Last updated: 30 June 2026

1. GENERAL PROVISIONS

1.1. This Privacy Policy ("Policy") governs the collection, processing, storage, and protection of personal data of users of the website ekarting.ae ("Website"), registered clients of the Company, carried out by EKPRO SPORTS AND RECREATIONAL CLUB L.L.C. ("Company", "We", "Our").

1.2. The Company operates in accordance with Federal Decree-Law No. 45 of 2021 of the United Arab Emirates "On the Protection of Personal Data" (PDPL), as well as other applicable regulatory acts of the Emirate of Dubai.

1.3. By using the Website or App, as well as upon registration directly at the karting centre, you confirm that you have read this Policy and agree to the terms of processing of your personal data.

1.4. This Policy also applies to the mobile application "EKDubai" ("App"), published on Google Play and App Store, through which the Company's karting services are made available.

1.5. The App is developed and published by APEX TIMING, a company registered in France (RCS Annecy No. 531 976 017), with its registered office at 11 route de la Salle, Cran-Gevrier, 74960 Annecy, France. APEX TIMING acts as developer of the App and as a service provider of the Company. The controller of personal data remains EKPRO SPORTS AND RECREATIONAL CLUB L.L.C.

2. DATA WE COLLECT

2.1. We collect the following categories of personal data:

• - Identification data: first name, last name, date of birth, gender;
• - Contact details: telephone number, email address;
• - Booking data: date and time of visit, selected services, number of participants;
• - Technical data: IP address, browser type, device, Website visit history (cookies);
• - Payment data: transaction information (payment processing is carried out through secure third-party gateways; we do not store bank card details);
• - Health and safety data (where necessary): information on medical restrictions necessary to ensure safety in the provision of karting services;
• - Consent to email newsletters.

2.2. We do not collect special categories of personal data (race, political opinions, religious beliefs, biometric data) without your explicit consent, except where necessary to ensure safety (for example, age verification for admission to races).

2.3. Where separate consent is provided at the time of booking for the use of images and/or video recordings made by CCTV cameras or official photographers on the Company's premises, the storage and use of such materials shall be carried out in accordance with Federal Decree-Law No. 45 of 2021 of the UAE on the Protection of Personal Data. You have the right to withdraw your consent to the use of your images by sending a request to privacy@ekarting.ae.

3. PURPOSES OF PROCESSING PERSONAL DATA

3.1. We process your personal data exclusively for the following lawful purposes:

• - Conclusion and performance of the contract for the provision of karting services;
• - Ensuring the safety of race participants (verification of age, height, weight);
• - Notification regarding bookings, schedule changes, and special offers;
• - Payment processing and issuance of invoices;
• - Improvement of service quality and user experience on the Website or App;
• - Compliance with UAE legal requirements (including requirements of the Dubai Sports Council, Civil Defence, and migration services).

3.2. Data processing is carried out on the following legal grounds:

• - Your consent (for marketing communications, processing of special categories of data);
• - Performance of a contract (booking, provision of services);
• - Legitimate interests of the Company (ensuring safety, prevention of fraud);
• - Compliance with legal obligations (reporting to regulatory authorities).

4. TRANSFER OF DATA TO THIRD PARTIES

4.1. We do not sell or transfer your personal data to third parties for commercial purposes.

4.2. Your data may be transferred to the following categories of recipients:

• - Service providers: payment gateways, booking services, hosting providers (only to the extent necessary for the provision of services);
• - Government authorities: pursuant to an official request under UAE legislation (police, courts, Dubai Sports Council, migration services);
• - Insurance companies: in the event of an incident on the track for the purpose of processing an insurance claim.

4.3. Where data is transferred outside the UAE, we ensure a level of protection consistent with the requirements of Articles 22–23 of Federal Decree-Law No. 45/2021, including the conclusion of agreements with data recipients regarding compliance with protection standards.

5. STORAGE AND PROTECTION OF DATA

5.1. We store your personal data only for as long as necessary to achieve the purposes of processing, but in no event longer than:

• - Booking data: 3 (three) years from the date of the last visit;
• - Financial data: 5 (five) years in accordance with UAE tax legislation;
• - Safety data: 3 (three) years from the date of the incident (if any);
• - Marketing data, photographs and video recordings containing images (where separate consent was provided at the time of booking): until consent is withdrawn.

5.2. We apply technical and organisational measures to protect data, including:

• - Encryption of data during transmission (SSL/TLS);
• - Regular data backup;
• - Training of personnel on data protection matters.

6. YOUR RIGHTS AS A DATA SUBJECT

In accordance with Articles 13–18 of Federal Decree-Law No. 45/2021, you have the right to:

6.1. Right of access: to request confirmation of the processing of your data and a copy of the processed data.

6.2. Right to rectification: to request correction of inaccurate or incomplete data.

6.3. Right to erasure: to request deletion of data where:

• - the data are no longer necessary for the purposes of processing;
• - you have withdrawn consent to processing;
• - the processing was carried out unlawfully.

6.4. Right to restriction of processing: to request suspension of processing in cases provided for by law.

6.5. Right to data portability: to receive your data in a machine-readable format for transfer to another controller.

6.6. Right to object: to object to the processing of data for the purposes of direct marketing.

6.7. Right not to be subject to automated decision-making: to object to decisions based solely on automated processing, where such decisions produce legal effects concerning you.

7. HOW TO EXERCISE YOUR RIGHTS

7.1. To exercise the rights set out in Section 6, please send a request to the following email address: privacy@ekarting.ae, specifying:

• - Your full name and contact details;
• - The nature of your request;
• - Where necessary, a copy of an identity document.

7.2. We shall respond to your request within 14 (fourteen) business days. In complex cases, this period may be extended by a further 14 days, with prior notification to you.

7.3. You also have the right to lodge a complaint with the UAE Data Office (the UAE data protection authority) if you believe that your rights have been infringed: www.data.gov.ae.

8. COOKIES AND SIMILAR TECHNOLOGIES

8.1. The Website uses cookies for the following purposes:

• - Ensuring the functionality of the booking system;
• - Analysing website traffic (Google Analytics, Meta Pixel);
• - Personalisation of content and advertising.

8.2. You may manage cookie settings through your browser settings. Refusing all cookies may limit the functionality of the Website.

9. CHANGES TO THE POLICY

9.1. We reserve the right to amend this Policy. The current version is always available on the Website or App. Material changes will be brought to your attention via a notice on the Website, App or by email.

10. CONTACTS

For questions regarding the protection of personal data, please contact:

EKPRO SPORTS AND RECREATIONAL CLUB L.L.C.

Email: privacy@ekarting.ae

Telephone: +971 55 587 4374

Address: UAE, Dubai, Al Quoz Industrial Second, Plot No. 157-0, Units S09–S14