What is personal information?
Personal information is any information that relates to you, either directly or indirectly – you, being a natural person – like your name, image, voice, ID number, or even those traits like your physiological, cultural or social characteristics, that make you unique! It also includes sensitive personal information. Basically, any information that helps us identify that it’s you!
Sensitive information is any personal information about you that directly or indirectly reveals information about you including your family, ethnic origin, political or philosophical beliefs, religious beliefs, criminal record, biometric data or any data relating to your health, physical, psychological or mental well-being. We handle this information with utmost care where we may collect this information.
Biometric information is any personal information resulting from technical processing that relates to your physical, physiological or behavioural characteristics, and allows us to identify you or confirms your unique identification - think facial or fingerprint data! We also treat your unique data with extra special care to keep it safe and sound!
Personal information we collect from you and how we use it
OUR GUESTS
Ordering tickets or experiences, booking a package, making a hotel reservation or entering into a competition with us
When you’re purchasing destination tickets, experiences or photographs directly from us, booking a package or making a hotel reservation, you will need to provide us with some basic personal information:
Full name
Mobile number
Email address
Nationality
Country of residence
When ordering tickets or experiences, we will use this information to create a record of you on our systems so that we can provide you with the services you have purchased and so that we know it’s you when you get to the destination. The same applies when tickets are purchased at the destination entrance.
When booking a package or making a hotel reservation with one of our partner destinations using the Yas Island website, we will also require your booking related preferences, a booking reference number and your children’s ages, should your children be accompanying you.
If you’ve decided to try your luck and entered into a competition, we will use this basic information to create a competition entry for you. We’ll use your contact information to contact you in the event that you have won a prize.
In addition to this basic personal information, there may be additional details collected, depending on the product or how you’re engaging with us. We have provided more details in the sections below.
Using FacePass or FaceTag
When using either the FacePass or FaceTag method to breeze through our destinations or for contactless payments at our destinations, in addition to your basic personal information, you will need to share your facial biometrics with us via the mobile application or at our Guest Services Desks in park. We’ll always ask for consent before proceeding via our website or mobile application and we always ensure that we keep your information safe. If you miss the chance to sign up through our mobile application or website, you can always stop by at a destination guest service desk for quick enrolment.
For contactless payments, link a debit or credit card to your FacePass through the Yas Island mobile application or website, where this is available.
If you’d like to use FacePass or FaceTag for your young ones (children under 18 years old) or persons of determination, you, as their parent or legal guardian must give us your consent for enrolling their biometrics. Alternatively, you must have obtained authorization from the child’s parent or legal guardian to provide consent. Children under the age of 3 are not eligible for FacePass or FaceTag.
If you change your mind about using the contactless method of entry or payment, you can withdraw your consent at any time by selecting “Remove FacePass consent” or “Manage your card” options on the mobile app, confirmation email or website, where this is available. Once you have withdrawn your consent, unfortunately these services will not be available to you, but you can always enter our destinations using a digital QR code on our mobile application or the classic manual approach at one of the guest service desks at our destination.
Using MyPass
MyPass is our ‘super cool’ central authentication service which allows you to seamlessly connect to different services around Abu Dhabi without having to register each time, where the service is available. If you decide to join our MyPass family using the Yas Island mobile application or one of our websites, in addition to your basic information, we will also need your:
Age or date of birth
Gender
Preferred language
Preferred communication channel
Preferences or interests
Sharing this information with us is totally optional! But if you’re excited to personalise your profile and help us get to know you better, we’re all for it! This information lets us tailor our services to you when you’re at one of our destinations. We can also send you updates and offers that match your interests if you’ve given us your consent.
When using MyPass, we will use your mobile ID, device type and other location-based data (where you have permitted collection of this in your chosen device settings) so that we can provide you our services in an effective, efficient way. The services or experiences that you purchase will also be associated with your MyPass account.
Where you’ve given us the go-ahead, we will use your device coordinates to offer location-based services and features, including location-based reminders, exclusive promotions and safety alerts.
If you choose to add your close family members to your MyPass profile, we will need their:
- Full names,
- Dates of birth
- Relationship to you
Before you share anyone’s personal information with us, make sure you have their permission.
