Privacy Policy

Last Updated: 24 September 2026

DaTo Tech Company (“DaTo Tech”, “DaTo”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your Personal Data.

This Privacy Policy explains how DaTo Tech Company collects, uses, processes, stores, protects, and discloses Personal Data when you visit or use our website, submit an inquiry, request a quotation, purchase products, contact us, or otherwise interact with our online services in the Kingdom of Saudi Arabia.

This Privacy Policy is prepared with reference to the Saudi Arabia Personal Data Protection Law (PDPL) and its Implementing Regulations, together with applicable Saudi laws and regulations relating to electronic commerce and digital services. The PDPL requires controllers to make a privacy policy available to individuals and explain, among other matters, the purposes of collection, categories of Personal Data, collection methods, processing, storage, destruction, and the rights of Data Subjects.

1. About DaTo Tech Company

DaTo Tech Company operates in the automotive equipment and workshop solutions sector.

Our products and services may include:

  • Automotive diagnostic scanners and vehicle diagnostic equipment
  • ADAS and calibration equipment
  • Vehicle lifts and workshop equipment
  • Tyre changers and wheel balancers
  • Wheel alignment equipment
  • Paint booths and related workshop equipment
  • EV service and maintenance equipment
  • Car-care and workshop products
  • Automotive tools and related equipment
  • Equipment installation, commissioning, calibration, maintenance and technical support
  • Other automotive workshop equipment, products and services offered by DaTo Tech

Registered Company Name: DaTo Tech Company
Kingdom of Saudi Arabia Address: [Insert registered Saudi address]
Commercial Registration No.: [Insert CR number]
Privacy Contact Email: [Insert privacy/contact email]
Telephone: [Insert Saudi telephone number]

For the purposes of applicable data protection legislation, DaTo Tech may act as the Controller of Personal Data that we determine the purposes and means of processing.

2. What is Personal Data?

“Personal Data” means information that identifies an individual directly or indirectly, or that can reasonably be used to identify an individual.

This may include information such as:

  • Name
  • Company name and job title
  • Telephone/mobile number
  • Email address
  • Business or delivery address
  • Customer account information
  • Quotation and order information
  • Purchase and transaction information
  • Communication and inquiry records
  • Information submitted through forms on our website
  • IP address and certain technical information
  • Website usage information
  • Information contained in communications with our sales or support teams

We only seek to collect Personal Data that is appropriate and reasonably necessary for the relevant purpose.

3. How We Collect Personal Data

We may collect Personal Data through:

Directly from you

For example, when you:

  • Submit a contact or inquiry form
  • Request a quotation
  • Request product information
  • Create or use an account, where available
  • Place an order
  • Contact our sales or technical support team
  • Subscribe to marketing communications
  • Communicate with us through email, telephone, WhatsApp or other available channels

Automatically

When you use our website, certain technical information may be collected automatically through cookies, analytics tools, server logs and similar technologies.

This may include:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Referring website
  • Approximate usage information
  • Date and time of website visits
  • Technical and diagnostic information

The information collected automatically will be used only for legitimate and disclosed purposes, subject to applicable Saudi laws.

4. Why We Collect and Process Personal Data

Depending on how you interact with DaTo Tech, we may process Personal Data for the following purposes:

Customer and business inquiries

To:

  • Respond to inquiries
  • Provide product information
  • Prepare quotations
  • Understand your equipment requirements
  • Arrange demonstrations or consultations
  • Communicate with you regarding requested products or services

Orders and transactions

To:

  • Process and manage orders
  • Confirm purchases
  • Arrange delivery
  • Provide invoices and transaction records
  • Process payments through applicable payment service providers
  • Provide after-sales support

Technical services

To:

  • Arrange installation and commissioning
  • Schedule calibration or maintenance
  • Provide technical support
  • Manage service requests
  • Maintain service and warranty records where applicable

Website operation

To:

  • Operate and maintain our website
  • Improve website functionality
  • Detect and prevent security incidents
  • Troubleshoot technical problems
  • Understand website usage and improve our services

Communications and marketing

Where permitted and where the required legal basis or consent applies, we may use Personal Data to:

  • Send product updates
  • Share relevant offers and promotions
  • Inform customers about new products and services
  • Conduct business communications
  • Invite customers to relevant events or activities

You may opt out of marketing communications at any time through the available unsubscribe mechanism or by contacting us.

