Privacy Policy

Contact form: your name, email address, phone number, the reason for contacting us and your message.

Account: when you sign in or create an account, your name, email address and, if you provide it, your phone number.

Partner applications: business and contact details, verification documents, logos and photos you upload, and the car listings you create.

Pages you visit, the website that referred you, and marketing campaign tags in the link you used (such as utm_source).

A random visitor ID and details of your first visit, stored in your browser's local storage, so we can understand which campaigns bring visitors.

Actions such as tapping a seller's WhatsApp or call button, and which vehicle history reports you open while signed in.

Basic, aggregated usage and device information collected by our website analytics provider.

To reply to your messages and help you buy or sell a car; to run your account and show you vehicle history reports; to review partner applications and manage partner plans and billing; to understand and improve how the website and our marketing perform; to keep the website secure and prevent fraud; and to meet our legal obligations.

We process your data where you have given consent, where it is needed to provide a service you asked for or to perform a contract with you, where it is needed to meet a legal obligation, or where we have a legitimate interest that does not override your rights, as permitted by the PDPL.

Service providers that run the website for us, only for that purpose: sign-in and account management (Clerk), payments for partner plans (Stripe), email delivery (Resend), hosting and analytics (Vercel and Google Analytics), database hosting (MongoDB Atlas), image storage (Cloudinary) and address search (Google Maps).

The seller or partner you choose to contact, for example when you message them on WhatsApp.

Authorities, where the law requires it.

We do not sell your personal data.

We are based in Canada, and some of our service providers store or process data in other countries, such as Canada and the United States. This means your data may be stored or processed outside the Kingdom of Saudi Arabia. We transfer data only as permitted by the PDPL and its regulations, with appropriate safeguards.

We keep personal data only as long as needed for the purposes above: for example, while your account is active, for as long as needed to answer an enquiry, or for longer where the law requires records to be kept. Data we no longer need is deleted or anonymised.

Under the PDPL you may ask to: be informed about how your data is processed; access and receive a copy of your data; correct inaccurate or incomplete data; have your data deleted when it is no longer needed; and withdraw your consent at any time.

To make a request, email contact@aramayventures.com. You may also complain to the Saudi Data & AI Authority (SDAIA), the authority responsible for the PDPL, or to the Office of the Privacy Commissioner of Canada.

We use cookies that are necessary to keep you signed in, and browser storage to remember a visitor ID, the campaign that brought you to the site, and interface preferences. Google Analytics also sets cookies to count visits and see which pages lead to enquiries. You can clear these at any time in your browser settings; some features, such as staying signed in, will then stop working until you sign in again.

We use encrypted connections (HTTPS) and reputable service providers, and we limit access to personal data to people who need it. No online service is completely secure, so please use a strong, unique password.

The website is not directed at people under 18, and we do not knowingly collect their personal data.

We may update this policy. The date at the top of this page shows when it was last changed, and important changes will be highlighted on the website.

For any privacy question or request, email contact@aramayventures.com.