Last updated: 7 July 2026 | Effective: 7 July 2026 | BusPoint | Reg No AE2024007
BusPoint ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect information obtained through your use of buspoint.org and the Hafilat card top-up service. This policy is designed to comply with applicable UAE data protection laws and is informed by international best practices including the principles of GDPR.
1. Information We Collect
1.1 Information You Provide Directly
When you use our Service, you may provide us with:
- Hafilat card number: The 16-digit identifier required to process your top-up request.
- Top-up amount: The amount you wish to add to your Hafilat card.
- Contact information: Name, email address, phone number (when contacting support or submitting the contact form).
- Payment information: Payment method details necessary to process your transaction. We use third-party payment processors and do not store full card payment details on our servers.
1.2 Information Collected Automatically
When you visit our website, we may automatically collect certain technical data including:
- IP address and approximate geographic location (country/city level).
- Browser type and version, operating system.
- Pages visited, time spent on pages, and navigation paths.
- Referring URL and search terms used to find our site.
- Device type and screen resolution.
This information is collected through standard web server logs and may use cookies or similar technologies as described in Section 7 below.
2. How We Use Your Information
We use the information collected for the following purposes:
- Service delivery: To process your Hafilat card top-up request and communicate with you regarding its status.
- Customer support: To respond to your inquiries, complaints, or requests submitted through our contact channels.
- Fraud prevention: To detect, investigate, and prevent fraudulent transactions and unauthorized use of the Service.
- Legal compliance: To comply with applicable UAE laws, financial regulations, and regulatory requirements.
- Service improvement: To analyze usage patterns, improve our website, and enhance the user experience.
- Communications: To send you transaction confirmations and service-related notifications. We do not send unsolicited marketing communications without your consent.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: Processing is necessary to fulfill your top-up request and provide the Service you have requested.
- Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, security, and service improvement, provided these interests do not override your fundamental rights.
- Legal obligation: Processing is required to comply with applicable UAE laws and regulatory obligations.
- Consent: Where we rely on consent, you may withdraw it at any time by contacting us at support@buspoint.org.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your data in the following limited circumstances:
- Service providers: Trusted third-party vendors who assist in operating the Service, such as payment processors and IT infrastructure providers, under strict confidentiality agreements.
- Legal requirements: When required by UAE law, court order, or lawful request from a government authority.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity under the same privacy protections.
- With your consent: In any other circumstances where you have provided explicit consent.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
- Transaction records are retained for a minimum of five (5) years in accordance with UAE financial record-keeping requirements.
- Hafilat card numbers submitted with top-up requests are retained for the duration of transaction processing and a reasonable period thereafter for dispute resolution.
- Contact form submissions are retained for up to twelve (12) months unless further retention is required.
- Web access logs are retained for up to ninety (90) days.
6. Your Rights
Subject to applicable UAE law, you have the following rights regarding your personal data:
- Right to access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
- Right to restriction: You may request that we restrict processing of your personal data in certain circumstances.
- Right to data portability: Where technically feasible, you may request your data in a structured, commonly used format.
- Right to object: You may object to processing based on legitimate interests.
To exercise any of these rights, please contact us at support@buspoint.org. We will respond to your request within 30 days.
7. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to enhance your browsing experience:
- Essential cookies: Required for basic website functionality, including language preference storage.
- Analytics cookies: Used to understand how visitors interact with the website to improve our Service.
You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the website. We do not use advertising or tracking cookies for third-party marketing purposes.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- Restricted access to personal data on a need-to-know basis.
- Regular review of data handling practices and security measures.
- Use of reputable, PCI-compliant payment processing services.
While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your data.
9. International Data Transfers
Your personal data is primarily processed and stored within the UAE. Where data is transferred to service providers outside the UAE, we ensure appropriate safeguards are in place consistent with applicable data protection requirements.
10. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection contact:
- Email: support@buspoint.org
- Address: F9J3+44W - Al Hisn - W6, Abu Dhabi, UAE
- Phone: +971 XX XXX XXXX
We are committed to resolving any concerns about your privacy promptly and fairly.