Legal and regulatory purposes

We may process Personal Data where necessary to:

  • Comply with applicable laws and regulations
  • Respond to lawful requests from competent authorities
  • Establish, exercise or defend legal claims
  • Protect our rights, property and systems
  • Prevent fraud, misuse or unauthorized activity

5. Legal Basis for Processing

DaTo Tech will process Personal Data only where there is an applicable legal basis under the Saudi Personal Data Protection Law and its Implementing Regulations.

Depending on the circumstances, the applicable legal basis may include:

  • Your consent
  • Processing necessary to fulfill a contract or take steps at your request before entering into a contract
  • Compliance with a legal obligation
  • Legitimate interests where permitted under applicable Saudi regulations and where the relevant requirements are satisfied
  • Other legal bases permitted under applicable Saudi laws and regulations

Where consent is required, we will seek consent in an appropriate manner.

Where processing is based on consent, you may withdraw your consent, subject to applicable legal and regulatory requirements and any consequences that may arise from such withdrawal.

6. Mandatory and Optional Personal Data

Some Personal Data may be necessary for us to provide a requested product, quotation, service, transaction or support.

Where information is mandatory, we will make reasonable efforts to indicate this at the point of collection.

If you do not provide information that is necessary for a particular purpose, we may be unable to:

  • Respond to your request
  • Prepare a quotation
  • Process an order
  • Deliver a product
  • Provide a requested service
  • Provide certain technical or after-sales support

Other information may be optional and will not normally affect your ability to use the main website services.

7. Sharing and Disclosure of Personal Data

DaTo Tech does not sell your Personal Data.

We may disclose or provide access to Personal Data where necessary for legitimate business, contractual, technical or legal purposes.

Depending on the service involved, recipients may include:

  • Authorized DaTo Tech employees and departments
  • Authorized service and technical personnel
  • Delivery and logistics providers
  • Payment service providers
  • Website hosting and infrastructure providers
  • IT and cybersecurity service providers
  • Website analytics and technology service providers
  • Professional advisers, where necessary
  • Government authorities or regulators where legally required
  • Other processors acting on our behalf and subject to applicable requirements

Third parties receiving Personal Data are expected to process it only for authorized purposes and to apply appropriate safeguards in accordance with applicable requirements.

8. Processing and Transfer Outside the Kingdom

DaTo Tech may use service providers or technology platforms that process Personal Data outside the Kingdom of Saudi Arabia.

Where Personal Data is transferred or processed outside the Kingdom, DaTo Tech will comply with the applicable requirements of the Saudi Personal Data Protection Law, its Implementing Regulations and the applicable Regulation on Personal Data Transfer Outside the Kingdom. Saudi Arabia’s data protection framework expressly includes rules governing transfers of Personal Data outside the Kingdom.

Where required, appropriate safeguards and legal requirements will be applied to such transfers.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

  • Enable essential website functions
  • Remember preferences
  • Improve website performance
  • Understand website traffic and usage
  • Analyze website performance
  • Improve user experience
  • Support relevant marketing activities where applicable

Cookies may be provided by DaTo Tech or by authorized third-party service providers.

You may be able to control or disable certain cookies through your browser settings. However, disabling essential cookies may affect some website functionality.

Where applicable, additional information about cookies and consent choices may be provided through our website’s cookie settings or cookie notice.

10. Website Analytics and Advertising Technologies

DaTo Tech may use analytics, advertising and measurement technologies to understand how visitors interact with our website and to improve our marketing activities.

Depending on the services currently implemented on the website, these technologies may include services provided by third-party technology companies such as Google or Meta.

Such services may collect technical or usage information according to their own applicable policies.

Where consent is required for a particular technology or processing activity, we will obtain the required consent before using it.

