GetOn — Privacy Policy
Last updated: 16 September 2026
1. Who we are
This Privacy Policy is issued by BloomFi Labs ("BloomFi," "we," "us," "our"), operator of the GetOn website and mobile application (together, the "Services").
- Registered address: IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates
- Contact for privacy matters: subscriptions@geton.xyz
This Policy explains how we collect, use, disclose, and protect personal data in accordance with the PDPL and any implementing regulations issued by the UAE Data Office.
2. Scope
This Policy applies to personal data we process about:
- Visitors to the GetOn website
- Prospective and actual GetOn customers
- Individuals who complete identity verification (KYC) as part of onboarding
It does not apply to data processed by independent third parties (e.g., banking, custody, or verification partners) under their own privacy policies, which we encourage you to review separately.
3. Personal data we collect
| Category | Examples |
|---|---|
| Identity data | Full name, date of birth, nationality, government ID details, photograph/selfie for verification |
| Contact data | Email address, phone number, residential address |
| Financial data | Account balances, transaction history, source-of-funds information, tax residency status |
| Verification data | Documents and data submitted to our identity-verification provider(s) |
| Crypto-related data | Wallet addresses and transaction data associated with crypto balances held through the Services |
| Card data | Card issuance and transaction data related to the GetOn card |
| Technical data | IP address, device identifiers, browser type, app usage data |
| Communications data | Correspondence with our support team |
We collect this data directly from you (e.g., during onboarding), automatically (e.g., via cookies and app analytics), and from identity-verification and financial-partner service providers acting on our instructions.
4. Purposes of processing
We process personal data to:
- Create and administer your GetOn account
- Perform identity verification and meet our KYC/AML obligations
- Provide, operate, and improve the Services, including named fiat accounts, crypto balances, and card issuance
- Process transactions and maintain accurate financial records
- Detect and prevent fraud, money laundering, and other financial crime
- Comply with applicable legal and regulatory obligations
- Communicate with you about your account, transactions, and (where you've opted in) product updates
- Analyse usage to improve the Services
5. Legal basis for processing
Under the PDPL, we rely on one or more of the following bases:
- Consent — where you have given clear consent (e.g., marketing communications)
- Contractual necessity — processing needed to provide the Services you've requested
- Legal obligation — where processing is required to comply with UAE law (e.g., AML/KYC requirements)
- Legitimate interest — for fraud prevention, security, and service improvement, balanced against your rights
6. How we share personal data
We share personal data with:
- Identity verification providers, to confirm your identity as part of onboarding
- Banking and payment partners, to hold and move fiat balances tied to your named accounts
- Crypto custody providers, to hold and secure crypto balances
- Card issuing partners, to issue and process transactions on your GetOn card
- Regulators and law enforcement, where legally required
- Professional advisers (legal, audit, compliance), under confidentiality obligations
- Service providers supporting our technology infrastructure (e.g., cloud hosting, analytics)
We do not sell personal data.
7. Cross-border data transfers
Some of our service providers may be located outside the UAE. Where personal data is transferred internationally, we take steps required under the PDPL to ensure an adequate level of protection, including contractual safeguards.
8. Data retention
We retain personal data for as long as necessary to:
- Provide the Services to you
- Meet AML/KYC record-keeping obligations under applicable law
- Resolve disputes and enforce agreements
9. Your rights under the PDPL
Subject to applicable exceptions, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to certain processing
- Request data portability
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with the UAE Data Office
To exercise these rights, contact us at subscriptions@geton.xyz.
10. Security
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse, consistent with the sensitivity of financial, identity, and crypto-related data we hold.
11. Children
GetOn is not directed at individuals under 18. We do not knowingly collect personal data from minors.
12. Cookies
The GetOn website and app use cookies and similar technologies for functionality, analytics, and (where consented) marketing purposes.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified via the website or app before they take effect.
14. Contact us
For questions about this Policy or our data practices: subscriptions@geton.xyz