If you wish to log into your MyPass account using your Facebook, Google or Apple account details, those parties will receive information about your activity on our websites or mobile applications and Miral does not control how these platforms use your personal information. For more details, please review their respective Privacy Policies at:
- www.facebook.com/policy
- www.policies.google.com
- www.apple.com/legal/privacy/en-ww
You information is retained with us for as long as your account is active and for a limited timeframe after closure to administer any requests concerning your account, or in accordance with our legal obligations including where it is necessary for the establishment, exercise or defence of legal claims.
Registering for WIFI at our destinations
Need a dose of free WIFI whilst at one of our destinations? You will need to create a MyPass account, register using our WIFI portal registration webpage with either your mobile number or email address or use your social media ID to log into our WIFI service. Our WIFI services are powered by a third-party service provider to help keep you connected whilst you enjoy your time with us.
We will use your information to authenticate you to the service, carry out analytics and a create a log of service usage activity so that we may monitor system performance, perform maintenance and for security purposes.
When you connect to our service, we collect your mobile ID, device type and model, device serial number and MAC address; and other location-based data (where you have permitted collection of this in your chosen device settings) to allow you to connect seamlessly to the WIFI services. If you would like to turn off the auto-authentication, you can select ‘Forget this network’ from your WIFI or mobile device settings.
Your browsing is private! We do not link you with the website or content you visit.
Using a digital QR code for entry
A digital QR code will be available to you using the Yas Island mobile application should you choose this as a mode of entry to our destinations. No additional information will be collected from you, however, if you choose to transfer your destination ticket to another individual, you will need to enter the recipient’s email address for the ticket transfer. Please be sure that you have their permission to enter their email address on the Yas Island mobile application or website before you do so.
Making payments
When you’re making payments using your credit or debit card on any of our websites or through the Yas Island mobile application, be rest assured that your card and transaction details are not stored by us! Instead, the details go straight to our payment provider through a secured connection. We stick to top-notch global information security standards to make sure your cardholder info is properly protected.
Purchasing an annual pass
If you purchase an annual pass to our destinations, in addition to your basic information, we will collect a copy of your Emirates identification card or passport, if you would like to use a physical card to enter our destinations. We will also request a photo of the annual pass holder for placement on the card, whether physical or digital, and to create a record on our system. We need this information to help us identify the annual pass holder upon entry to the destination or when making purchases at the destination to avail offers available.
Purchasing experiences at our destinations
If you take part in one of our heart-pounding, high octane driving experiences at Ferrari World Abu Dhabi, in addition to your basic information, we will also need a copy of your driver’s license to confirm that you are a licensed driver.
For our exhilarating active experiences such as those at CLYMB™ Abu Dhabi, we will request details of your activity history or proficiency, for example, your perceived skill level or if you have completed indoor skydiving before. This is so that we can guide you to doing activities that are compatible for you. We will also request sensitive personal information about your health and medical conditions when you choose to participate in these activities to ensure you are safe and sound whilst having the time of your life.
Signing up for offers and marketing and promotional campaigns
If you have opted in to receive marketing and promotional campaigns, we will use your basic personal information to inform you of the latest updates and offers from Miral. Your personal details such as nationality and country of residency will help tailor the marketing and promotional efforts specifically for you to enhance your overall experience.
We have engaged certain hand-picked partners to bring you the best offers and will provide you with information relating to these offers on their behalf.
You may receive this marketing and promotional information from us by email, SMS, WhatsApp, telephone call, social media, mobile and/or web notifications. You may withdraw your consent to receiving such communications at any time by clicking the unsubscribe link in any communication received, turning off your mobile application notifications or you can amend your communication preferences at any time via our preference centre.
When recording your consent, we will store the following information: email address, details of how and when consent was given, the wording of the consent and the information regarding the right to withdraw the consent at any time.
Photography at the destination
We have an automated photo capture system at some of our destinations in specific locations such as rollercoasters and water slides. You will be notified of these points of photo capture, for example before riding a rollercoaster. If you do not wish for your photos to be stored on our system, please request deletion at the nearest sales counter after your ride.
Our roaming photographers are on hand at our destinations to capture your memorable moments! They will only take your photos if you give them the thumbs-up to proceed.
