Privacy policy

1. Scope: what this policy covers, and what it does not

This policy is about visioncardservices.com — the website. It explains what personal data the site collects, why we hold it and what you can ask us to do about it.

It is not the policy that governs a card account. If you hold or apply for a card, the processing involved in that relationship — identity verification, credit assessment, transaction monitoring, regulatory reporting — is governed by the documents issued with the application and the account, which are more specific than this page and take precedence for that data.

The practical distinction: this policy covers an enquiry sent through the form or by email, and the technical data any web server processes in order to serve a page. Everything that happens after an application begins is covered elsewhere, and we will tell you so at the point it starts.

2. Who is responsible

Vision Card Services LLC decides why and how the personal data described here is processed and is therefore responsible for it. Our office is at Office M13, Acico Business Park, Port Saeed, near DCC Metro Station, Dubai, United Arab Emirates.

Questions about this policy, and any request concerning your own data, go to info@visioncardservices.com. We ask for these in writing so we can identify the correspondence they relate to and keep a record of what was asked and what was done.

3. What the website collects

The enquiry form asks for a name and an email address, both required in order to reply, and optionally a company name and the topic of the enquiry. The free-text field holds whatever you choose to write.

Please do not send card numbers, PINs, one-time codes, passwords, identity documents or account credentials through this form or by email. We do not need them at the enquiry stage, we will never ask for them, and an email inbox is the wrong place for them to exist. If you send them by mistake, tell us and we will delete the message.

Writing directly to info@visioncardservices.com collects the same categories in the same way and for the same purposes.

Separately, the infrastructure that delivers this website processes the technical data any web server needs in order to respond: the IP address of the connection, the path requested, the response status and general information about the browser. This is operational data. It is not combined with enquiry data and is not used to build a profile of you.

4. Why we hold it, and on what basis

The first purpose is to answer you. An enquiry is read, assessed, and replied to; where a conversation continues, the same data supports it.

The second is our own record. A company that will later be asked what was agreed, and that must identify a conflict of interest before taking on work, needs to be able to establish what was said and when. Keeping correspondence is part of operating responsibly rather than a marketing convenience.

The third is security and availability: detecting abuse of the site, mitigating attacks and diagnosing faults, which is what the technical data exists for.

As to basis, the position depends on the law that applies to you, so we describe it substantively. Answering an enquiry is processing necessary to respond to a request you made and, where relevant, to take steps at your request before entering into a contract. Retaining correspondence for record-keeping and conflict checking rests on our legitimate interest in running the company properly, weighed against your privacy expectations before we rely on it. Where the applicable law requires consent for something — non-essential analytics, for instance — we ask separately and do not treat silence as agreement.

We do not use website data for advertising, we do not sell it, and we do not add enquirers to a marketing list. If we ever want to send you something that is not a reply to your own message, we will ask first.

5. Who else sees it

Enquiry data is not shared with other customers, not passed to partner or introducer networks, and not sold. If another firm is genuinely better suited to a question, we tell you its name so you can approach it yourself rather than forwarding your details.

A small number of providers necessarily process data on our behalf so that the site and our email work at all. This website is published as a static site and delivered through a content delivery and hosting platform; the enquiry form is handled by a serverless function on that platform, which passes the message to an email delivery service so it reaches our inbox; and correspondence is held in our business email system.

These providers act on our instructions for the purpose of delivering the service and are not permitted to use the data for their own purposes. Because that infrastructure is distributed internationally, data may be processed outside the United Arab Emirates; where that happens we rely on the provider's contractual commitments and the safeguards it applies.

We may disclose data where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim. In either case we disclose no more than is required.

6. How long it stays

Enquiry correspondence is kept for as long as it is needed for the purposes in section 4. In practice a message that leads to a relationship is kept for as long as that relationship needs a record; a message that leads nowhere is kept for a shorter period, long enough to recognise a repeat approach and to run a conflict check.

We review what is held periodically and delete what no longer serves a purpose described here. We do not state a single fixed period, because a period that is honest for one category would be wrong for another, and a number invented for the sake of having one is worse than an explanation.

You can ask us to delete correspondence relating to you at any time. Where we can do that consistently with a legal obligation or an ongoing matter, we will, and we will tell you what was deleted and what, if anything, was kept and why.

7. Your rights, and how to use them

Subject to the law that applies to you, you may ask for a copy of the personal data we hold about you; ask us to correct it if it is wrong or incomplete; ask us to delete it; ask us to restrict how we use it; object to processing carried out on the basis of a legitimate interest; and, where applicable, receive the data you gave us in a portable form.

Write to info@visioncardservices.com describing what you want. We may ask a question to be confident we are dealing with the right person and the right correspondence, and we keep that verification proportionate — we will not demand identity documents to answer a question about an email you sent us last week.

We aim to respond substantively within thirty days. Where a request is complex we will say so, explain why and give a realistic date. If you are unhappy with how a request was handled, tell us first — most problems are a misunderstanding a direct exchange resolves — and you keep the right to complain to the supervisory authority competent for you.

8. Security, children, and changes

The site is served over an encrypted connection and enquiry submissions travel over the same. Access to correspondence is limited to the people who need it to do the work. No system is perfect, which is the reason for the request in section 3: credentials, codes and identity documents should never be sent by email, to us or to anyone else.

This website is aimed at adults considering a card or a business account. It is not directed at children and we do not knowingly collect data relating to them. If you believe a child has sent us personal data, write to us and we will delete it.

We may update this policy when our practices, our providers or the configuration of this website change. The date at the head records the current version. Where a change is significant and we hold your details in an active correspondence, we will mention it there rather than relying on you to revisit this page.