Here is a fully updated, legal-grade سياسة الخصوصية specifically tailored for تاج موتورز.

This document has been thoroughly rewritten to replace the outdated Zid rules with text that fully complies with the Saudi Arabia Personal Data Protection Law (PDPL)—issued via Royal Decree No. (M/14) and amended by Royal Decree No. (M/148)—which mandates transparent data collection disclosures, explicit user rights, and strict rules regarding legal processing.

(Note: As recommended previously, you should keep this as a standalone page on your WooCommerce site and separate it from your general Terms & Conditions or Returns text).

سياسة الخصوصية

Effective Date: May 26, 2026

Last Updated: May 26, 2026

مرحباً بكم في تاج موتورز (referred to as “we,” “us,” “our,” or “the Store”). At TAG Motors, safeguarding the security and confidentiality of your personal data is our utmost priority.

This Privacy Policy defines how we collect, process, store, and share your personal information when you visit or make a purchase from our e-commerce platform in strict accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, its Executive Regulations, and the guidelines set forth by the Saudi Data and AI Authority (SDAIA).

By registering an account, purchasing premium off-road performance parts, or interacting with our services, you acknowledge the data handling practices described herein.

1. Legal Basis for Data Processing

Under the KSA Personal Data Protection Law (PDPL), we process your data based on one or more of the following legal grounds:

  • Explicit Consent: When you voluntarily sign up, opt-in to marketing communications, or save account metrics.
  • Contractual Necessity: To perform our obligations under our contract with you (processing checkouts, securing international freight, and handling customs clearance).
  • Legal Obligation: To comply with national tax mandates (ZATCA), e-commerce rules via the Ministry of Commerce, and consumer protection structures.

2. Types of Personal Data We Collect

To serve you as a premium specialized off-road merchant, we collect the necessary technical and logistical data required to complete transactions cleanly. This includes:

  • Identity and Contact Data: First and last name, phone number, email address, physical delivery address, and national digital infrastructure coordinates (if required for custom clearances).
  • Vehicle Fitment and Build Profiles: Vehicle year, make, model (e.g., Jeep Wrangler, Gladiator, Ford Bronco), and specific mechanical specs saved to your account profile to prevent part mismatching.
  • Transaction and Logistics Data: Information about orders you fulfill, custom invoices, and interaction logs regarding our Landed Price Guarantees or backorders.
  • Technical and Usage Data: IP address, browser type, geolocation data (used strictly for layout alignment, tax assessment, and anti-fraud monitoring), and website behavior metadata pulled via security cookies.

Note: We do not directly capture or store your credit/debit card numbers. All financial clearing procedures are routed securely through fully certified PCI-DSS compliant Saudi payment processors and partners.

3. Purpose of Processing Your Personal Data

We use your data for explicit, lawful purposes directly tied to running our operations:

  • Fulfilling Orders & Express Logistics: Pulling technical stock directly from US manufacturing infrastructure, assigning air freight routing coordinates, and orchestrating door-to-door delivery inside KSA and the GCC.
  • Customs and Regulatory Compliance: Disclosing necessary shipment values to transport vendors and Saudi Customs authorities to guarantee your “Landed Price” package leaves customs with no surprise fees.
  • Account Optimization and Customer Care: Populating dynamic assistance workflows (like Intercom Fin or WhatsApp build consults) to give accurate updates on backorder waitlists or technical specifications.
  • Platform Security: Authenticating transaction checkouts, monitoring for malicious cyber activities, and securing database nodes running our WooCommerce environment.

4. Data Sharing and Third-Party Disclosures

تاج موتورز never prints, rents, or sells customer information to unverified third parties. To execute high-performance retail operations, personal data is explicitly restricted to verified entities bound by confidentiality clauses matching KSA law:

  • Logistics and Express Freight Carriers: Sharing your name, contact phone number, and physical address with regional and international express couriers to fulfill delivery signatures.
  • Regulatory Authorities: Disclosing specific cross-border data to Saudi Customs, tax bureaus (ZATCA), and the Ministry of Commerce when legally audited or required to clear international imports.
  • Integrated Infrastructure Providers: Technical entities supporting our checkout environment (such as automated customer support suites or secure payment networks licensed within Saudi Arabia).

5. International Data Transfers

Because TAG Motors is your dedicated link to top-tier US automotive manufacturers (such as TeraFlex, Steer Smarts, Falcon Shocks, and Clayton Offroad), fulfillment may require transmitting purchase item criteria internationally.

Any information transferred outside the Kingdom of Saudi Arabia complies fully with Chapter Five of the PDPL Executive Regulations regarding cross-border transfers. We ensure that international manufacturers maintain data protection standards at least equivalent to those required under Saudi law.

6. Data Security Measures

We use a variety of administrative, physical, and technical security technologies and procedures to safeguard your personal data against unauthorized entry, loss, or disclosure:

  • Data encryption across all transmission lines using industry-grade Secure Sockets Layer (SSL/TLS) handshakes.
  • Isolation of account structures into limited-access cloud infrastructure accessible only to verified employees trained in secure data handling protocols.
  • Strict internal data audits to update operational parameters in alignment with modern web security baselines.

7. Data Retention Period

We store personal data only for as long as necessary to fulfill the primary purposes outline in Section 3 of this document, or to satisfy legal, tax, corporate reporting, and audit constraints mandated by the laws of the Kingdom of Saudi Arabia. When data is no longer legally required, it is completely anonymized or permanently erased using secure technical deletion processes.

8. Your Legal Rights Under KSA PDPL

Under the Saudi Personal Data Protection Law, you hold distinct rights concerning your personal information. You can exercise these at any time by contacting our internal team:

  • Right to Know/Be Informed: The right to understand the exact purpose, data categories, and entities involved in processing your data (met through this transparent policy).
  • Right to Access: The right to request a clean copy of your personal data currently hosted within our operational databases.
  • Right to Rectification: The right to update or correct any outdated, inaccurate, or incomplete personal records (such as correcting misspelled delivery coordinates).
  • Right to Destruction/Erasure: The right to request the permanent deletion of your personal data when it is no longer contractually or legally required to clear transactions or taxes.
  • Right to Withdraw Consent: The right to revoke processing authorization at any time where explicit consent was the primary basis of collection (e.g., opting out of marketing campaigns).

9. Account Privacy and Minor Protection

Account security is a collaborative baseline. You are fully responsible for maintaining the strict confidentiality of your profile credentials, saved checkout parameters, and restricting physical access to computers or devices tied to your active session.

Protection of Minors: If you are under eighteen (18) years of age, you are prohibited from deploying transactions on this store independently. You may browse our performance parts database only under the direct supervision and explicit consent of a parent or legal guardian.

10. Amendments to This Policy

TAG Motors retains the right to modify, adjust, or alter this Privacy Policy as needed to reflect platform technical changes or newly ratified amendments issued by SDAIA or Saudi regulatory bodies. Any updates made will be published directly to this URL with a revised “Last Updated” timestamp.

11. Contact and Regulatory Grievances

To exercise any data rights, adjust saved information, or file an inquiry regarding our data privacy program, please contact our data team at:

  • TAG Motors Customer Care
  • Email: [admin@tag-motors.com]
  • Official Corporate Domain: [www.TAG-Motors.com]

If you feel your legal inquiries have not been addressed satisfactorily by our customer support desk, you maintain the legal right under national framework statutes to submit an official complaint directly to the regulatory authority: The Saudi Data and AI Authority (SDAIA).