Privacy policy

Last updated: 5 September 2026

Who we are

DXB.IST is a travel agency operating in the United Arab Emirates and Türkiye. This policy explains what personal data we collect through dxb.ist, why, and how you can exercise your rights.

What we collect

Booking and enquiry data you submit (name, email, phone, nationality, travel dates, special requests); payment confirmation from Stripe (we never see or store full card numbers); newsletter email addresses; and technical data such as IP address, browser and pages visited, used for security and to improve the site.

Why we use it

To deliver the services you book, to answer enquiries, to send booking confirmations and operational messages, to send newsletters you have opted into, to comply with legal obligations (including tourism and tax regulations in the UAE and Türkiye), and to protect the site against abuse.

Sharing

We share data only with suppliers needed to deliver your booking (guides, drivers, hotels, airlines), with Stripe for payment processing, with email delivery providers, and with authorities where legally required. We do not sell personal data.

Retention

Booking records are kept for as long as required by accounting and tourism regulations (typically 5–10 years). Enquiries are deleted after 24 months. You can unsubscribe from newsletters at any time via the link in each email.

Your rights

You can request access to, correction of, or deletion of your personal data, or object to processing, by emailing hello@dxb.ist. We respond within 30 days. Residents of the UAE, Türkiye and the EU have rights under the PDPL, KVKK and GDPR respectively.

Cookies

We use strictly necessary cookies (language preference, admin session) and, if you consent, analytics cookies. No advertising cookies are set by default.