Privacy

Privacy notice

This privacy notice explains what data gosti.ae collects, why, for how long, and what your rights are. It applies to the contact form on this website.

Who we are

gosti.ae is operated by a legal entity to be registered in the United Arab Emirates (mainland). Until the operator's registration is complete, the contact address for any privacy enquiry is info@gosti.ae.

When the registration is finalised, this notice will be updated with the operator's legal name, address and trade licence number. Until then, please write to info@gosti.ae if you wish to exercise any of your rights under the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL").

What data we collect

The contact form on this website collects the following fields when you submit an enquiry:

  • Your name
  • The venue or group you represent
  • Email address
  • Phone or WhatsApp number (optional)
  • Your message
  • The language of the form (en or ar)

In addition, the server processes your IP address for the sole purpose of rate-limiting form submissions. The IP address is hashed before being written to a temporary file used by the rate limiter; it is never stored in plain text.

Why we process it

The data you submit through the form is used solely to:

  • Respond to your enquiry
  • Prepare a written proposal as discussed
  • Carry on the conversation that follows

We do not profile, we do not segment, and we do not sell or share your data with third parties.

How long we keep it

We retain form enquiries only for as long as needed to respond and complete the conversation. After the purpose is fulfilled, or upon your written request to info@gosti.ae, the data is deleted from the operator's mailbox and backups. We do not retain form data for longer than 24 months under any circumstance.

Cookies

This website uses a single session cookie (PHPSESSID), set only when the contact form is loaded. The cookie is strictly necessary to protect the form against cross-site request forgery (CSRF). It is set with the HttpOnly, Secure and SameSite=Strict attributes.

We do not use analytics cookies, advertising cookies, or any third-party tracking pixels. No cookie banner is shown because no consent is required for the strictly necessary cookie we use.

If at any point a tracking cookie or analytics is added, this notice will be updated and a real consent banner will be introduced before any non-essential cookie is set.

Third-party services

None. The fonts used on this website are served from gosti.ae itself. There are no third-party JavaScript libraries, no analytics providers, and no advertising networks. Your IP address does not leave the UAE while browsing this website.

Cross-border transfer

We do not transfer personal data outside the United Arab Emirates. The contact form is processed on the server hosting gosti.ae; the email carrying your enquiry is delivered to a mailbox hosted in the UAE.

Your rights under UAE PDPL

Under the Federal Decree-Law No. 45 of 2021, you have the right to:

  • Be informed about how your data is processed (this notice)
  • Access the data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted when it is no longer needed
  • Withdraw any consent you may have given (none is required to browse this site)
  • Lodge a complaint with the competent UAE data protection authority

To exercise any of these rights, write to info@gosti.ae.

Changes to this notice

This notice may be updated. The date of the latest revision is shown at the bottom of this page.

Contact

For any question about this notice or your data, write to info@gosti.ae.

Last updated: 4 October 2026.