Legal

Privacy & Cookies.

Last revised: 2026.

1. What we collect

• Smart-card serial — kept for 24 hours after each top-up to support posting retries, then discarded from active storage.
• Mobile number — kept for 24 months to support refund disputes and re-link to your record on request.
• Top-up amount and order id — kept for 24 months for accounting and dispute resolution.
• Bank-card details are entered on the secure checkout subdomain. They are handled by our PCI-compliant acquirer, never by us. We retain only the masked last-4 digits.
• IP address and rough geolocation — logged for fraud detection, kept for 12 months.
• Email address — if you write to support or opt-in to a receipt.

2. What we do not collect

• Your name (unless you choose to type it into the contact form)
• National ID, passport number, Emirates ID
• Trip history attached to the smart card
• Browsing history outside this site

3. How long we keep it

Top-up records: 24 months for accounting. Support emails: 24 months from the last reply. Server logs: 12 months. Smart-card serial: 24 hours. Anything older is deleted on a rolling basis.

4. Cookies

• A session cookie to keep the top-up form alive while you fill it in.
• A consent cookie to remember whether you accepted or rejected the banner.
• A language cookie to remember English or Arabic.

We do not run advertising cookies. We do not run third-party analytics by default. If we ever do, this banner is updated and consent re-requested.

5. Your rights

You can request the data we hold about a top-up, ask us to correct it, or ask us to delete it. Write to support@checkbuscard.org with the order id. We respond within an office day.

6. International transfers

Our server and database live in the UAE. The acquirer processes payments under PCI rules in the region. If you reach us from outside the UAE, the data still lives here.

7. Contact

Privacy questions: support@checkbuscard.org.