Tappit UAE
Privacy Policy
هذه الصفحة متوفرة حالياً باللغة الإنجليزية فقط، وستتوفر النسخة العربية قريباً.
Last updated: November 2026
1. Who we are
Tappit is a brand operated in the United Arab Emirates by MUSETECH SOLUTIONS - FZCO. In this policy, “Tappit”, “we”, “us” and “our” mean MUSETECH SOLUTIONS - FZCO, licensed by Dubai Integrated Economic Zones Authority under licence number 55889, with its registered address at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. TRN: 104841336100003.
For any privacy question, email info@tappitcards.ae.
2. What this policy covers
This policy explains how we handle personal data when you visit our website, buy or enquire about a Tappit card, create or use a Tappit profile, receive a card from your organisation, view a profile, submit your details through a contact-exchange form, or contact us. It should be read with our Terms & Conditions and any agreement we have with your organisation.
3. Our role and your organisation’s role
We decide how personal data is used for our website visitors, buyers, account holders, enquiries and support.
Where an organisation uses Tappit for its people, the organisation decides how its people’s data and the contacts collected through their cards are used. We process that data on the organisation’s behalf and follow its instructions.
4. Personal data we collect
Account, order and delivery data. Your name, business name, job title, email address, phone number, billing and delivery address, delivery instructions, order details and messages. Where you buy for a business, the business legal name, VAT registration status and TRN.
Payment data. Online payments are processed by Stripe. We do not see or store your full card details. We receive confirmation of payment and limited details such as the amount and the last four digits of the card.
Profile and uploaded content. Your name, photo, role, company details, biography, contact details, links, logos, documents and any other content you choose to publish.
Profile-view data. Profile owners can see total views, views over time, visitor country, device type (mobile or desktop), how the profile was shared (NFC tap, QR scan or link) and save-to-contact clicks. We do not store information that identifies individual visitors. Visitor IP addresses are shortened so that only the country can be identified.
Contact-exchange data. If you submit your details to a card owner through a contact-exchange form, we collect what you choose to share, such as your name, organisation, email address, phone number, role and a short message. Your submission is emailed to the card owner and stored in their account.
Website and support data. Technical logs, cookie choices, form submissions, and emails or messages you send us.
5. Why we use personal data
We use personal data to provide and run Tappit, process and deliver orders, produce cards, host profiles, give support, keep the service secure and prevent misuse, and meet our accounting, tax and legal obligations.
We process personal data with your consent, or where the law allows it without consent, for example to perform a contract with you or to meet a legal obligation.
6. Public profiles
A Tappit profile is designed to be shared. Anyone you share it with by NFC tap, QR scan or link can see what you publish on it. Profiles are not indexed by search engines, so they do not appear in Google or other search results.
Only publish information you have the right to make public. When a profile is closed, its link stops working and the card no longer opens it.
7. Who we share data with
We share personal data only where needed, with:
- service providers that help us run Tappit, such as hosting, payments, card production, delivery, email, analytics, security, accounting and professional advisers;
- the organisation that issued your card, where you use Tappit through a business account;
- authorities, where the law requires it;
- a buyer or successor, if our business is sold or restructured.
We do not sell personal data. Our providers receive only the data they need and must protect it. You can ask us for a list of our current providers.
Contact-exchange submissions and profile data are available to the card owner. On business accounts, the organisation’s company and team administrators can also access them for their own organisation’s cards. Our staff do not routinely access this data. They do so only to give support you ask for, investigate a security issue or meet a legal obligation.
8. Data processed outside the UAE
Some of our providers may process personal data outside the UAE. Where they do, we take steps to make sure your data stays protected in line with applicable law.
9. Cookies
We use strictly necessary cookies to run the website, keep it secure and support checkout. We use Google Analytics only if you accept analytics cookies in the cookie banner. You can change your choice at any time in the cookie settings. We do not use advertising or marketing trackers.
10. How long we keep your data
We keep personal data only for as long as we need it, then delete it or make it anonymous.
| Data | How long we keep it |
|---|---|
| Orders, tax invoices, payments and the details on them | 7 years after the end of the relevant tax period, as UAE tax law requires |
| Design approvals | 7 years, with the order |
| Logos and design files you upload | Up to 2 years after your order |
| Account and profile data | While your account is active. When an account is closed, the profile goes offline straight away and the data is deleted within 90 days, and from our backups within a further 30 days. |
| Contact-exchange submissions | Until the card owner deletes them, or within 90 days of the account closing. For business accounts, as the organisation instructs, or within 90 days of its agreement ending. Copies already emailed to the card owner are under their control. |
| Profile-view analytics | While the profile is active. Deleted with the account. |
| Website analytics | Up to 14 months |
| Support emails and messages | Up to 2 years after our last contact |
| Damaged or faulty card claims | Up to 1 year after the claim |
| Server and security logs | Up to 90 days, or longer while we investigate a security issue |
We may keep data for longer where the law requires it, or where we need it to deal with a legal claim.
11. Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, or stop or limit how we use it. Where we rely on your consent, you can withdraw it at any time. To make a request, email info@tappitcards.ae. We may need to confirm your identity first, and we will respond within the time the law requires.
If your card was issued by your organisation, we may pass your request to them, as they decide how that data is used.
If you are not satisfied with our response, you may have the right to complain to the UAE Data Office.
12. Marketing
We do not send marketing emails or messages. We contact you only about your orders, your account or your support requests.
13. Security
We use reasonable technical and organisational measures to protect personal data. No online service can be completely secure, so please keep your login details safe and tell us straight away if you think your account has been misused.
14. Children
Tappit is not intended for anyone under 18. If we learn that we hold a child’s personal data without proper permission, we will delete it.
15. Links to other sites
Profiles and our website may link to other websites and services. Their own privacy policies apply, not this one.
16. Changes to this policy
We may update this policy when our service or the law changes. The version on this page applies from the date shown at the top. If we make important changes, we will tell account holders by email.
17. Contact
MUSETECH SOLUTIONS - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Licence 55889, Dubai Integrated Economic Zones Authority. TRN 104841336100003.
Email: info@tappitcards.ae