Legal
Privacy policy
Last updated 20 September 2026.
Joshi Bamshtein LLC, trading as Joshi & Bamshtein, is a travel advisory registered in Dubai, United Arab Emirates. This notice explains what we do with personal information when you use joshibamshtein.com, create an account, send us an enquiry, or ask us to arrange travel for you.
If you do not agree with it, please do not use the site. If anything here is unclear, write to privacy@joshibamshtein.com and a person will answer you.
Summary
- What we collect. The details you give us when you create an account or send an enquiry, the preferences you choose to share, and basic technical information about your visit.
- Sensitive information. We do not ask for passport details or payment card details through this website. If a booking needs them, we ask you directly and share them only with the supplier who needs them.
- Why we use it. To answer your enquiry, arrange the travel you ask for, keep your account working, and improve the site.
- Who we share it with. The hotels and suppliers needed to fulfil a reservation you have asked for, and the providers who host our site and run our client records and email. We do not sell personal information.
- Your rights. You can ask for a copy of your information, correct it, or ask us to delete it. Write to privacy@joshibamshtein.com.
1. What information we collect
Information you give us
When you create an account, complete your profile, shortlist a property, send an enquiry or write to us, we collect:
- your first and last name;
- your email address;
- your telephone number, stored in full international format so that we can reach you wherever you are;
- your country of residence;
- the travel preferences you choose to give us, such as room and bed preference, dietary requirements, who you usually travel with, and any notes you add;
- the details of the trips you ask about, including destination, dates or date flexibility, the number of adults, children and rooms, the occasion, the budget range you select, and anything you write in the notes;
- the properties you shortlist and any notes you attach to them;
- the messages you exchange with your travel advisor through your account;
- whether you want to hear from us by email.
Information needed to complete a booking
Once you accept a proposal, a supplier may require further details, typically full names as they appear on travel documents, dates of birth, passport or travel document details, loyalty programme numbers, and accessibility or medical requirements. We ask for these directly, not through a form on this website, and we pass them only to the supplier that needs them for your reservation.
Payment details
No prices are published on this website and no payment is taken through it. Payment arrangements are set out in the written proposal we send you, and are made either directly to the supplier or through a payment channel we identify to you at the time. We do not store card numbers.
Information collected automatically
When you visit the site we collect technical information that does not identify you by name:
- the country your visit appears to come from, derived from your network address, which we use to choose your language and to preselect a dialling code;
- your browser and device type, and your language preference;
- the pages you view and the searches you run on the site;
- the website that referred you, and any campaign parameters carried in the link you followed.
We keep a short record of the pages a visitor looked at before sending an enquiry, so that the travel advisor who picks it up already understands what you were considering. It is linked to an anonymous identifier stored in a cookie, and to your account only once you sign in.
Information from other sources
If you reach us through a social media profile or a referral, we may receive your name and contact details from that source. We do not buy marketing lists.
2. How we use your information
- To create and manage your account and keep you signed in.
- To answer your enquiry, prepare a written proposal, and arrange and manage the travel you ask us to book.
- To pass the details a supplier requires in order to hold and honour your reservation.
- To apply the benefits of the preferred partner programmes we belong to, which means telling the property who you are and what the occasion is.
- To send you messages about your enquiries and reservations.
- To send you occasional letters about properties and seasons, if you have asked for them. You can stop them at any time.
- To understand how the site is used and to improve it.
- To keep the site secure and to prevent fraud and abuse.
- To meet our legal and record keeping obligations.
We do not make decisions about you by automated means, and we do not profile you for advertising.
3. The legal grounds we rely on
We are established in the United Arab Emirates and process personal information under Federal Decree Law No. 45 of 2021 on the Protection of Personal Data. Where we offer services to people in the European Union or the United Kingdom, the General Data Protection Regulation and the UK GDPR also apply, and we rely on these grounds:
- Performance of a contract. Arranging and managing the travel you ask us to book, and running your account.
