Privacy Policy for SIRBX

Effective Date: 29/07/2025

This Privacy Policy outlines how Establishment AlSarb AlMajhool ("SIRBX", "we", "our", or "us") collects, uses, shares, and protects your personal information when you use our mobile application, website, and services (collectively, the "Services"). This policy complies with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and other applicable international data protection regulations (such as the GDPR).

Information We Collect

We may collect and process the following types of personal data:

• Identity Information: full name, national ID/residency ID, date of birth (where required for verification).
• Contact Information: phone number, email address, address, saved location names (e.g., Home, Work).
• Vehicle Information: make, model, year, engine type, VIN, mileage, and plate number.
• Location Information: saved addresses and live geolocation (when you enable location services).
• Booking & Service History: requested services, parts selected, service date/time, technician assigned, status.
• Payment Information: billing address, payment method (credit/debit card, Apple Pay, etc.) – securely processed through third-party provider.
• Technical & Device Data: IP address, browser type, device ID, mobile OS, app version, access logs.
• Cookies and Analytics: behavioral data for analytics, app usage, crash reports (through tools like Google Analytics, Firebase, etc.).

How We Use Your Information

We use your information to:

• Process and manage service bookings.
• Match you with an available technician and dispatch them to your location.
• Customize service recommendations based on mileage and OEM maintenance schedules.
• Communicate with you via SMS, email, or in-app notifications.
• Process and secure payments.
• Improve app functionality, user experience, and service quality.
• Enforce our Terms and Conditions and prevent fraud.
• Send promotions or reminders (only with your consent).

Legal Basis for Processing

We process your data based on:

• Your explicit consent (for marketing communications, location sharing).
• Contractual necessity (to fulfill service bookings).
• Legal obligations (in accordance with Saudi PDPL and international law).
• Legitimate interest (to improve service, prevent fraud, handle customer support).

Sharing Your Information

We may share your data with:

• Technicians assigned to your service request.
• Payment gateway providers (e.g., Stripe) to process transactions securely.
• Cloud hosting and IT service providers (e.g., Firebase, Google Cloud).
• Government authorities if legally required (court orders, regulatory investigations).
• A third party in the event of merger, acquisition, restructuring, or asset transfer (with data safeguards).

Location Services

You may enable GPS access to allow live location tracking during a service request. You can disable location access in your device settings at any time. We may also collect and store saved addresses (Home, Work, etc.) for future bookings.

Data Retention

We retain your personal information only as long as necessary for the purposes described in this Policy, including for legal, regulatory, tax, accounting, or reporting purposes.

Your Rights

Under Saudi law (and GDPR, if applicable), you have the right to:

• Access, correct, or update your personal data.
• Withdraw consent at any time (e.g., for marketing).
• Request deletion of your personal data (unless legally required to retain it).
• Object to or restrict certain types of data processing.
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA) or other data protection regulators.

Cookies & Tracking Technologies

We use cookies and similar technologies in the app and website to:

• Save your login preferences.
• Collect usage statistics.
• Analyze performance and crash logs.
• Personalize your experience. You can manage cookies through your browser settings.

Data Security

We apply administrative, technical, and physical security measures to protect your personal information. These include data encryption, secure payment channels, access control, and system monitoring. However, no system is 100% secure, and users should also take precautions to protect their account (e.g., strong passwords).

Children’s Privacy

Our services are not directed to children under 18. We do not knowingly collect data from minors. If we learn that a minor has submitted personal information, we will delete it.

International Data Transfers

Where required, personal data may be transferred and stored on servers located outside of the Kingdom of Saudi Arabia. We ensure such transfers comply with PDPL and international data protection requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will be posted in the app and on our website. If significant changes are made, we will notify you by email or app notification.

Contact Us

If you have questions or concerns regarding this Privacy Policy, contact us at: Establishment AlSarb AlMajhool
Email: sirbxcare@gmail.com

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.