Cookie Policy

This Cookie Policy explains how Bamboo Card uses cookies and similar technologies on www.bamboo-card.com. Where you are located in the EU, EEA, or UK, your consent for non-essential cookies is obtained in compliance with GDPR. Where you are located in the UAE, this Policy aligns with the UAE Personal Data Protection Law (PDPL), Federal Decree Law No. 45 of 2021.

Bamboo Electronic Cards Trading LLC, trading as Bamboo Card ("we", "our", "us"), uses cookies and similar tracking technologies on our website (www.bamboo-card.com), our portal, and our developer documentation. This Cookie Policy explains what these technologies are, why we use them, and your rights to control their use.

This Policy should be read alongside our Privacy Policy, which sets out the broader framework for how we process personal data, and our Terms and Conditions.

Cookies are small text files placed on your device (computer, tablet, smartphone) by websites you visit. They serve various functions, including enabling core website functionality, remembering your preferences, and helping us understand how visitors interact with our platform.

In addition to standard cookies, we may use similar technologies including:

Web Beacons (Pixel Tags): Invisible images embedded in web pages or emails that allow us to track whether a page was visited or an email was opened.

Local Storage: Browser-based storage that allows data to persist between sessions without using a traditional cookie file.

Session Storage: Similar to local storage but limited to a single browser session.

Software Development Kit (SDK) Tracking: Within our portal and Mini App integrations, SDK-level telemetry may be used for performance monitoring and error tracking.

For simplicity, all such technologies are referred to collectively as "cookies" in this Policy.

3.1 Strictly Necessary Cookies

These cookies are essential to the operation of our website and platform. Without them, core functions such as logging in, navigating between pages, and placing orders would not be possible. These cookies do not collect personally identifiable information for marketing purposes.

Legal basis: Legitimate interest (UAE PDPL); exempted from consent requirement under GDPR as technically necessary. These cookies cannot be disabled through our consent manager without affecting the functionality of the Services.

Examples include: session authentication cookies (maintaining your logged-in state), CSRF protection tokens (preventing cross-site request forgery attacks), load balancer cookies (ensuring session continuity across our infrastructure), and cookie consent preference storage.

3.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised or pseudonymised data about how visitors use our website — such as which pages are visited most frequently, how users navigate between pages, and where errors occur. This data is used to improve the performance and usability of our platform.

Legal basis: Consent (required before placement). You may withdraw consent at any time through our cookie consent manager.

Providers we may use include: Google Analytics (Google LLC), which collects anonymised visitor behaviour data and may be processed in the United States under Google’s Data Processing Terms and Standard Contractual Clauses; Hotjar (Hotjar Ltd), session recording and heatmap analytics for UX improvement, with personal data anonymised before processing; and Mixpanel, product analytics for portal and API usage patterns.

3.3 Functionality Cookies

These cookies allow the website to remember choices you make, such as your preferred language, region, or display settings, and provide enhanced, personalised features as a result. They may also remember form entries to improve usability.

Legal basis: Consent (required before placement for non-essential functionality cookies).

Examples include language and region preference cookies, UI customisation preferences (dark mode, layout), and recent search or catalogue filter history.

3.4 Marketing and Targeting Cookies

These cookies track your activity across websites and are used to deliver advertising and marketing communications that are more relevant to your interests. They may also limit the number of times you see a given advertisement and measure the effectiveness of campaigns.

Legal basis: Explicit consent (required before placement). You may withdraw consent at any time through our consent manager or by following the opt-out mechanisms described in Section 6.

Providers we may use include Google Ads / Google Tag Manager (Google LLC) for conversion tracking and remarketing, Meta Pixel (Meta Platforms Inc.) for conversion tracking and audience building for advertising on Meta platforms, and LinkedIn Insight Tag (LinkedIn Corporation) for B2B campaign tracking and LinkedIn retargeting audiences.

Where these cookies involve transfer of data to the United States or other third countries, such transfers are made subject to appropriate safeguards including Standard Contractual Clauses.

3.5 Third-Party Embedded Content

Our website may include embedded content from third parties such as YouTube videos, LinkedIn feeds, or Typeform forms. These third parties may set their own cookies when you interact with their embedded content. We do not control these cookies and encourage you to review the privacy and cookie policies of those third parties.

Session cookies: Deleted automatically when you close your browser.

Persistent cookies: Retained for between 30 days and 24 months depending on their purpose. The specific retention period for each cookie is set by the cookie provider.

Third-party cookies: Governed by the retention policies of the respective third-party provider.

A full list of the specific cookies we use, their providers, purposes, and retention periods is available in our cookie declaration, accessible through the cookie consent manager on our website.

When you first visit our website, you will be presented with a cookie consent banner through our consent management platform. You may accept all cookies (permitting strictly necessary, performance, functionality, and marketing cookies), reject non-essential cookies (permitting only strictly necessary cookies, without affecting your ability to access core functionality), or customise your preferences by selecting which categories of non-essential cookies to permit on a granular basis.

Your consent preferences are stored and applied on each subsequent visit. You may change your preferences at any time by accessing the cookie settings link in our website footer. Withdrawal of consent applies prospectively and does not affect cookies already placed.

Where required by law, we will re-request your consent periodically or upon material change to our cookie practices.

6.1 Through Our Consent Manager

The easiest way to manage your cookie preferences is through our consent management platform, accessible via the cookie settings link in the footer of our website. This allows you to grant or withdraw consent by category.

6.2 Through Your Browser Settings

Most browsers allow you to refuse or delete cookies through their settings. The process varies by browser: Google Chrome (Settings > Privacy and Security > Cookies and other site data), Mozilla Firefox (Options > Privacy & Security > Cookies and Site Data), Apple Safari (Preferences > Privacy), and Microsoft Edge (Settings > Cookies and site permissions).

Please note that disabling all cookies through your browser may impair the functionality of our website and portal.

6.3 Third-Party Opt-Out Tools

Google Analytics: Install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout

Google Ads: Manage preferences at adssettings.google.com

Meta: Manage preferences at www.facebook.com/adpreferences

Network Advertising Initiative: Opt out at optout.networkadvertising.org

Your Online Choices (EEA): Opt out at www.youronlinechoices.eu

Some browsers transmit "Do Not Track" (DNT) signals to websites. Our website currently does not alter its data collection and use practices in response to DNT signals, as there is no universally accepted standard for how DNT signals should be interpreted. We will continue to monitor developments in this area and update this Policy if our approach changes.

We may update this Cookie Policy to reflect changes in our cookie practices, applicable law, or the technologies we use. Material changes will be communicated via the cookie consent banner on our website. The date of the most recent revision is displayed at the top of this Policy.

For any questions about this Cookie Policy or to exercise rights in relation to cookie-related personal data, please contact:

Email: privacy@bamboo-card.com

Support: support@bamboo-card.com

Website: www.bamboo-card.com

Address: Bamboo Electronic Cards Trading LLC, Dubai, United Arab Emirates

For GDPR-related complaints, EEA residents may also contact their national data protection supervisory authority.

Version 3.0 — April 2026. This document supersedes all prior versions of the Bamboo Card Cookie Policy.