Privacy Policy | Petromin

1. Introduction

Petromin AutoCare Company ("PACC", "we", "our", or "us") values your privacy and is committed to protecting your personal information in accordance with the Personal Data Protection Law ("PDPL") and the implementing regulations issued by the Saudi Data and Artificial Intelligence Authority ("SDAIA").

This Privacy Policy explains how we collect, use, store, and protect your information when you use the Petromin Express Platform.

This platform is designed to assist customers in vehicle inspection, maintenance tracking, and service facilitation offered by Petromin Corporation and its group companies within the Kingdom of Saudi Arabia ("KSA").

2. Information We Collect

When using the platform, we may collect and process the following types of information to deliver our services effectively and in compliance with applicable Saudi data protection regulations:

A. Customer Information

First Name and Last Name
Mobile Number
National ID / Iqama Number
Email Address
Gender
Date of birth
Short Address
City
Country
Profile Picture
Contact Preferences

B. Vehicle Information

Vehicle Make, Model, Year, and Trim
Vehicle Identification Number (VIN)
Vehicle Registration Card Details
Plate Number

C. Usage and Technical Information

App usage statistics (for performance improvement)
Device information (model, operating system version, etc.)
Location data (only collected with your explicit consent and when required for service availability or nearest branch identification)

We collect this data directly from you when you provide your details to use the platform or when our service staff inputs your details during inspection or maintenance booking. We do not collect sensitive personal data (such as biometric or financial data) unless explicitly required and permitted under Saudi law.

3. Purpose of Data Collection

Your personal and vehicle information is collected for the following purposes:

To create and manage your customer profile in PACC systems.
To process and record vehicle inspection and maintenance activities.
To contact you regarding service updates, offers, or vehicle care reminders.
To ensure proper documentation and traceability of vehicle health reports.
To improve our services and customer experience through analytics.
To comply with applicable legal, regulatory, and contractual obligations under Saudi law.

We may also use the collected data to render value-added services provided by businesses operated by National Car Maintenance Company (PACC), or other group entities or affiliates under Petromin Corporation.

Your personal data will not be processed for any purpose incompatible with the purposes described above without obtaining your prior written consent as required under PDPL.

4. Data Sharing and Disclosure

We may share your data only in the following circumstances:

With Petromin Corporation and its affiliated companies for service coordination.
With authorized service partners who assist in inspection, maintenance, or communication.
When required by law, regulation, or government authority in the Kingdom of Saudi Arabia.
With competent authorities such as SDAIA or the National Cybersecurity Authority ("NCA") when legally required.

We do not sell, rent, or trade your personal information to any third parties for marketing or commercial gain.

Any data transfer outside the Kingdom shall be subject to prior approval from SDAIA and will be conducted in accordance with Article 29 of the PDPL and related implementation regulations.

5. Data Storage and Security

All personal and vehicle information is securely stored in PACC's protected databases hosted on servers located within the Kingdom of Saudi Arabia, unless otherwise permitted under PDPL and applicable regulations.

We use appropriate technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or alteration of your information.

Access to personal data is restricted only to authorized personnel who require it to perform their duties.

PACC follows cybersecurity controls and data protection requirements issued by the National Cybersecurity Authority ("NCA") and SDAIA to ensure data integrity and confidentiality.

6. Data Retention

We retain your personal and vehicle data for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Once no longer required, your data will be securely deleted or anonymized.

Where deletion is not technically feasible, data will be logically segregated and access-limited in accordance with PDPL requirements.

7. Your Rights

As a customer, you have the right to:

Access and review your personal data stored by PACC.
Request correction of any inaccurate or outdated information.
Request deletion of your data (subject to legal or operational retention requirements).
Withdraw consent for marketing communications.
Request restriction of processing or object to processing in cases permitted under PDPL.

Requests can be made by contacting us at [email protected] or through our official customer service channels.

We will respond to all verified requests within the period prescribed by PDPL and implementing regulations.

8. Children's Privacy

The platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

If we become aware that personal data has been collected from a minor without proper guardian consent, we will promptly delete such data.

9. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. All updates will be communicated within the Platform or through official company communication channels.

Material changes will be notified in advance, and where legally required, we will obtain renewed consent from users.

10. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Petromin AutoCare Company (PACC)

Petromin Corporation Headquarters

Jeddah, Kingdom of Saudi Arabia

[email protected]