- Consent. Marketing emails, and any sensitive information such as dietary, accessibility or medical requirements that you choose to share. You can withdraw consent at any time.
- Legitimate interests. Keeping the site secure, understanding how it is used, understanding which channels bring us enquiries, and answering questions you send us. We balance these against your rights.
- Legal obligation. Keeping commercial records and responding to lawful requests from authorities.
4. Who we share it with
- Travel suppliers. The hotels, resorts, villas, airlines, cruise lines, transfer companies, car hire companies, tour operators and insurers involved in the trip you have asked us to arrange. They receive only what they need to hold and deliver your reservation, and they use it under their own privacy terms.
- Preferred partner programmes. Where a booking is made through a programme that gives you amenities, the property is told that you are our client so that the benefits are applied.
- Our service providers. The companies that host the website and its database, store the photography, keep our client records, and send our email. They act on our instructions under contract and may not use your information for their own purposes.
- Professional advisers and authorities. Our accountants, auditors and lawyers, and any authority we are legally required to respond to.
- A business transfer. If the business is sold or reorganised, your information may transfer with it, subject to this notice.
We do not sell personal information and we do not share it for cross context behavioural advertising.
5. Cookies
We use a small number of first party cookies and no advertising cookies. They are listed in full in our cookie notice.
6. Sending information outside the Emirates
Our suppliers and service providers are located in many countries, so arranging your travel necessarily involves sending your details abroad, including to countries whose data protection laws differ from those of the United Arab Emirates. Where we appoint a service provider outside the Emirates we put contractual protections in place. Where a transfer is needed to perform the booking you have asked for, we rely on that necessity.
7. How long we keep it
- Your account and the preferences in it, for as long as the account is open, and for twelve months after you close it in case you return.
- Enquiries, proposals and reservations, for as long as United Arab Emirates law requires us to keep commercial records, currently five years from the end of the financial year concerned.
- Marketing consent records, for as long as you are subscribed and for two years after you unsubscribe, so that we can show we honoured your choice.
- Visit and journey records, for twelve months.
8. How we keep it safe
Traffic to and from the site is encrypted. Passwords are stored only as a one way hash and are never visible to us. Access to client records is limited to the people who need it to do their work. No transmission over the internet can be guaranteed to be completely secure, so we cannot promise absolute security, but we will tell you and the relevant authority about a breach affecting you where the law requires it.
9. Children
This site is not intended for anyone under eighteen and we do not knowingly collect information from children. Where a booking includes a child, the details are given to us by the adult making the arrangements.
10. Your rights
Wherever you live, you may ask us to:
- give you a copy of the personal information we hold about you;
- correct anything that is wrong or incomplete;
- delete your information, where we are not required to keep it;
- restrict or object to how we use it;
- send a copy to you or to another provider in a portable format;
- withdraw a consent you gave us, including for marketing;
- stop marketing altogether, which you can also do from the link in any letter we send.
Write to privacy@joshibamshtein.com. We will answer within thirty days and will not charge you. We may ask you to confirm who you are before we act.
If you are in the European Union or the United Kingdom you may also complain to your national data protection authority. If you are in the United Arab Emirates you may complain to the UAE Data Office. If you are a California resident you may ask what categories of information we collected and disclosed in the past twelve months, ask us to delete it, and ask us not to sell or share it, which we do not do in any case; you will not be treated differently for asking.
11. Do not track
Browsers can send a do not track signal. There is no agreed standard for responding to it, so we do not respond to it. We do not track you across other companies' websites in any case.
12. Closing your account
You can ask us to close your account at any time by writing to privacy@joshibamshtein.com. We will close it and delete your profile and preferences. Records of reservations we have already arranged are kept for the period described in section 7, because we are required to keep them.
13. Changes to this notice
We update this notice when our practices change. The date at the top shows when it last changed. If a change materially affects you we will tell you by email.
14. How to contact us
Joshi Bamshtein LLC, trading as Joshi & Bamshtein
TJG, Level 41, Emirates Towers
Sheikh Zayed Road, Dubai
United Arab Emirates