Privacy Policy
Last updated Oct 5, 2026
This policy explains what personal data Dushi Value Card collects when you buy, receive or use a card, or when your business uses our partner app, and how we use and protect it.
1. Who we are
Dushi Value Card, Oranjestad, Aruba, is responsible for the personal data described in this policy. You can reach us at dushisetup@gmail.com.
2. What we collect
When you buy a card: your name, email address and, if you provide it, your phone number; the amount, payment method and order status.
When you send a gift: the recipient’s name and email address, your personal message and the delivery date you chose. Please only share a recipient’s details if you are entitled to do so.
When a card is used: the partner, amount and time of each redemption, and the remaining balance.
When you use our website: technical data such as your IP address and browser type, used to keep the service secure and to limit abuse. We do not use advertising or tracking cookies.
3. Payment details
You enter your card or PayPal details directly on CXPay’s or PayPal’s pages. These details never pass through our website and we do not store them. The providers tell us whether a payment succeeded, together with a payment reference.
4. How we use your data
To process your order, issue the card and email it with your receipt; to show balances and let partners redeem cards; to answer your questions; to prevent fraud and misuse; and to meet our legal and accounting obligations.
We do not sell your personal data and we do not use it for marketing without your consent.
5. Who we share it with
Service providers that run the service on our behalf: website hosting, our database provider, our email delivery provider and the payment providers CXPay and PayPal. They may only use the data to provide their service to us.
Partners see only what they need to accept a card: its masked code, status and balance at the moment of redemption. They do not see the buyer’s or recipient’s name, email address or message.
Authorities, where the law requires it.
6. How long we keep it
Order, card and redemption records are kept for as long as the card is valid and afterwards for as long as accounting and tax laws require. Technical security logs are kept for a short period and then deleted.
7. Security
Card codes are stored hashed for lookups and encrypted for email delivery, and access to personal data is limited to the people and systems that need it. Data is encrypted in transit. No system is perfectly secure, but we work to protect your data and to respond quickly to any incident.
8. Your rights
You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to dushisetup@gmail.com; we may ask you to verify your identity first.
9. Changes to this policy
We may update this policy from time to time. The version on this page applies from the date above.
10. Contact
Privacy questions: dushisetup@gmail.com or +297 000 0000. Partner enquiries: dushisetup@gmail.com.