Last updated · 30 April 2026
Privacy policy
This policy explains what NolDubai Services FZ-LLC (“we”, “us”, “the company”) collects when you use the website at noldubai.org, the legal basis on which we process the data, how long we keep it, and how you can exercise your rights.
1. Who we are
NolDubai Services FZ-LLC is a private company registered in Dubai, United Arab Emirates, at 19, 28th Street, PO Box 81450. We can be reached at privacy@noldubai.org for any privacy-related question.
2. What we collect
2.1. Through the top-up form
- The 16-digit public serial number of your Nol card.
- The card family you select (Silver, Gold, Blue or “I'm not sure”).
- The top-up amount you request.
The top-up form does not ask for your name, phone number, email address, card PIN, password, OTP or CVV. The site does not run payment processing.
2.2. Through the contact and complaint form
Your name, email, optional callback phone, the topic you select and the body of your message.
2.3. Through cookies
One functional cookie remembers your language choice; one stores your cookie consent decision. We do not deploy analytics or marketing cookies.
2.4. Server-side technical data
The hosting provider keeps short-term access logs (IP address, time, requested URL) for the purpose of security and fraud detection. Logs older than 30 days are rotated and deleted.
3. Why we collect it
- To process your request. The serial, family and amount are necessary to finalise the top-up through RTA's standard top-up rails.
- To handle complaints and queries. Contact-form submissions are routed to the relevant team and acknowledged within two working days.
- To meet legal obligations. We retain a minimum subset of data to comply with consumer protection and accounting rules in the UAE.
4. Legal basis
We process your data on three legal bases: (a) performance of a contract — to handle your top-up request; (b) compliance with a legal obligation — record-keeping and consumer-protection duties; (c) legitimate interest — fraud and abuse detection on the website. Where you submit the contact form or accept cookies, the basis is your explicit consent.
5. How long we keep it
- Top-up request data is retained for 36 months from the date of the request, after which it is deleted or anonymised.
- Contact-form messages are retained for 24 months.
- Access logs: 30 days.
- Cookie preferences: 12 months from the date of the choice.
6. Who we share data with
We do not sell or rent your data. We share narrowly with:
- The Roads and Transport Authority of Dubai (RTA), where finalising the top-up requires it.
- Hosting and email providers acting on documented instructions, under data-processing agreements.
- Authorities, where compelled to do so by valid legal process.
7. International transfers
Where a service provider operates outside the UAE, we rely on standard contractual clauses or equivalent safeguards. We do not transfer your data to jurisdictions without an adequate level of protection.
8. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise any right, write to privacy@noldubai.org with enough information to identify you and the request you wish to make. We respond within 30 calendar days.
9. Children
The service is not directed at people under 18. If you believe a minor has submitted personal data through this site, please contact us and we will delete it.
10. Security
We protect data with role-based access, encrypted transit, encrypted storage and a written breach-response procedure. Should a breach occur that is likely to result in risk for you, we will notify you and the relevant authorities according to the timelines required by law.
11. Changes to this policy
We update this policy when our practices change. The date at the top of the page reflects the most recent revision. Material changes are notified by email to active customers.
12. How to complain
If you believe we have mishandled your data, write to privacy@noldubai.org. You also have the right to file a complaint with the relevant UAE data protection authority.