Privacy notice

RFM Loyalty Co. ("RFM", "we") runs this portal to sign up merchants for card payments, to support them afterwards and to recruit staff. We decide how your information is used.

• Business details: trade licence, VAT certificate, tenancy, shop photos, bank details for settlement, signed forms.
• Details of owners, partners and signatories: name, passport, Emirates ID, nationality, phone and email.
• Contact details and messages you send us, including support requests.
• For job applicants: your CV and the answers you give.
• Security records: sign-in times, device and IP address, and actions taken in the portal.

• To review and open your merchant account, as the banks and card schemes require (know-your-customer and anti-money-laundering checks).
• To run your account, settle payments, send you terminals and answer support requests.
• To meet our legal duties and to protect you and us against fraud.
• For job applicants: to assess your application.

Uploaded documents are read by an automated system (Google Gemini) to fill in details and check dates and signatures. Our staff check the results; no decision about you is made by the system alone.

• The acquiring bank and the payment processors that provide your card acceptance.
• Companies that host or run parts of this portal for us (cloud hosting, database, email, document reading), only to do that work.
• Authorities, when the law requires it.

Your information is stored on secure cloud servers, some of them outside the UAE (for example in Singapore). We use providers that protect it to the standard UAE law requires.

For as long as you are our merchant, then for as long as the law and the banks require us to keep onboarding records. Applications that do not go ahead are kept only as long as needed for those checks. Job applications are kept only as long as needed to fill the role.

You can ask to see the information we hold about you, to correct it, to delete it where the law allows, or to object to or limit its use. You can also complain to the UAE Data Office.

Access is limited to the staff who need it, every action is logged, and links we email expire. RFM never asks for card numbers, PINs or passwords.