You may purchase your photos at any of the designated sales points using a QR code wristband or using the Photofinder. If you opt to use the Photofinder, we will need your consent and an image of you at the sales point. Our ultra-cool system will find all the photos taken of you during your visit and you will then have the opportunity to select which ones you would like to purchase. The image we take of you at our sales point is not retained on our systems, but your photos are stored for up to 30 days, then they are gone!
Lost and found
When an item is reported as lost, we may collect personal information, such as your name, contact details (phone number, email address), and a description of the lost item, as well as any identification details to help us match the item to you. This information is collected at our lost and found counter, through Yas Concierge or using our website Chatbot. Your personal information will only be used to notify you if your lost item is found.
In cases where you’ve lost a child, we may collect the child's name, age, description, a photograph and any identifying features, as well as the contact information of the parent or guardian to notify them when the child is found. The personal information provided will be used exclusively to identify the child and notify the parent or guardian when the child is located. When collecting your child, we will need a copy of your Emirates identity card or passport on our records for your child’s safety.
Your details will only be stored until the necessary processes are completed and for a short timeframe thereafter.
Yas Concierge
If you need assistance through our contact center, including calls, emails, website Chatbot or live chats, we may collect your personal details, details related to your ticket or services and information related to your query from you to create a record on our system. Your information will only be used to process and confirm the service you require, assist with follow-up questions or issues relating to the service, respond to your queries, provide support and hear about any complaints you may have so that we can improve our services. All calls are recorded for quality control purposes.
Using our website Chatbot
Our website Chatbot uses advanced AI technology to generate responses for you based on a restricted knowledge base. It only accesses the open web in limited circumstances. Please do not provide our chatbot with any personal information unless you request to speak with an agent. If you mistakenly share any other personal information with our chatbot, be rest assured that it will not use your personal information for any purposes except when sharing your chat with our agent to enhance your customer experience.
Our visitor experience kiosks across Yas Island and at Zayed International Arrival Lounge
During your visit to one of our visitor experience kiosks, you will only be requested to provide your personal information about where you are purchasing one of our products. The details we will request at the time of purchase are stipulated above, depending on the engagement or product type that you have decided upon. We will not collect your personal information should you make any queries.
Competitions
Where you have opted to enter one of our competitions, we may also request your gender so that we can customize prizes or giveaways. If you are a winner, we may also require that you take photos for social media, however we will request your consent before doing so.
Visitors at our offices
When visiting our office or parking areas, we will collect your full name and contact details at our front desk, and your Emirates identity card and vehicle registration if you plan to use the car park. This helps us with managing your visit, issuing visitor passes and ensuring the security of our office spaces.
CCTV cameras may be in use throughout our premises, including parking areas, for the safety of all our visitors and employees.
Making bookings through Masarra
We'll also need your hotel/agent reference number to keep things organized. This information helps us engage with you directly, confirm your bookings, and plan your itinerary. Basically, it's our way of making sure you have a fantastic experience!
teamLab mobile application and Sketch Factory
To keep things fun and mysterious, we do not collect any personal information for you to access and operate the teamLab mobile app or for your purchase at Sketch Factory in the teamLab museum.
The teamLab mobile app is operated by teamLab Inc. We do not share any personal details with them. For more information, please visit the teamLab website at https://www.team-lab.com/en/privacy/
JOB APPLICANTS
We are thrilled you’re interested in joining our dynamic team! Whether your CVs are shared directly with us or through our appointed recruiters, we will review them to make a candidate selection. If you’re successful, and once an offer is made to you, you will need to complete a detailed form, including mandatory details relating to you and those you’ve sponsored on your visa. This will go through a clearance process. Once approved, this becomes part of your employee record.
If, for any reason this is not approved, your details are retained for a limited time and will then be disposed of it in line with our regulatory obligations.
OUR SERVICE PROVIDERS
To become an authorised service provider for Miral, you will need to register using the link on our website. All registrations are logged on our systems and where the registration process is completed, your information is stored on our systems for as long as you are a service provider with us and a limited time thereafter. Your information is disposed of in line with our regulatory obligations.
