Last updated: 5 October 2026
This policy explains what data we collect on the KAYANAK Cars website and app, why, who we share it with and what your rights are, under the Personal Data Protection Law of the Kingdom of Saudi Arabia.
The data we collect
- Details you give us: name, mobile number, email and your saved addresses.
- Request details: your car enquiries, financing requests (down payment and period), car wash bookings and their location, and the details and photos of a car you offer for sale.
- Marketer or partner applicants: the application details and attachments. An applicant's CV is deleted if the application is declined.
- Usage data: the pages you visit, device and browser type, IP address and where the visit came from.
- Location: only when you allow it, to set the place of a wash or your city.
Why we use it
- To answer your enquiries and carry out your requests and bookings.
- To verify you when you sign in with a code sent to your email.
- To know whether you reached us through a marketer's link, so their commission can be counted.
- To improve the service and prevent fraud and misuse.
- To comply with applicable regulations.
We send marketing messages only with your consent, and you can stop them at any time.
Cookies and local storage
We use cookies and local storage that the site needs to work: your language, your sign-in session, your favourites, and the code of the marketer whose link brought you (kept for up to 90 days). You can clear them in your browser settings; some features may be affected.
Who we share your data with
- The KAYANAK team members authorised to handle your request.
- The showroom or dealer that owns the car, where needed to complete your request. When you sell your car, your mobile number is not shown to dealers.
- A finance provider, only to review a financing request you sent, and with your consent.
- Marketers see only the status of requests that came through them. They do not see your name, number or email.
- Service providers working on our behalf: hosting, image storage, maps, and email and message delivery.
- Authorities, where the law requires us to.
We do not sell your personal data to anyone.
Keeping and protecting data
- We keep data while your account exists, or as long as it is needed for the purpose it was collected for, or for the period regulations require.
- We use encrypted connections and limited staff access. No protection is complete, so keep your email and sign-in codes private.
- Some data may be processed by service providers outside the Kingdom, in line with what the regulations require for data transfers.
Your rights
- To know what data we hold about you and receive a copy.
- To correct or update your details from your account page.
- To ask for your account and data to be deleted from the account page, unless the law requires us to keep some of it.
- To withdraw your consent to marketing messages or to sharing your location.
To use any of these rights, write to [email protected].
Children
The services are for people aged eighteen and over. We do not knowingly collect data from anyone younger.
Changes to this policy
We may update this policy. The date of the last update is shown at the top of the page.
Contact
For any question about your privacy: [email protected] or the Contact page. If the Arabic and English texts differ, the Arabic text prevails.