shared with the venue's customer relationship management (CRM) provider when that service is connected.

We may use other carefully selected providers for hosting, communications, analytics, customer management or recruitment. These providers may process information only for the services they supply to us and subject to appropriate contractual controls.

We do not sell personal data. Where information is processed outside the UAE, we aim to use an arrangement permitted by applicable law and appropriate safeguards for the circumstances. We may disclose data where required by law or to protect guests, colleagues, the venue or our legal rights.

We keep personal data only for as long as needed for the purpose collected, to resolve questions or disputes, and to satisfy legal, accounting or operational requirements. Marketing details are retained until consent is withdrawn or the information is no longer needed. Career information is retained only for recruitment and related record-keeping needs.

We use reasonable organisational and technical safeguards, including role-based access, staff confidentiality and protected systems. No transmission or storage method can be guaranteed completely secure.

Subject to the UAE PDPL and its exceptions, you may ask to access or receive information about your data, obtain a copy, correct inaccurate data, request deletion, restrict or object to certain processing, withdraw consent, and receive portable data where applicable. You may also object to certain automated decisions and complain to the competent UAE authority.

To protect your information, we may ask you to verify your identity. We will respond within a reasonable period in line with applicable law. Some requests may be limited where retention or processing is legally required.

Send privacy questions or requests to info@chameleondxb.ae, or write to Chameleon Club Dubai at P Level, Social Hotels & Resorts, Barsha Heights (TECOM), Dubai, UAE. If a concern remains unresolved, you may have the right to approach the UAE Data Office or another competent authority.

We may update this policy as our services, providers or legal obligations change. The date at the top shows the latest revision.