OUR BUSINESS PARTNERS
When partnering with us, we may need certain personal and business details such as the business and authorized persons contact information, company name, business address, tax registration details, business registrations details and trade licenses to facilitate our business relationship. Rest assured, we use this information exclusively to manage and support our business partnership, including communication, contract fulfillment, billing and legal compliance. Your information is retained with us for a limited time after your contract expires and disposed of in line with our regulatory obligations.
Personal information we collect indirectly about you and how we use it
In some cases, information about you may be provided to us by a third party verbally or in writing. For example, this could include if a family member or friend has purchased a package or tickets on your behalf, entered you into a competition or raises a complaint. This may also include our affiliated companies or partners (for example, your chosen travel agent or other entities where you use MyPass to access their site or service), or where you engage with services that we provide in conjunction with other companies (for example, rewards or loyalty points programs, joint promotions or FacePass), or social media or technology platforms (for example, by using your Facebook, Google or Apple account login details to sign into our website, mobile app, MyPass, or Wi-Fi service, where such facility is available).
Depending on the destination, website or mobile application you are visiting and the activity you are undertaking, this information may include the same basic personal information that you had provided to us directly.
The information we collect will only be used in line with the services that you have purchased or requested from us in line with the sections above.
Personal information we collect automatically about you and how we use it
We may automatically collect information about you via cookies and other location-based tracking mechanisms when you visit our websites or use our mobile applications, or our applications on third-party sites or platforms. More information on the use of cookies may be found in our Cookies Policy.
The information we collect includes traffic data, location data, weblogs, communication data and the resources you access; for example, your IP address, device ID, device type, referrer URL, operating system and version, geolocation, browser type and browsing history.
Information may be collected through campaign performance and engagement, including but not limited to information such as email opens, push notifications and SMS clicks.
For security and public safety, CCTV monitoring is in place in certain designated areas of our destinations (only for security and safety reasons and to help prevent fraud or crime).
Other general uses of your personal information
We may use your personal information for other business purposes such as:
Improving our services by remembering your website and mobile application preferences so that we can improve these offerings to you and stay top-notch!
Detecting, investigating and preventing fraud and for fixing potential issues at our destinations, on our technology and to prevent against potential cyberattacks or other abuse of our technology.
Keeping you updated about any operational matters affecting your visit (for example, changes to destination closure timings) your current services or subscriptions, such as security alerts or when your annual passes are due to expire.
Fulfilling our legal obligations to enforce our terms and conditions and other agreements, policies and standards, including investigating any potential violation thereof, detecting, preventing, or otherwise addressing security, fraud or technical issues arising, or protecting the rights, property or safety of us, our users, a third party or the public as required or permitted by law. This may include exchanging information with other companies and organisations.
Making business decisions, for example, carrying out data analytics to assess your needs and stay ahead of trends.
Compiling aggregated or anonymised information (information which does not identify you as an individual, such as statistical or demographic data), to help us improve our products and services. However, if we combine aggregated information with your personal information so that it can identify you in any way, we treat the combined information as personal information and protect it accordingly!
Integrating our websites or mobile applications with third party products (for example, Google Analytics, Facebook, Twitter) to enable us to measure the performance of our websites and website content, present personalised offers and enable you to share, like and recommend pages to others via social media.
Our legal basis for processing your personal information
As an organization based in the UAE, we align with the UAE Federal Law 45 of 2021 on Data Protection. The law specifies certain legal bases for processing personal information. On this basis, we default to explicit, informed consent as the legal basis for processing your personal information. However, we may rely on one of the following legal bases for processing where consent is not appropriate:
processing is necessary for the reasons of public interest;
processing is related to personal information made publicly available by you;
processing is necessary to initiate or defend in any procedures relating to claim of rights and legal actions or in relation to judicial or security procedures;
processing is necessary for the protection of public health, such as the protection from infectious diseases and pandemics, or for ensuring the safety and quality of healthcare, medicine, drugs and medical appliances, in accordance with legislation in force in the UAE;
processing is necessary for archiving purposes or for scientific, historical or statistical studies in accordance with legislation in force in the UAE;
processing is necessary to protect your interests;
processing is required for us to perform our obligations and establish our rights prescribed by law in the area of recruitment or social security or the laws relating to social protection, to the extent permitted by such laws;
processing is necessary for the performance of a contract to which you are a party or for taking any actions upon your request for the purpose of concluding, amending or terminating the contract;
processing is necessary for compliance with obligations prescribed under other laws of the UAE to which we are subject.
