Abdullah Hashim Company Privacy Notice

1. Who We Are

Abdullah Hashim Company (hereinafter referred to as “the Company”, “we”, “us”, or “our”) is one of the leading automotive agencies in the Kingdom of Saudi Arabia, specializing in vehicle sales, leasing, maintenance, and related services.
We represent global automotive brands and provide a wide range of mobility solutions, including car sales (new and used), spare parts, after-sales services, extended warranty programs, insurance facilitation, and financing support through authorized partners.

Protecting your personal data and respecting your privacy are central to our business values and in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2. Purpose

This Privacy Notice explains how Abdullah Hashim Company collects, uses, stores, and shares your personal data in connection with our products and services.
It also outlines your rights and how you can exercise them. We ensure that all personal data is processed lawfully, fairly, and transparently, in accordance with PDPL and other applicable Saudi regulatory requirements.

3. What Personal Data We Collect and How We Collect It

We collect personal data directly from you when you interact with us, such as when you:

Purchase or lease a vehicle.
Book a test drive or schedule vehicle service.
Visit our showrooms, service centers, or website.
Contact our sales or customer service teams.
Participate in marketing or satisfaction surveys.
Communicate through email, phone, WhatsApp, or social media.
Engage with our digital platforms, online booking forms, or mobile applications.

We may also receive information indirectly from third parties such as authorized dealers, financing partners, insurance providers, and publicly available sources.

Categories of Personal Data

Category	Details
Identification Data	Full name, gender, nationality, date and place of birth, National ID/IQAMA, passport number, driving license number, signature, and photo identification.
Contact Information	Home or business address, email address, phone number, and national address.
Financial Information	Vehicle purchase details, payment information, financing data, insurance coverage, and related financial transactions.
Transaction Data	Vehicle purchase agreements, maintenance contracts, warranty records, parts orders, and service invoices.
Sensitive Data	Biometric or health data where legally required (e.g., driver fitness certificates or accident claims).
Employment & Education Data	Occupation, employer, and employment details (only when required for credit or lease applications).
Family & Relationship Data	Emergency contacts, authorized drivers, or vehicle co-owners.
Interaction Data	Call recordings, chat transcripts, customer feedback, and social media interactions.
Video Surveillance Data	CCTV recordings from showrooms, service centers, and parking areas.
Device & Geolocation Data	IP address, GPS location (for connected vehicles or mobile apps), and technical identifiers.
Cookies & Online Activity Data	Login details, browsing preferences, pages visited, time spent, and clicks on our website.
Marketing Preferences	Subscription status and communication preferences.
Other Information	Any data you provide via forms, applications, or direct communications.

Providing your personal data is essential to deliver our services. Failure to provide required data may prevent us from processing your requests or completing transactions.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

Legal Obligation: To comply with Saudi laws, including PDPL and other regulatory bodies.
Contractual Necessity: To fulfill our contractual obligations, such as processing vehicle purchases, leases, or maintenance services.
Legitimate Interests: To improve our operations, ensure safety, and provide efficient customer service.
Consent: For specific purposes such as marketing communications or sharing information with third parties (where required).
Vital or Public Interests: To protect safety or comply with public authority requests.

5. How We Use Your Personal Data

We use your personal data for purposes such as:

Processing vehicle purchases, leasing, maintenance, and warranty claims.
Facilitating vehicle registration and insurance issuance.
Managing customer accounts and service history.
Scheduling test drives, maintenance appointments, and service reminders.
Handling customer inquiries, complaints, and feedback.
Providing after-sales support and recall notifications.
Managing payment transactions and financing requests through authorized partners.
Conducting customer satisfaction and quality assurance surveys.
Complying with legal, tax, and regulatory obligations.
Protecting against fraud, theft, and misuse of vehicles or data.
Sending promotional offers and product updates (with your consent).
Improving customer experience through data analytics and website enhancements.

6. With whom do we share your personal data

Your personal data may be shared with:

Authorized Dealers and Branches: For vehicle sales, maintenance, and warranty support.
Financial Institutions: For lease, installment, or financing arrangements.
Insurance Companies: For vehicle coverage and claims management.
Service Providers: IT hosting, CRM, logistics, and marketing partners who support our operations under strict confidentiality agreements.
Regulatory or Government Authorities: Upon lawful request or when required for licensing, taxation, or compliance.
Legal and Professional Advisors: For compliance, audit, or dispute resolution.
Vehicle Manufacturers: For warranty, recall, and product quality assurance.
Law Enforcement: When required for accident investigation or fraud prevention.
With Your Consent: For any additional sharing beyond the above cases.

All third parties are required to handle your data in compliance with applicable privacy and security standards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected and as required by law.
Retention periods vary depending on the service type, contractual obligations, or regulatory requirements (e.g., warranty, taxation, or safety recalls).
When the retention period expires, we will securely delete or anonymize your data to prevent re-identification.

8. Marketing and Communication

We may contact you about new vehicles, promotions, maintenance offers, or customer events that may interest you.
You may withdraw your consent at any time by contacting us or using the unsubscribe link in our communications.
We will retain your preference record to ensure we respect your choice in the future.

9. How We Keep Your Data Secure

Abdullah Hashim Company implements advanced administrative, technical, and physical safeguards to ensure your data remains confidential and secure. These include:

Data encryption and access controls.
Regular vulnerability assessments and monitoring.
Secure storage within Saudi Arabia (or approved regions with equivalent protection).
Employee training on data protection and privacy.
Strict confidentiality obligations for all service providers.

10. International Data Transfers

If your personal data needs to be shared outside the Kingdom, it will only be done in accordance with PDPL requirements.
We ensure that any such transfer is made to countries with adequate data protection laws or through approved contractual safeguards ensuring equivalent privacy protection.

11. Your Rights

Under PDPL, you have the following rights:

Right to Be Informed about how your data is collected and used.
Right to Access your personal data.
Right to Request a Copy of your personal data.
Right to Correct inaccurate or incomplete data.
Right to Delete your personal data when no longer required or unlawfully processed.
Right to Withdraw Consent at any time.
Right to File a Complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) if you believe your rights have been violated.
We will process all valid requests within 30 days, extendable once with notification if additional time is required.

12. Protection of Minors and Legally Incompetent Persons

Our services are intended for adults and legally competent individuals.
If we process data of minors (e.g., as beneficiaries of vehicle insurance), it must be provided or approved by a parent or legal guardian.

13. Your Responsibilities

You are responsible for ensuring the accuracy of the information you provide and for informing us promptly of any changes.
If you share personal data of other individuals (such as a co-driver or guarantor), you must ensure that they are aware of this Privacy Notice.

14. Social Media and Public Platforms

We advise you not to share sensitive or personal information on our social media pages (Instagram, X, YouTube, etc.), as these platforms are publicly accessible.

15. Updates to This Privacy Notice