enterprise logo

Data Privacy Policy


Introduction


This Data Privacy Notice belongs to Aljomaih Car Rental Company, known locally as Ajar, a subsidiary of Aljomaih Holding Group. Established in 2015, the Company provides modern and integrated mobility solutions that meet the needs of individuals and businesses throughout the Kingdom of Saudi Arabia, while adhering to the highest international standards and leveraging local expertise. 

This Notice reflects the Company’s commitment to protecting personal data in accordance with the Saudi Personal Data Protection Law (PDPL) issued under Royal Decree No. (M/19) dated 09/02/1443H, its Implementing Regulations, and related applicable laws. It aims to explain how personal data is collected, used, shared, and protected. 

 

For more information, please see https://www.enterprise.com.sa/en/data_privacy_policy 

Shape 

Purpose of Data Collection and Processing 

The Company is committed to transparency in the collection and processing of personal data. No personal data is collected unless it is necessary to achieve specific and legitimate purposes or as stipulated under Article (10) of the Personal Data Protection Law. 

Personal data may be stored in local or external databases and may be processed or shared with Company employees or service providers inside or outside the Kingdom of Saudi Arabia for the following purposes: 

    • Developing and improving products and services and enhancing customer experience and service quality. 
    • Communicating with customers regarding rental contracts, inquiries, or complaints. 
    • Fulfilling contractual obligations and complying with legal, judicial, or regulatory requirements. 
    • Marketing and advertising purposes, including personalized offers, with the option to opt out at any time. 
    • Protecting the Company’s legal rights and managing network and property security, including the use of CCTV systems. 
    • Registering customers in loyalty programs and managing memberships and related updates. 
    • Using vehicle tracking data (such as mileage, geolocation, technical diagnostics, and security alerts) to support rental operations and protect vehicles in cases of theft or tampering. 


    Personal data is processed based on a clear legal basis, including the data subject’s consent where required, performance of a contract, or compliance with a legal obligation. Where sensitive data is involved, explicit consent is obtained in accordance with applicable laws. 

    Shape 

    Types of Data Collected 

    Depending on the nature of the service, the Company collects and processes the following categories of personal data: 

      • Reservation and vehicle rental data, including authorized additional drivers (such as name, date of birth, ID, driver’s license, passport, residency status, nationality, gender, and marital status). 
      • Communication and customer support data, including emergency contact details. 
      • Corporate membership data and related identification numbers. 
      • Payment and credit card information for payment processing purposes. 
      • Operational and analytical data to improve services and handle complaints (such as geolocation data, app usage data, notes, and survey responses). 
      • Rental details (location, date, vehicle type, and preferences). 
      • Online account data, loyalty numbers, and travel-related information where applicable. 

    Shape 

    Data Sharing and Disclosure 

    The Company places the highest importance on the protection of personal data and applies appropriate organizational and technical measures to safeguard it. Personal data is kept confidential and is not disclosed except in accordance with applicable laws or for legitimate and specified purposes. 

    Personal data is not used for commercial purposes or shared with third parties without the data subject’s consent, except in the following cases: 

      • Aljomaih Car Rental Company and its licensed partners under legally binding agreements. 
      • Service providers acting on behalf of the Company, without having independent rights to use the data. 
      • Governmental or regulatory authorities upon lawful request or for security or judicial purposes. 
      • Third parties for research and development or safety improvement purposes, with appropriate anonymization measures where feasible. 
      • Enterprise Holdings, Inc. (the franchisor) or its affiliated companies, within the scope of the franchise relationship and only to the extent necessary to achieve the purposes outlined in this Policy, in accordance with the Saudi Personal Data Protection Law and its Implementing Regulations, and subject to appropriate legal, contractual, and technical safeguards to protect personal data. 


      For more information, please see https://www.enterprise.com.sa/en/data_privacy_policy 

      The Company does not sell, lease, or otherwise commercially exploit personal data, nor does it transfer such data to unrelated parties. 

      Shape 

      Cross-Border Data Transfers 

      Where the provision of services requires the transfer of personal data outside the Kingdom of Saudi Arabia, the Company complies with the requirements of the Personal Data Protection Law and its Implementing Regulations, including ensuring that the receiving party provides an adequate level of data protection or obtaining the necessary regulatory approvals, and implementing appropriate contractual and technical safeguards. 

      Shape 

      Consent and Consequences of Not Providing Data 

      Where certain data is required by law or contract and the customer chooses not to provide it, the Company may be unable to deliver certain services. Customers have the right to refuse or withdraw consent where processing is based on consent; however, this may affect the level or availability of services provided. 

      Shape 

      Data Subject Rights 

      In accordance with the Personal Data Protection Law, data subjects have the right to: 

        • Be informed of how their personal data is collected, the legal basis for processing, and the purposes thereof. 
        • Access their personal data and request a copy of it. 
        • Request correction of inaccurate or incomplete personal data. 
        • Request deletion of personal data or restriction of its processing in legally permissible cases. 
        • Withdraw consent at any time where processing is based on consent. 
        • File a complaint with the competent authority in the event of non-compliance with applicable laws. 


        Consent preferences may be managed through the application: 

        https://onelink.to/7vvmea 

        Shape 

        Linked Websites and Other Platforms 

        The Company’s platforms may contain links to third-party websites or social media platforms. The Company is not responsible for the privacy practices, content, or policies of such third parties, and users are advised to review their privacy policies. 

        Shape 

        Scope of Data Collection and Use of Platforms 

        Personal data may be collected through reservations or rentals made via branches, the application, or the website, through communications with customer service, or via authorized business partners. Users are responsible for the accuracy of the information provided and for maintaining the confidentiality of their account credentials. Any unlawful use of the platforms is strictly prohibited. 

        Subject to user consent, the Company may access geolocation data solely to provide relevant local services or offers. 

        Shape 

        Data Retention Period 

        The Company retains personal data for as long as necessary to fulfill legal, contractual, and operational purposes, including regulatory compliance and dispute resolution. Requests for data deletion may be made unless retention is required by law. 

        Shape 

        Policy Updates 

        This Policy may be updated from time to time to reflect legal or operational changes. Any updates will be announced through the Company’s official communication channels. Users are encouraged to review this Policy periodically. 

        Shape 

        Data Controller and Contact Information 

        Aljomaih Car Rental Company (Ajar) is the data controller of personal data. 

        For inquiries, exercising data subject rights, or submitting complaints, please contact: 

        📧 [email protected] 
        📞 920000028 

        loader