We securely retain your personal information
We process and store your personal information in accordance with best practice information and cyber security standards to prevent unauthorised access or disclosure. We use on-site and cloud-based processing and only in certain limited instances, our authorised third-party service providers may have access to your information.
Any transmission of personal information from you to us remains your responsibility. You are also responsible for maintaining the confidentiality of your password and account details.
Where you click a link to any of our partner, advertiser and affiliate’s websites, please note that you are subject to the privacy policies on those websites, and we do not accept any responsibility or liability for their policies or the security of your personal information. Please check their policies before you submit any personal information on those websites.
Unless otherwise required by law, we will retain your data for as long as is necessary for the purposes as outlined in this Privacy Policy.
We share your personal information responsibly
We may share your data with third parties who provide a service to us. We do this where it is necessary for the service provider to have access to your information and solely for the purpose of them delivering that service. We hold them to good practice standards contractually. Our service providers include but are not limited to:
IT companies (e.g. hosting providers);
Wi-Fi providers;
Payment solution providers;
Marketing or communication providers;
Developers and support providers;
Data analytics providers;
Survey or market research providers;
Professional advisers or auditors;
Regulators; and
Insurers.
We may share your data with our affiliates and partners, including sponsors, in limited circumstances:
- We may need to share your personal information with our partners connected with your booking. Such partners include but are not limited to hotels, museums, restaurants or transport providers. We only share the information necessary to process your booking.
- When you use MyPass to access services from our affiliates or partners through their websites, mobile applications or Wi-Fi, we share your data with them to deliver the service and for data analytics purposes.
- Where you make a written request for us to share your details or where required for you to avail certain benefits or loyalty points.
We may also disclose your personal information:
- Within our group of companies to provide a seamless customer experience to you and for our operational purposes.
- To our licensors as per our contractual obligations.
- To government or regulatory bodies or agencies in response to legitimate requests, if required by applicable laws or regulations, or where it is in our legitimate interests to disclose, even if such disclosure is not legally required.
- In cases where you have explicitly requested or authorised us to do so.
- With an acquiring company if we sell or merge whole or part of any business or asset.
We only share the information that is necessary for the purpose, and we do not sell, rent or lease your personal information to third parties under any circumstances.
Wherever possible, we will only share aggregated or anonymised data with our service providers, affiliates or other third parties.
You have certain rights in terms of your personal information
Under applicable data privacy and protection laws, you have specific rights regarding your personal information, including your right to:
- be informed about how your personal information is used
- access, correct, or erase your personal information
- restrict or object to personal information processing
- request to port your personal information
- not be subject to decisions based solely on automated processing.
When exercising your rights, please ensure that you do so in writing using our details by contacting us using the details provided below.
For your safety and to prevent unauthorized disclosure of your personal information, we may need to verify your identity before responding to your request. This may involve asking for specific information or documents. Any data or documents provided will be used solely to process and authenticate your request.
Where you have provided your consent for us processing your personal information, you may exercise your right to opt out at any time. You may do so by clicking the unsubscribe link in relevant communications received, turning off your mobile notifications, contacting us at privacy@miral.ae or updating your communication preferences via our preference centre.
Cookies
Our website uses cookies to enhance your browsing experience, analyse site traffic, and personalize content. By using our website, you consent to the use of cookies in accordance with our Cookies Policy. You can manage or disable cookies through your browser settings at any time, though this may affect your experience on our site. For more information on how we use cookies, please review our full Cookies Policy.
Contact us
For any privacy related queries or to exercise your rights. If you're unsatisfied with our response or believe we are not complying with the law, you may contact the relevant data protection authority.
Updates to this Privacy Policy
We may update this Privacy Policy at any time by posting changes on this page. Please review it periodically. For significant changes, we may notify you via SMS or email. Continued use of our services after updates means you accept the revised policy.
The policy’s last update date is listed below.
22nd May 2025
