Privacy Policy
Last updated: May 2026
The Global Resident ("we", "us", or "our") operates the website at the-global-resident.com. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our site.
Data Controller: The Global Resident, reachable at hello@the-global-resident.com and the-global-resident.com.
We are committed to protecting your privacy and complying with applicable data protection laws including:
- EU General Data Protection Regulation (GDPR) 2016/679
- UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and its Executive Regulations
- Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap. 486)
1. Information We Collect
Analytics data We use Plausible Analytics, a privacy-first analytics tool that does not use cookies, does not collect personally identifiable information, and does not track you across sites. Plausible processes aggregate statistics only (page views, referrers, device type, country). No consent banner is required for Plausible as it does not process personal data.
We may also use Cloudflare Web Analytics under the same privacy-first principles.
Newsletter If you subscribe to our newsletter, we collect your email address. We use this solely to send you editorial content — travel rewards news, card promotions, and site updates. We will never sell or share your email with third parties. You can unsubscribe at any time using the unsubscribe link at the bottom of any email.
Contact and enquiry forms If you contact us or submit a travel advisor enquiry, we collect the information you provide (name, email address, and any travel details you include). This is used solely to respond to your request.
Cookies Our site uses minimal cookies. We do not use advertising or tracking cookies. See our Cookie Policy for full details.
2. Lawful Basis for Processing (GDPR — EU/EEA Visitors)
For visitors from the EU/EEA, we process personal data on the following lawful bases under GDPR Article 6:
You may withdraw consent for newsletter communications at any time by clicking unsubscribe. This does not affect the lawfulness of processing carried out before withdrawal.
3. UAE PDPL Compliance
Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL):
Controller identification: The Global Resident is the data controller for personal data processed through this website. Contact: hello@the-global-resident.com.
Consent: Where we collect personal data directly from UAE-based individuals (newsletter subscriptions, contact forms), we rely on explicit consent. You may withdraw consent at any time.
Data subject rights under PDPL: UAE residents have the right to:
- Access personal data we hold about them
- Correct inaccurate or incomplete data
- Request erasure of their data (subject to legal retention requirements)
- Restrict processing in certain circumstances
- Withdraw consent at any time without penalty
To exercise these rights, contact: hello@the-global-resident.com. We will respond within 30 days. If you are unsatisfied with our response, you may escalate to the UAE Data Office at dataoffice.ae.
Cross-border data transfers: Our newsletter provider and analytics tools may process data outside the UAE. We use providers that maintain appropriate safeguards for international transfers consistent with PDPL requirements.
4. Hong Kong PDPO Compliance
Under the Personal Data (Privacy) Ordinance (Cap. 486), we adhere to the six Data Protection Principles (DPPs):
DPP 1 — Purpose and collection: We collect personal data (email address, contact details) only for the specific, directly related purposes stated at the time of collection: delivering newsletters and responding to enquiries.
DPP 2 — Accuracy and retention: We retain newsletter subscriber data until you unsubscribe. Contact form submissions are retained for up to 12 months. We do not retain data longer than necessary for its original purpose.
DPP 3 — Use: Personal data is used only for the purpose for which it was collected. We do not use your email address for any purpose other than the newsletter you subscribed to or the enquiry you submitted.
DPP 4 — Security: We take reasonable steps to protect personal data against unauthorised access, processing, erasure, or use. Our systems use HTTPS encryption for all data in transit.
DPP 5 — Openness: This Privacy Policy describes our data policies and practices. For questions or to request access to your data, contact: hello@the-global-resident.com.
DPP 6 — Data access and correction: Hong Kong residents have the right to access personal data we hold about them and to request correction of inaccurate data under PDPO Section 18 and Section 22. Submit requests to: hello@the-global-resident.com. We will respond within 40 days as required by PDPO. If access is refused, we will provide reasons in writing.
Unresolved complaints may be escalated to the Privacy Commissioner for Personal Data at pcpd.org.hk.
5. How We Use Your Information
We use the information we collect to:
- Deliver newsletter content to subscribers who have opted in
- Respond to enquiries and travel advisor booking requests
- Understand aggregate site usage via cookieless analytics
- Comply with legal obligations
We do not sell, rent, or share personal data with third parties for marketing purposes.
6. Affiliate Links and Third-Party Data Processing
Our site contains affiliate links to third-party websites including banks, airlines, hotels, and booking platforms. When you click an affiliate link:
- You leave our site and are subject to the third party's privacy policy
- The third party may set tracking cookies to attribute referrals for commission purposes
- We do not receive or process any personal data you provide to the third party
We are not responsible for the data practices of third-party sites. We recommend reviewing their privacy policies before submitting personal information.
Our affiliate relationships are disclosed on all pages where affiliate links appear.
7. Data Retention
8. Data Security
We implement reasonable technical and organisational measures to protect personal data, including HTTPS encryption for all data in transit and access controls for any stored data. No internet transmission is fully secure; we cannot guarantee absolute security.
9. Children's Privacy
Our site is not directed at children under 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at hello@the-global-resident.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be noted prominently. Continued use of the site after changes constitutes acceptance of the updated policy.
11. Contact and Data Subject Requests
For all privacy enquiries, data subject access requests (GDPR Article 15–17), PDPL requests, and PDPO access/correction requests:
The Global ResidentEmail: hello@the-global-resident.comWebsite: the-global-resident.com
Please include "Data Request" in the subject line and specify your jurisdiction (EU/UAE/HK) and the nature of your request. We will acknowledge within 5 business days and respond in full within 30 days (or 40 days for PDPO requests).
Supervisory authorities:
- UAE: Data Office — dataoffice.ae
- Hong Kong: Privacy Commissioner for Personal Data — pcpd.org.hk
EU/EEA: Your national data protection authority (list at edpb.europa.eu)