Home / Privacy
Privacy policy
Short version: we collect what a top-up needs and nothing beyond it, we do not sell anything to anyone, and we run no advertising trackers on this site.
Last updated: 2026-09-17
1. Who is responsible
DXB Card Point, 49 6A St, Al Muteena, Deira, Dubai, United Arab Emirates, decides what is collected here and why. Questions about this policy go to contact@dxbcardpoint.org.
2. What we collect, and why
| What | Why we need it |
|---|---|
| Ten-digit tag ID | It identifies the card to be loaded. Without it there is no request. |
| Amount | To quote and to load the right figure. |
| Email address | To send the quote, the payment link and the receipt. |
| Name (optional) | To address you, and to find you at the counter. |
| Mobile number (optional) | Only if you asked for WhatsApp updates. |
| Your own reference (optional) | So your receipt matches your bookkeeping. |
| Message text | Whatever you choose to write in the contact form. |
We do not ask for identity documents, dates of birth, salary details, or anything about your journeys. We have no access to your travel history, and we cannot see it.
3. What we never receive
Full payment card numbers, expiry dates and security codes are entered on our payment provider's own page. They are processed by the provider under their own terms. What reaches us is the result of the transaction and the last four digits, which is what a receipt needs.
4. Legal basis
We process this data to perform the service you asked for, and to keep the financial records that the law requires a business in the United Arab Emirates to keep. Optional fields are processed because you chose to give them.
5. Who else sees it
- Our payment provider — to take the payment and issue the receipt.
- Our email provider — to deliver the messages we send you.
- A regulator, court or auditor — only where the law requires it.
Nobody else. We do not sell, rent or trade personal data, and we do not run advertising or profiling on this site.
6. How long we keep it
- Request and transaction records: five years, which is the retention period for commercial records, then deleted.
- Unapproved quotes: 90 days, then deleted.
- Contact-form messages: 12 months, unless they are attached to a request.
7. Cookies and analytics
This site sets one first-party storage entry to remember your chosen language and light or dark theme, plus one to remember that you dismissed the cookie notice. There is no analytics script, no advertising pixel, no third-party tag and no cross-site tracking. Details are on the cookies page.
8. Your rights
You can ask us to:
- show you what we hold about you;
- correct something that is wrong;
- delete what we are not required to keep;
- send you a copy of your records in a readable format.
Write from the email address you used for the request and we will answer within 30 days. If we have to refuse part of a request — for example, a record we must keep for tax purposes — we will tell you which part and why.
9. Security
Records are held on access-controlled systems, and only the people answering requests can read them. This site is served over HTTPS. If a breach ever affected your data, we would tell you and the relevant authority without delay.
10. Children
The service is meant for adults. We do not knowingly collect data from anyone under 18. A parent topping up a child's card is fine — the account details are the parent's.
11. Changes
Material changes to this policy are published here with a new date at the top of the page. Your rights are never reduced retroactively.
12. Contact
contact@dxbcardpoint.org · +971 4 397 6218 · 49 6A St, Al Muteena, Deira, Dubai, United Arab Emirates