Handling lead data from your digital card under the UAE PDPL: a checklist

A practical checklist for handling the leads captured by your digital business card in the UAE: what to collect, where to store exports and how to follow up under the PDPL.

The moment your card collects a lead, you hold someone's personal data. That is useful and, in the UAE, it comes with responsibilities under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). This is a working checklist for the lead data your MyInfo card collects, from the first message to the exported file. It is general information, not legal advice; for your own situation, ask a qualified adviser.

1. Know what a lead contains

On a Premium card, Exchange Contact asks a visitor for a name, a phone number, an optional email and an optional message. All of that is personal data. The inbox is only visible to you when you are signed in, so treat it like a customer list. The basics of the law are explained in PDPL and your digital business card.

2. Collect only what the follow-up needs

The form is deliberately short. Do not ask people to add extra detail in the message box unless you need it, and do not ask for anything you will not use. A short note such as "I am interested in a quote" is enough to start a conversation.

3. Use the lead for the reason it was given

Someone who left their number so you could call about a service did not sign up for a mailing list. Reply to the request they made. If you want to add them to a newsletter later, ask first. See follow up within 24 hours for a respectful routine.

4. Export deliberately and store the file safely

The export produces a CSV file you can open in a spreadsheet or import into a CRM; see export your leads and import into your CRM. Once it leaves the dashboard, it is your copy to protect: keep it in a place only the right people can open, share it only with colleagues who need it and delete old exports you no longer need.

5. Act when someone asks you to stop

If a person asks you to delete their details or stop contacting them, do so in your own copies, including any CRM, spreadsheet or mailing list you put them in. Do not treat a lead as permanent.

6. Keep the public side tidy

A public card is visible to anyone with the link, so review what it shows; see what is public on a digital business card. For a restricted audience, use a private card. Read MyInfo's privacy policy for how we handle account data. Ready to start? Create your card.

Frequently asked questions

Do I need to tell visitors what I will do with their details?

It is good practice to be clear. Keep the purpose simple: you will use their details to reply to the request they made. For legal requirements that apply to your business, ask a qualified adviser.

Who can see the leads from my card?

Only you, when signed in to your dashboard. Anything you export is a separate copy that you are responsible for keeping safe.

Create your free digital business card — Start free — no app to install and no card details needed.

Ready to create your digital business card?

Start free — no app to install and no card details needed.

Create your free card