Privacy policy

1Who we are

MileUp operates the marketplace, charging platform, station map, and booking and payment services described on this website. For the processing described here, MileUp is the controller. Where a charge point operator runs the platform under its own brand, that operator is the controller for its drivers and MileUp processes data on its behalf.

For legal reviewLegal entity name, trade licence number and registered address to be confirmed.

2What we collect

• Account details: name, mobile number, email, language and, for businesses, company name, trade licence and TRN.
• Orders and bookings: items, delivery and installation addresses, reservations and invoices.
• Charging sessions: charger, connector, start and end times, energy, price and payment status.
• Payments: a token and the last four digits of your card from our payment provider. We never see or store full card numbers.
• Vehicles: make, model and plate, if you add them.
• Device and usage data: device identifier, app version, and log and security events.
• Location: only when you allow it, to show stations near you.

3Why we use it

We process personal data to provide the services you ask for, to meet legal duties such as tax invoicing and record keeping, to keep the network safe and prevent fraud, and, where you agree, to send you marketing messages. You can withdraw consent at any time.

We rely on the lawful bases set out in Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

For legal reviewMapping of each purpose to its lawful basis to be confirmed.

4Who we share it with

• Vendors and installers, for the orders and jobs you place with them.
• Charge point operators and site owners, for sessions on their chargers.
• Payment service providers, to take and refund payments.
• Our accredited e-invoicing provider, for business invoices.
• Roaming partners, when you charge on their network.
• Authorities, where the law requires it.

We do not sell personal data.

5Where your data is stored

Our platform is hosted in the UAE. If a provider processes data outside the UAE, we transfer it only as the PDPL allows, and we list that provider in our sub-processor register.

For legal reviewSub-processor register and transfer mechanisms to be confirmed.

6How long we keep it

We keep data only as long as we need it: operational and security logs for at least 180 days, and tax and financial records for the periods UAE law requires.

For legal reviewRetention periods to be confirmed with the tax adviser.

7Your rights

You can ask to access, correct or delete your data, to restrict or object to processing, and to receive your data in a portable format. Signed-in users can make a request from their account; anyone can email privacy@mileup.ae. We reply within the time the PDPL sets.

8Security

We encrypt data in transit and at rest, require multi-factor authentication for staff, keep audit logs, and leave card data with our PCI DSS compliant payment provider.

9Cookies

We use essential cookies to keep you signed in, remember your language and theme, and keep your cart. We do not use advertising cookies.

For legal reviewIf analytics cookies are added, a consent banner is required first.

10Children

Our services are not directed at children under 18, and we do not knowingly collect their data.

11Changes to this policy

We post changes here. For significant changes, we tell you in the app or by email before they apply.

12Contact

Questions or requests about your data: privacy@mileup.ae.