Legal
Privacy policy
What we collect when you verify your account, why we are allowed to collect it, who sees it, how long we keep it, and how to get it back or get it deleted.
1. Who is responsible for your data
Nufaa Technologies Limited is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17405430, at 21 New Street, Bloxwich, Walsall, WS3 2HX, United Kingdom.
For anything to do with your data, contact nufaa.now@hotmail.com or call +44 7982 144203.
2. What we collect
When you verify your account, we ask you for:
- Who you are — first, middle and last name, date of birth, gender, nationality.
- How to reach you — mobile number and email address.
- Where you live — street address, town or city, county, postcode and country.
- Your identity document — document type, document number, issuing country and expiry date.
- Images — a photograph of your identity document, its reverse where it has one, and a photograph of you holding it.
- Money-laundering checks — what you intend to use the account for, your expected monthly spend, your main source of funds, and whether you are a politically exposed person.
When you place an order we also hold the order details and the number, meter or reference the product was delivered to.
3. Why we collect it, and our lawful basis
- To open your account and supply what you order — because it is necessary to perform our contract with you.
- To verify your identity and run anti-money-laundering checks — because we have a legal obligation to do so, and because it is in our legitimate interests to prevent fraud.
- To keep records after your account closes — because we have a legal obligation to retain them.
- To answer you when you contact us — because it is in our legitimate interests to run a business that responds to its customers.
We do not sell your personal data, and we do not use it for advertising or profiling.
About the photograph of you. A reviewer compares it to your document by eye. We do not run facial recognition or any automated biometric matching on it, so we do not process it as biometric data, and no decision about you is made by a machine alone.
4. Who sees it
Your data is seen by the people at Nufaa who review applications and fulfil orders. Beyond that, we use these service providers:
- FormSubmit — delivers the verification form from this website to our mailbox.
- Microsoft — hosts the mailbox that receives and stores those submissions.
- Vercel — hosts this website and processes standard server request logs.
- Merchant partners and suppliers — receive only what is needed to deliver your order, such as the mobile number to be topped up. They do not receive your identity documents.
We will also disclose data where the law requires it — for example to a regulator, or to the police in connection with a criminal investigation.
Some of these providers process data outside the United Kingdom. Where that happens, the transfer is covered by the UK International Data Transfer Agreement or UK Addendum, or by adequacy regulations.
5. How long we keep it
- Verification records and identity documents — five years after our relationship with you ends, which is the period UK anti-money-laundering rules require. They are deleted after that.
- Order and transaction records — six years, for tax and accounting purposes.
- Applications we reject — twelve months, so we can explain the decision if you ask, then deleted.
- General correspondence — two years.
6. How we protect it
The form on this site is submitted over an encrypted HTTPS connection, and the images you upload are resized in your browser before they are sent. Access to the mailbox holding submissions is restricted to the people who review applications and is protected by a password and two-factor authentication.
No system is perfectly secure. If a breach affects your rights and freedoms we will tell you, and we will report it to the Information Commissioner’s Office within 72 hours as the law requires.
7. Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have data erased, where we are not legally required to keep it;
- restrict or object to how we use it;
- receive your data in a portable format; and
- withdraw consent, where we relied on consent.
Email nufaa.now@hotmail.com and we will respond within one month. There is no charge.
Note that the erasure right is not absolute. Where anti-money-laundering law requires us to keep a verification record, we must keep it for the full retention period even if you ask us to delete it. We will tell you if that applies to your request.
8. Cookies and this website
This website does not set advertising or analytics cookies, and it does not track you across other sites.
The site loads styling and fonts from Tailwind CDN, Fontshare and Google Fonts. Those requests reveal your IP address to those providers, as any web request does. Our host, Vercel, keeps standard server logs including IP address for security and diagnostics.
9. Children
Nufaa is for adults. You must be 18 or over to open an account. We do not knowingly collect data about children, and we will delete it if we find we have.
10. Changes to this policy
We may update this policy. The version on this page is the one that applies, and the date at the top tells you when it last changed. Where a change materially affects you, we will tell you by email.
11. Complaining
Please come to us first — nufaa.now@hotmail.com — so we can put it right. You also have the right to complain to the UK supervisory authority at any time:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk
12. Contact
Nufaa Technologies Limited
21 New Street, Bloxwich, Walsall, WS3 2HX, United Kingdom
Company number 17405430
Email: nufaa.now@hotmail.com
Telephone: +44 7982 144203