Privacy Policy

1. Controller and contact details

HKL Auto provides services in Saudi Arabia in cooperation with Ahmed Mousa Al Hamza Limited Company in Dammam and, for vehicle sourcing from Japan, with HKL Inc. in Osaka.

For privacy requests or questions, contact info@hkl-auto.com or +966 59 404 9268.

2. Personal data we collect

• Account and contact data such as name, email address, phone number, preferred language, and profile image when uploaded.
• Vehicle request data such as make, model, budget, specifications, destination, address, and notes.
• Order, quotation, reservation, and payment data, including transfer references and proof of payment uploaded by the customer.
• Documents connected with purchase, export, shipping, clearance, and electronic signing when required.
• Messages, inquiries, and the order and shipment follow-up history.
• Limited technical data such as IP address, browser type, security logs, login time, and essential cookies needed to operate the account and retain language and currency preferences.

3. Sources and methods of collection

We collect data directly from customers when they register, complete forms, upload documents, or contact us, and from platform usage logs required for security and service operation. We may also receive transaction data from a supplier, shipping company, or document issuer involved in fulfilling an order.

The platform does not currently use external advertising tracking cookies. It uses essential cookies for sign-in, session security, and language and currency preferences.

4. Purposes and legal basis for processing

• Creating accounts, fulfilling customer requests, issuing quotations, and managing reservations, payments, documents, shipping, and delivery on the basis of performing the contractual relationship and taking steps requested by the customer.
• Communicating about orders, verifying identity or payment, preventing fraud, protecting accounts, and retaining necessary records on the basis of legal requirements and legitimate interests that do not conflict with customer rights.
• Sending newsletters and promotional offers only with customer consent. Consent may be withdrawn at any time through account settings or the unsubscribe link.

5. Sharing personal data

We do not sell personal data. We may share the minimum data necessary with HKL Inc. for sourcing in Japan; shipping, clearance, port, and supplier partners; hosting, email, and technical support providers; or public authorities when legally required. Sharing is limited to the relevant purpose and to what is needed to provide the service.

6. Storage and transfers outside Saudi Arabia

The platform and its operational copies are hosted by a provider in France, and some order data may be processed in Japan when required to source a vehicle. Limited data may therefore be transferred outside Saudi Arabia for hosting or order fulfillment, subject to the applicable requirements and controls for cross-border transfers of personal data.

7. Retention and deletion

We retain account data while the account is in use. Order, payment, invoice, and document records are retained as needed to fulfill the order and meet commercial, tax, and legal requirements. Newsletter data is retained until the user unsubscribes. When the purpose ends and no legal obligation remains, data is deleted, destroyed, or anonymized in a way that prevents normal recovery.

8. Data security

We use HTTPS, access controls and administrative permissions, isolation of documents and payment proofs from public access, backups, security logs, and regular updates. No technical measure guarantees absolute protection, so we review safeguards and handle incidents under the applicable procedures.

9. Data subject rights

Subject to applicable conditions and legal controls, customers may be informed of the purpose and legal basis, access their data, request a readable copy, correct, complete, or update it, request destruction when it is no longer needed, and withdraw consent where consent is the basis for processing.

Account and newsletter data can be updated from the account page, or a request can be sent to the email address above. We verify the requester identity and respond within the legally prescribed period. Exceptions may apply when a record must be retained for an active order or legal compliance.

10. Complaints and updates

A privacy complaint may be submitted to info@hkl-auto.com. If the customer is dissatisfied with the handling of the matter, the customer may use the channels published by the competent authority through the SDAIA National Data Governance Platform.

We may update this policy when the service or legal requirements change. The latest revision date appears at the top of the page.