Privacy Policy

01Who is responsible for your data

Exotic Auto Services LLC is the controller of the personal data described in this policy. That means we decide how and why it is used, and we are responsible for protecting it under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL).

If you have a question about this policy or want to exercise any of your rights, please reach us through the contact page.

02What we collect

Information you give us: your name, mobile number, email address and, for collections, the address where the vehicle is parked. We also record what you tell us about the vehicle, including symptoms, photos and videos you send.

Vehicle information: the make, model, year, chassis number (VIN), registration plate, mileage and service history.

Information created in the workshop: diagnostic data read from the vehicle's control units, inspection notes, quotations, job cards and invoices.

Information from others: for an insurance repair, your insurer may share the claim reference, policy details and accident report with us.

Payment information: card payments are processed by the card terminal provider. We do not keep your full card number.

03Why we use it

• to answer your enquiry and give you a quotation;
• to diagnose, service and repair your vehicle, and to collect and return it if you have a service contract;
• to contact you about your vehicle, for example to ask for approval of additional work or to tell you it is ready;
• to keep a service record that supports your workshop and manufacturer warranties and the vehicle's resale value;
• to handle insurance claims you ask us to manage;
• to meet our legal obligations, including tax and accounting records.

We do not use your data for automated decisions that affect you, and we do not build marketing profiles.

04Our legal basis

Under the PDPL we process your data because it is necessary to carry out the work you ask us to do (performing our agreement with you), because the law requires it (for example, keeping tax records), or because you have given your consent, such as when you send us photos of your vehicle. Where we rely on consent, you can withdraw it at any time.

05This website, cookies and the contact form

This website uses Google Analytics 4 to understand how many people visit and which pages they use. Google Analytics sets cookies and receives your IP address, browser and device details and the pages you view; we see this only as aggregated reports, not as information that identifies you. We do not use advertising cookies, and you do not need an account to use the site. You can block analytics cookies in your browser settings or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout) without affecting how the site works.

Our contact form does not send or store anything on our website. When you press send, it opens WhatsApp or your own email app with your message filled in. Nothing reaches us until you send it from there, and that message is then handled by WhatsApp (operated by Meta) or your email provider under their own privacy policies.

Some pages show an embedded Google Map. Google may set cookies and collect data when the map loads, under Google's privacy policy. Links to our social media profiles take you to services that have their own policies.

06Who we share it with

We share personal data only where it is needed for your job or required by law:

• your insurer, for claims you ask us to handle;
• parts suppliers, who receive vehicle details such as the chassis number so the correct part can be ordered, but not your personal contact details;
• payment and card processing providers, to take payment;
• Google, which provides Google Analytics for this website, as described above;
• government authorities, courts or regulators, when the law requires it.

We do not sell, rent or trade your personal data, and we do not share it with anyone for their own marketing.

07Data held outside the UAE

Some of the services we use to communicate, such as WhatsApp and email, may store data on servers outside the UAE. Where this happens, we rely on the safeguards those providers put in place and on the conditions for cross-border transfers set out in the PDPL.

08How long we keep it

We keep vehicle service records, quotations and invoices for as long as they are useful for your warranty and service history, and for at least the period that UAE tax and commercial law requires us to keep accounting records. Enquiries that did not lead to a job are deleted when they are no longer needed. After that, data is deleted or anonymised.

09How we protect it

Access to customer records is limited to staff who need it for their work. We use password-protected systems, and vehicle documents are kept securely at the workshop. No system is completely secure, but if a breach ever puts your data at risk, we will inform you and the authorities as the law requires.

10Your rights

Under the PDPL you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted where we no longer need it or where you withdraw consent, unless the law requires us to keep it;
• ask us to restrict or stop processing in certain circumstances;
• receive your data in a structured, commonly used format;
• withdraw any consent you have given.

To use any of these rights, contact us through the contact page. We may need to confirm your identity before acting on the request. If you are not satisfied with our response, you can raise a complaint with the UAE Data Office.

11Children

Our services are intended for vehicle owners and drivers. We do not knowingly collect personal data from children.

12Changes to this policy

We will update this policy when our practices or the law change. The date at the top of this page shows when it was last updated. Significant changes will be highlighted on this page.