OutsPrivacy Policy
This Privacy Policy describes how OUTS collects, uses, stores, processes, and shares personal data through its mobile application, website, and services (“Platform”).
Overview
OUTS (“OUTS”, “we”, “us”, “our”) is committed to protecting your personal information in accordance with the UAE Personal Data Protection Law (Federal Law No. 45 of 2021) (“PDPL”), relevant executive regulations, and the Department of Economy and Tourism (DET) requirements governing event ticketing systems.
By using OUTS, you acknowledge that you have read and understood this Privacy Policy.
Last Updated: July 7, 2026- Jurisdiction: United Arab Emirates (Federal Law No. 45 of 2021 on Personal Data Protection), Dubai Law No. 26/2015
- Applies To: All Users and Hosts using the OUTS Platform
1. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person, as defined under UAE PDPL.
- Sensitive Personal Data: Data relating to health, biometric data, etc. OUTS does not collect such data.
- User: Any individual using OUTS to browse or attend events.
- Host: An individual or business creating events on OUTS.
- Event: Any gathering, activity, or experience listed on OUTS.
- Ticketing Data: Information collected for paid events, as mandated by DET.
- Processing: Any operation performed on Personal Data (collection, storage, transfer, deletion, etc.).
- Payment Gateway: MamoPay or other approved payment processors.
- DET: Department of Economy and Tourism of Dubai.
2. Data We Collect
2.1 User-provided data
- Account information (name, email, phone / WhatsApp number, OTP verification details)
- Profile details (date of birth, gender, profile photo)
- Social preferences (friends, interests, privacy settings)
- RSVPs and attendance history
- Uploaded content (photos, videos, captions, comments)
- Billing address and payment method details, where applicable
2.2 Automatically collected data
- Device information (model, OS version, hardware identifiers)
- IP address, browser type, session identifiers
- Log data, analytics, crash reports
- Location data (approximate or precise, based on permissions)
2.3 Ticketing & transaction data
For paid events:
- Ticket purchase records
- Transaction timestamps
- Payment confirmations
- Payment method details (tokenized, never full card numbers)
- Refund status
2.4 DET-mandated customer data
Collected only for ticketed events under DET regulations:
- Full name
- Nationality
- Email address or phone number
- Country of residence (for business events)
2.5 Host KYC / verification data
For business hosts and paid events:
- Trade license
- Emirates ID
- Event permit numbers
- Bank account information
- Corporate documentation
- Authorized signatory information
2.6 Third-party integrations
- MamoPay payment data
- AWS hosting metadata
- Social login providers (if enabled in the future)
2.7 Event photography and videography
Images and recordings captured by OUTS, Hosts, or their authorized representatives at Events, as described in and consented to under the Ticketing Terms & Conditions.
3. How We Use Personal Data
3.1 To provide and operate OUTS
- Account creation and authentication
- Event discovery, ticketing, RSVPs
- Social features (who’s in, friends attending, etc.)
- Communication with Users and Hosts
3.2 To comply with legal and DET requirements
- Reporting ticketing data to DET
- Retaining records for permitted durations
- Enforcing DET ticketing and API obligations
3.3 To process payments
- Payment initiation and reconciliation
- Fraud detection
- Chargeback handling
- Payouts to Hosts
3.4 To improve our services
- Analytics, metrics, optimization
- Quality assurance
- Machine learning and recommendation systems
3.5 Marketing & communications
- Email, WhatsApp, in-app notifications, SMS (if needed)
Marketing communications are optional and require your explicit consent — see Section 4 for how WhatsApp opt-in/opt-out works.
4. WhatsApp Promotional Messages
Opting in
You may opt in to receive personalized alerts on events and attractions, such as special offers, on-sale announcements, favorite artist performances, and abandoned order messages, via WhatsApp, using the opt-in feature available on the OUTS website, mobile app, or email communications. By opting in, you agree to receive these messages to the WhatsApp account you have registered. You should only receive WhatsApp messages from OUTS’s official WhatsApp Business account, as identified in the App or on the Website; no other number is associated with OUTS.
Opting out
You may stop receiving WhatsApp messages at any time in two ways:
- Via the Website or App: open your OUTS profile settings and uncheck WhatsApp from the notification options.
- Via Customer Support: send a message to OUTS Customer Support expressing your preference to stop receiving WhatsApp alerts, and our team will update your account accordingly.
5. Legal Bases for Processing
OUTS processes Personal Data under the following lawful bases:
- Performance of a contract: providing event discovery, ticketing, payouts
- Compliance with legal obligations: DET reporting, PDPL compliance
- Legitimate interests: fraud prevention, platform improvement
- Consent: marketing, location data, social graph, WhatsApp communications
6. How We Share Personal Data
6.1 With Hosts
Hosts receive only the Personal Data of attendees for their own events, such as full name, contact information, and nationality. Hosts do not receive data about attendees of other events, social graph details, or friends lists. OUTS may provide aggregated, anonymized analytics (e.g., age distribution, preferred venues).
6.2 With DET
Per the OUTS–DET contractual arrangements, OUTS transmits customer data for regulated ticketed events.
6.3 With Payment Gateways
MamoPay receives payment-related information necessary for processing transactions.
6.4 With service providers
- AWS (hosting)
- Analytics providers
- Communication providers (email, WhatsApp)
6.5 With authorities
When required by UAE courts, Dubai Police, DET or relevant regulators, or public health authorities.
6.6 Corporate transactions
If OUTS undergoes a merger, acquisition, or financing round.
7. International Transfers
Data stored on AWS may involve international transfers. OUTS ensures:
- Adequate protection measures
- PDPL-compliant contractual safeguards
- Access control and encryption
- Data minimization
8. Data Retention
- Account data: until account deletion + 6 months
- Ticketing data: as required by DET (typically up to 5 years)
- Payment data: minimum 5 years (UAE commercial law)
- Host verification documents: for the duration of hosting
- Aggregated analytics: indefinitely (non-personal)
9. Data Security
OUTS applies:
- Encryption in transit and at rest
- Access control and credential management
- A secure development lifecycle
- Logging and monitoring
- Incident reporting
- Vulnerability testing
- Firewalls and intrusion detection
10. Data Subject Rights
Users have the following rights under PDPL:
- Right to access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to withdraw consent
- Right to data portability
- Right to complain to UAE authorities
Requests can be submitted to privacy@outs.social.
11. Minors
OUTS is not intended for individuals under 18. If you are under 18, you may use the Website/App only with the involvement and consent of a parent or guardian, and subject to any applicable event-specific age restrictions set by Hosts.
12. Cookies & Tracking
Cookies and similar technologies are governed separately under the OUTS Cookie Policy.
13. Sanctions & Merchant Domicile
OUTS will not deal with or provide any services or products to individuals or entities in any OFAC (Office of Foreign Assets Control) sanctioned country or territory, to the extent prohibited by applicable UAE or international sanctions laws. The merchant domicile is Dubai, United Arab Emirates.
14. Updates to This Policy
OUTS may amend this Privacy Policy from time to time, with the “Last Updated” date revised accordingly. Users will be notified of any material changes and may be required to reconfirm consent.
Contact
- Privacy inquiries or rights requests: privacy@outs.social