Privacy

What we collect, why, and for how long.

The short version

• We collect only what the top-up needs to work: the +973 mobile number, the BHD amount, and the card brand and last four digits.
• We never collect the full card number, full CVV, or full expiry.
• We do not run third-party advertising, tracking pixels or behaviour-profiling scripts.
• The +973 number is retained for the period required by the refund policy, then anonymised in the Order ID record.

Data we collect

• Mobile number — the +973 number you enter, used to route the top-up.
• Amount — the BHD value you choose.
• Email — optional, used only to send the receipt copy.
• Card metadata — brand and last four digits, used to identify the payment in support cases.
• Order ID — generated by us, paired with the items above.

Data we do not collect

• Full Primary Account Number, full CVV, full expiry — these are handled by the payment processor only.
• Government identification, passport numbers, residency documents.
• Behavioural-targeting profiles or persistent advertising identifiers.

Sharing

We share data only with the payment processor (to charge the card) and with the mobile-network billing endpoint (to route the BHD top-up). No data is shared with advertisers, marketers or other third parties.

Retention

The Order ID record is retained for the period that allows the refund and dispute window to operate (six calendar months from the timestamp on the confirmation page). After that period, the +973 number is anonymised and only accounting summaries remain.

Your rights

Write to support@refillphone.org to request a copy of your data, deletion, or a correction. Include the Order ID so we can find the record quickly.