Privacy Policy

1. Introduction

[Company Legal Name] ("MotoLink", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect when you use our website and training services, how we use and protect it, and the rights you have. We process personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2. Data We Collect

• Identity data: first name, last name, gender, and profile photo if you upload one.
• Contact data: mobile number, email address, city, and address.
• Account and security data: verification codes (one-time passwords), login activity, and session information.
• Documents: files you upload for your Lessons, such as identification or licence documents.
• Training data: your Courses, Lessons, Session registrations, attendance, driving session records, progress, and instructor notes.
• Order and payment data: orders, payment references, amounts, dates, coupons, points, and wallet activity. Card details are entered on our payment provider's secure page and are not stored by us.
• Communications: messages you send us through forms, email, or WhatsApp.
• Technical data: IP address, browser type, device information, language, and pages visited, collected through cookies and similar technologies.

3. How We Use Your Data

• To create and secure your account and verify your identity.
• To provide the Courses and Sessions you purchased, manage your registrations, and track your progress.
• To process orders, payments, refunds, and issue invoices.
• To review the documents you upload.
• To send service messages, such as verification codes, booking confirmations, reminders, and notifications.
• To respond to your enquiries and support requests.
• To improve the Website, our services, and training quality, and to keep the Website safe.
• To send news and offers, only where you have agreed and with the option to opt out at any time.
• To comply with legal obligations.

4. Legal Basis

We process your data based on your consent, the need to perform our contract with you, our legitimate interests in running and improving our services where permitted by law, and our legal obligations. Where we rely on consent, you may withdraw it at any time.

5. Who We Share Data With

We do not sell your personal data. We share it only as needed with:

• Payment service providers that process your payments.
• SMS, email, and WhatsApp service providers that deliver messages and verification codes.
• Video meeting providers used for online Sessions.
• Hosting, storage, and technical service providers.
• Our instructors and staff, limited to the data they need to deliver your training.
• Government and regulatory authorities where required by law.

These providers may only use your data to provide services to us and must protect it.

6. Transfers Outside Saudi Arabia

Some of our service providers may be located or store data outside Saudi Arabia. Where this happens, we take steps to ensure your data remains protected and the transfer complies with the PDPL.

7. How Long We Keep Your Data

We keep your data only as long as needed for the purposes described in this Policy, to provide our services, and to meet legal, accounting, and regulatory requirements. When data is no longer needed, we delete or anonymise it.

8. Data Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access, including access controls and encrypted connections. No system is completely secure, so please protect your account and never share your verification codes.

9. Your Rights

Under the PDPL you have the right to:

1. Be informed about how your data is collected and used.
2. Access your data and obtain a copy of it.
3. Request correction of inaccurate or incomplete data.
4. Request deletion of your data, subject to legal retention requirements.
5. Withdraw your consent at any time.
6. Opt out of marketing messages.

To exercise these rights, contact us using the details below. We will respond within the period required by law. Some profile details can be updated directly from your account.

10. Children

Our services are intended for persons of legal age to contract. Where a minor is permitted to take part with a guardian's consent, the guardian is responsible for providing that consent and for the data supplied. If you believe we hold data about a child without proper consent, please contact us.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

12. Changes to This Policy

We may update this Policy from time to time. The latest version will always be available on the Website with its "Last updated" date. For material changes we will notify you through the Website or by message.

13. Contact Us

For any privacy question or request, or to complain about how we handle your data, contact us:

• Email: [Privacy Email]
• Phone / WhatsApp: [Phone]
• Address: [Address]

You may also contact the Saudi Data and Artificial Intelligence Authority (SDAIA) if you believe your rights have been violated.