Privacy Policy

This Privacy Policy explains how [[COMPANY_LEGAL_NAME]] ("Makkenha", "we", "us") collects, uses, shares, and protects your personal data when you use our website, mobile application, and services (the "Platform"). We are committed to handling your data in line with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and the regulations of the Saudi Data & AI Authority (SDAIA).

1. Data We Collect

Identity & contact data: your name, mobile number, and (where provided) email address.
Delivery data: your delivery address and location details.
Vehicle data: your vehicle make, model, and year, and — where you provide it — your Vehicle Identification Number (VIN), which we use to verify part compatibility.
Order & transaction data: the parts you order, order history, and payment status. Payments are processed by our providers; we do not store your full card number.
Technical & usage data: device information, app and site interactions, and cookies or similar technologies.
Communications: messages you exchange with our support and supplier-coordination teams.

2. How We Collect It

We collect data directly from you when you register, place an order, enter a VIN or vehicle details, contact support, or use the Platform. We also collect some technical data automatically through cookies and similar technologies.

3. Purposes of Processing

To verify part compatibility with your vehicle, including via VIN checks.
To confirm supplier stock and process and fulfil your orders.
To take payment for confirmed orders and issue invoices.
To arrange delivery and keep you updated on order status.
To provide customer support and handle returns, exchanges, and warranty claims.
To improve, secure, and operate the Platform, and to meet legal and regulatory obligations.

4. Sharing Your Data

We share personal data only as needed to deliver our service:

Suppliers: the details needed to fulfil your order (such as the part, vehicle information, and delivery details).
Payment providers (Tap, Stripe): to process payment securely.
Delivery companies: your name, address, and contact number to complete delivery.
Operational systems: we use Odoo to manage inventory and order records.
Authorities: where required by law or competent authority in the Kingdom.

We do not sell your personal data.

5. Data Retention

We keep your personal data only for as long as necessary for the purposes above and to meet legal, tax, and regulatory requirements. When data is no longer needed, we securely delete or anonymise it.

6. Data Security

We apply appropriate technical and organisational measures — including access controls and encryption in transit — to protect your data against loss, misuse, or unauthorised access. No method of transmission is completely secure, but we work continuously to safeguard your information.

7. Your Rights

Under the PDPL, you have the right to be informed about how your data is used, to access your data, to request correction of inaccurate data, and to request deletion where permitted by law. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below.

8. International Transfers

Where any data is processed outside the Kingdom (for example, by a payment provider), we take steps to ensure it is protected in line with PDPL requirements.

9. Contact

For any privacy question or to exercise your rights, contact us at [[SUPPORT_EMAIL]], [[SUPPORT_PHONE]], or [[BUSINESS_ADDRESS]].