Introduction

bamboo Card (“bamboo”) is a digital gift card platform operated by BAMBOO ELECTRONIC CARDS TRADING L.L.C a company incorporated under the laws of the United Arab Emirates, with its registered office at 3107, Mazaya Business Avenue, JLT, Dubai, UAE.

bamboo provides a robust digital infrastructure that enables businesses and individuals to send, receive, and manage prepaid cards and digital gift cards across a global network of over 3,000 brands. Through our secure APIs and platform, clients can issue, distribute, and redeem digital value such as gift cards, prepaid cards, rewards, and incentives for a variety of use cases including ecommerce, employee recognition, and customer engagement. This website offers detailed information about our services and provides a gateway for inquiries and engagement with our team.

Data Protection Responsibility

bamboo is the Data Controller for the personal data collected through this website (referred to as “we”, “us” or “our” throughout this Privacy Policy).

We are committed to protecting your personal data and your right to privacy. We have a dedicated person responsible for overseeing questions related to this Privacy Policy. If you have any questions or would like to exercise your legal rights, please contact us using the details provided at the end of this policy.

Collection of your personal data (LEGAL BASIS)

When you use our website or register for an account, we may collect and process the following types of personally identifiable information (“Personal Data”) in accordance with applicable data protection laws in the United Arab Emirates:

• Identity Data: Includes your first name, last name, date of birth, and any additional identifying documents or details you may voluntarily provide (e.g., curriculum vitae).
• Contact Data: Includes your business or residential billing address, delivery address, phone number, and email address.
• Professional Data: Includes your company name, job title, and company address or location.
• Technical Data: Includes your Internet Protocol (IP) address, browser type and version, time zone setting, language preferences, geolocation, and device identifiers when accessing our website.
• Usage Data: Includes information about how you use our website, products, and services. This may include clickstream data, session duration, and interactions with content. Cookie-related data is also included — for more details, please refer to our full Cookie Policy.
• Marketing and Communication Data: Includes your preferences for receiving marketing materials from us and your communication preferences. It may also include responses to surveys, support queries, email correspondence, or recorded live chat conversations.
• Transaction Data: Includes details of any payments or refunds made via our platform. This may involve bank account details, credit/debit card numbers (where applicable), and transaction history. Please note that we do not store full payment card data; such data is handled securely by our payment processors.
• Commercial Information: Includes information related to disbursed payments, payment originators (payors), and a record of services provided to you.
• Data from Other Sources: If you choose to log in using third-party platforms such as Google, social media accounts, or email service providers, we may collect relevant authentication and user data from those services in accordance with their privacy policies.

Data that has been pseudonymised, anonymised, or aggregated in such a way that it cannot be linked back to an individual is not considered Personal Data under applicable laws.

How We Use Your Information

We only use your Personal Data in compliance with data protection laws and regulations. We will use your Personal Data in the following circumstances:

• Contract – Where we need to perform the contract we are about to enter into or have entered into with you or a third party in which you have contracted with is using our services to execute the service
• Legitimate Interest – Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Legal obligation – Where we need to comply with a legal or regulatory obligation. 
• Consent – Where you consent to us processing your Personal Data for example to assist with research to help improve our products or website. 

Purposes for which we will use your Personal Data subject to obtaining a Legal Basis to use it:

• to register and manage your account on our platform (including preference settings);
• to provide technical support to you;
• to send you the company’s newsletter or email notifications and updates regarding your account or purchases on our website; 
• to schedule a demo meeting or case study call with one of our sales representatives;
• to obtain your opinion on your experience on our website or to publish reviews and ratings of our services and website; 
• to enable you to participate in marketing campaigns, e.g. refer-a-friend; 
• to help us optimise and improve our website using your Personal Data with analytics and data from search-engine providers or social media companies. If we use social media data it will be shared information which will be governed by the social media provider’s privacy notice to you; 
• to provide reporting or analytics;
• to carry out any risk or fraud prevention checks; 
• to undertake fraud prevention and risk analysis on’
• to create an account with a third party platform which will execute the service you have requested us or a customer of ours to perform; and 
• to process your application for a job or role with us.

Consent

By consenting to this privacy notice you are giving us permission to process your Personal Data specifically for the purposes identified.

You may withdraw your consent at any time by completing a Subject Consent Withdrawal Form. This will be provided to you upon emailing us at the contact details below.

Disclosure of personal data to third parties

bamboo Card may disclose your Personal Data to third parties, where necessary or required in accordance with data protection laws. These companies can only use your Personal Data in line with the law and in compliance with our specific instructions. Here is a list of Companies we may share your information with: 

bamboo Card Associated companies

These companies are controlled by bamboo Cards. We may share data with other bamboo Card associated companies if they provide services to you or to us.

Third-Party Service Providers

This includes service providers, who assist us with the running of our website and business activities including specialised services providers such as regulated payment providers. These have been appointed with the appropriate safeguards in place. A list of any sub-processors can be provided to you upon request, using our contact details set out below. This list may change or grow and you can request to be notified of any changes.

Legal Compliance

We may also share your Personal Data with third parties to comply with applicable legislation and regulatory requirements. Examples of such third parties include the Federal Tax Authority, the UAE Data Office (or relevant data protection authorities), fraud prevention agencies, law enforcement bodies such as the police, and other competent government or public authorities within the United Arab Emirates.

Retention period

We will retain your Personal Data for no longer than is necessary. We will generally retain Personal Data that you provide us for as long as we consider it potentially useful in contacting you about our services, as needed for our legal obligations, or to complete our contractual obligations.

In some instances, we will delete this information at an earlier date if you so request.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

For Newsletter subscriptions, we will retain your information until you unsubscribe from the Newsletter.

Data Security

We implement appropriate technical and organizational safeguards to protect your personal data. These measures include encryption, access controls, secure hosting environments, and staff training.

Despite our efforts, no system is entirely secure. If we detect a breach that affects your data, we will notify you and relevant authorities as required by law.

Cookies

When you access and use our website we may use cookies to track, collect and aggregate information about your use. We may obtain information about your general internet usage by using a cookie file which is stored on your computer. These cookies help us to improve our website and to deliver a better and more personalised service. You can refuse to accept cookies by changing the settings on your browser. For more information about our use of cookies, please refer to our Cookie Policy.

Your Data Protection Rights

Along with any applicable data protection laws, at any point while we are in possession of or processing your Personal Data, you have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to judicial review – in the event that bamboo card refuses your request under rights of access, we will provide you with a reason as to why.

All of the above requests will be forwarded should there be a third party involved.

To exercise any of these rights, please contact us (details set out below).

Complaints

In the event that you wish to make a complaint about how your Personal Data is being processed by us, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and bamboo’s Data Protection Officer.

Children’s Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect or solicit personal data from children. If you believe a child has provided us with personal data, contact us immediately so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. Updates will be posted on this page with a revised “Effective Date.” We encourage you to review this page regularly to stay informed.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

• Email: support@bamboo-card.com
• Address:   3107, Mayzaya Avenue BB2, JLT
    Dubai, United Arab Emirates