Effective date: [06/11/2025]

1. Quick summary — what this page is about

We collect a small amount of personal data so we can book, repair, and return your car — and to keep you safe and informed. We process your data lawfully, transparently and in line with the UAE Personal Data Protection Law (PDPL). U.AE+1

2. Who we are and why we collect data

Controller: Easy Car Fix (details: company name, address, contact@easycarfix.ae).
We collect personal data to:

• confirm and manage bookings;

   

• diagnose, repair and maintain vehicles;

   

• send invoices, receipts and service reports;

   

• run basic marketing (only if you opt in); and

   

• comply with legal obligations.

   

PDPL requires transparency about purpose and controller details — we follow that. DLA Piper Data Protection

3. What we collect (short list)

• Contact details: name, phone, email, address.

   

• Vehicle details: make, model, year, plate number, VIN (optional).

   

• Payment info: last 4 digits (full card handled by our payment provider).

   

• Booking data: preferred slots, pickup address, photos you upload.

   

• Service records & warranty data.
  We do not collect sensitive personal data (e.g., race, religion, health) unless you explicitly provide it for a legitimate purpose.

   

4. Legal bases (why it’s lawful)

Under the UAE PDPL, we rely on:

• Contract performance — to deliver the service you requested (bookings, repairs).

   

• Consent — for marketing and optional communications (we will ask and record your consent).

   

• Legal compliance — to meet regulatory or tax obligations.

   

• Legitimate interest — limited operational uses (fraud prevention, service improvements) where your rights are respected. Global Practice Guides+1

   

5. How we share data (third parties)

We may share your information with:

• service partners and mechanics (to perform the job);

   

• payment processors (PCI-compliant partners for payments);

   

• dispatch & logistics partners (pickup/drop coordination); and

   

• legal or regulatory authorities if required.
  We require partners to protect data and only use it for the specific job. We won’t sell your personal data.

   

6. Cross-border transfers

If we transfer personal data outside the UAE (for example, to a cloud or payment provider), we will ensure an adequate level of protection as required by PDPL (contracts, safeguards or permitted transfers). Note: free-zones such as DIFC/ADGM have separate rules — we will flag if a transfer involves those jurisdictions. uaelegislation.gov.ae+1

7. Data retention & security

• We keep booking and service records for as long as needed for warranty, legal, and tax reasons (typically 3–7 years depending on local rules).

   

• We use industry standard technical and organizational measures (encryption in transit, access controls).

   

• We minimise data collection — only what we need to perform the service.
  PDPL requires reasonable security measures; we take that responsibility seriously. KPMG Assets

   

8. Your rights (what you can ask us to do)

Under PDPL you can:

• Request access to your data;

   

• Ask us to correct inaccurate data;

   

• Request deletion (subject to legal or contractual retention needs);

   

• Object to or restrict processing in certain cases;

   

• Request transfer of your data where technically feasible.

   

To exercise any right, email: privacy@easycarfix.ae or write to our registered address. We aim to respond within PDPL timelines. ICLG Business Reports

9. Cookies & tracking

We use essential cookies to run the booking system and optional cookies (analytics) if you consent. You can manage cookie preferences in the footer. For marketing emails we only send if you opt in — you can unsubscribe at any time.

10. Children & special cases

Our services are for adults. We do not knowingly collect personal data from children under 16. If we learn we’ve collected a child’s data we will delete it unless retention is legally required.

11. Complaints & regulator

If you have a complaint about how we handle personal data, email privacy@easycarfix.ae first. If unresolved, you may contact the UAE data protection authority or the relevant free-zone regulator (DIFC/ADGM for Dubai free-zones). The PDPL sets the regulatory framework and remedies. U.AE+1

12. Changes to this policy

We will publish any major changes here and update the “Effective date.” Material changes will be notified via email if you’re a customer.