11. How We Protect Personal Data

DaTo Tech takes reasonable organizational, administrative and technical measures designed to protect Personal Data against:

  • Unauthorized access
  • Unauthorized disclosure
  • Loss
  • Misuse
  • Alteration
  • Destruction
  • Other unlawful or unauthorized processing

Access to Personal Data is limited to personnel and service providers who require access for legitimate business or service purposes.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

12. Personal Data Retention

DaTo Tech will retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

The retention period may depend on:

  • The nature of the information
  • The purpose for which it was collected
  • The customer or business relationship
  • Contractual requirements
  • Warranty and service requirements
  • Accounting and financial requirements
  • Legal or regulatory obligations
  • The establishment, exercise or defense of legal claims

When Personal Data is no longer necessary and there is no legal or legitimate reason to retain it, we will take appropriate steps to delete, destroy, anonymize or otherwise dispose of it in accordance with applicable requirements.

The Saudi PDPL requires controllers to stop collecting Personal Data and destroy previously collected data without undue delay when it is no longer necessary for the purpose for which it was collected, subject to applicable exceptions.

13. Your Rights Under Saudi Data Protection Law

Subject to the applicable requirements, conditions and exceptions under Saudi law, you may have rights relating to your Personal Data, including the right to:

  • Be informed about the collection and processing of your Personal Data
  • Request access to your Personal Data
  • Request a copy of your Personal Data
  • Request correction, completion or updating of inaccurate Personal Data
  • Request destruction of Personal Data where the applicable legal requirements are satisfied
  • Withdraw consent where processing is based on consent
  • Exercise other rights provided under the Saudi Personal Data Protection Law and its Implementing Regulations

The Saudi PDPL specifically requires individuals to be informed about the legal basis, purposes, mandatory and optional data, disclosures, potential consequences, and their applicable rights when Personal Data is collected directly from them.

14. How to Exercise Your Privacy Rights

To exercise a privacy right or submit a privacy-related request, please contact us using:

Email: [Insert privacy email]
Telephone: [Insert telephone number]
Address: [Insert registered Saudi address]

Please provide sufficient information for us to verify your identity and understand your request.

We may request additional information where reasonably necessary to verify your identity and protect Personal Data from unauthorized disclosure.

We will handle requests in accordance with the applicable Saudi laws and regulations.

15. Direct Marketing

Where DaTo Tech sends direct marketing communications, we will comply with the applicable requirements governing direct marketing and Personal Data processing.

Marketing communications may include:

  • Product announcements
  • Special offers
  • New equipment
  • Workshop solutions
  • Service announcements
  • Events and promotions

You may unsubscribe from marketing communications at any time using the available unsubscribe option or by contacting us.

Withdrawal from marketing communications will not necessarily affect non-marketing communications relating to an existing order, quotation, service, warranty, payment or other business relationship.

16. Children’s Privacy

Our website and services are primarily intended for businesses, professionals, workshop owners, technicians, vehicle service providers and other adult users.

We do not knowingly seek to collect Personal Data from children for purposes that are not permitted under applicable Saudi law.

If you believe that a child has provided Personal Data to us improperly, please contact us so that we can review and take appropriate action.

17. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms or services.

Those third-party websites may have their own privacy policies and terms.

DaTo Tech is not responsible for the privacy practices, content or security of third-party websites that are not controlled by us.

We recommend reviewing the applicable privacy policy of any third-party service before providing Personal Data.

18. Data Breaches and Security Incidents

DaTo Tech maintains measures designed to detect, manage and respond to Personal Data security incidents.

If a Personal Data breach occurs that requires notification under applicable Saudi law or regulations, DaTo Tech will take the required actions and make the required notifications within the applicable regulatory framework.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services
  • Changes to our website
  • Changes in data processing practices
  • Changes in applicable laws and regulations
  • Changes in technology or security practices

When material changes are made, we will update the “Last Updated” date and, where required, provide appropriate notice.

We recommend reviewing this page periodically.

20. Contact Us

If you have questions about this Privacy Policy, our processing of Personal Data, or your privacy rights, please contact:

DaTo Tech Company
Kingdom of Saudi Arabia