Privacy policy

1. Who we are

EVS — Electric Vehicle Services ("EVS", "we", "us") is a brand operated by Alhulul Alkamilah For Cars Maintenance Company (شركة الحلول الكاملة لصيانة السيارات), a limited liability company, Commercial Registration Unified National Number 7030650217. EVS is an electric and hybrid vehicle service and repair workshop in Riyadh, Saudi Arabia, and the controller of the personal data described here. This policy covers evsksa.com, our WhatsApp and phone channels and service at our branches, and follows the Saudi Personal Data Protection Law (PDPL).

2. Data we collect

We collect only what we need:

• Booking form: name, mobile number, optional email, service, branch, vehicle make, model and year, preferred date and time, and notes.

• Contact form: name, mobile number, email, enquiry type, branch and message.

• At the workshop: details needed to service your vehicle, such as its plate number, VIN and service history.

• Technical data: IP address, browser and device type and pages visited. Our hosting provider processes this to run and protect the site; analytics and advertising tools receive it only if you accept them (section 5).

• We do not take payments on the website and do not store card data.

3. Why we use it

• To handle your booking or enquiry and service your vehicle (to take steps you asked for and perform our service).

• To protect our forms from spam and abuse (our legitimate interest in a secure site).

• To measure visits and the results of our advertising (only with your consent).

• To send offers, only if you agree; you can opt out at any time.

• To meet legal, accounting and regulatory obligations.

4. WhatsApp, email and form protection

When you submit the booking or contact form, WhatsApp opens with your details filled in. Once you send that message, it is handled by WhatsApp (Meta) under WhatsApp's own privacy policy.

A copy of the form is also emailed to info@evsksa.com through Cloudflare's email service. Before it is sent, Cloudflare Turnstile checks that a person, not a bot, submitted it, which involves your IP address and browser signals. We do not store form submissions in a database; the copy stays in our business mailbox. If the email cannot be sent straight away, your browser keeps it for this session only and retries.

To prevent spam, we keep a one-way hash of your IP address and of the form content for a few minutes; neither can be turned back into the original, and both are deleted automatically.

5. Cookies, analytics and advertising

On your first visit we ask for your choice. Until you accept, no analytics or advertising tags load, and Google Consent Mode stays set to denied. If you accept, we use:

• Google Analytics 4 (Google) to count visits and understand which pages help visitors.

• Microsoft Clarity (Microsoft) to see how pages are used, including clicks and scrolling, so we can fix usability problems.

• Meta Pixel (Meta) and TikTok Pixel (TikTok) to measure the results of our ads on those platforms.

You can change your choice at any time from "Cookie settings" in the site footer.

We also keep a few items in your browser: your consent choice (evs.consent) and theme (evs-theme), which stay until you clear them, and form drafts and the campaign that brought you to the site, which are cleared when you close the tab.

Branch pages can show an embedded Google Map. It loads only after you accept cookies or click "Show map", and loading it lets Google receive your IP address and browser data under Google's privacy policy. The "Open in Google Maps" link works without loading the map.

6. Who we share data with

We do not sell your data. We share it only with providers that help us run the service, and only as needed:

• Cloudflare: website hosting, security, Turnstile and email delivery.

• Google (Analytics, Maps), Microsoft (Clarity), Meta (WhatsApp, Meta Pixel) and TikTok (TikTok Pixel), as described above.

• Vehicle manufacturers such as Tesla and Lucid: only your VIN, when their service portals require it to look up parts, recalls or service information for your vehicle.

• Your insurer, only when you ask us to handle an insurance claim.

• Government authorities, when the law requires it.

7. Transfers outside Saudi Arabia

Some of these providers process data outside the Kingdom, for example on Cloudflare's global network or Google, Microsoft, Meta and TikTok servers. We limit these transfers to what each service needs and handle them in line with the PDPL and its implementing regulations.

8. How long we keep data

Form emails and service records are kept for as long as we need them to serve you and to meet our accounting and legal obligations, then deleted. Analytics data is kept for the period set with each provider. Session data in your browser is cleared when you close the tab.

9. Your rights

Under the PDPL you can ask to be informed about how your data is used, get access to and a copy of it, have it corrected or deleted, and withdraw your consent at any time. Withdrawing consent does not affect processing that took place before it.

To use these rights, email privacy@evsksa.com; we reply within 30 days. If you are not satisfied with our reply, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

10. Children

Our services are meant for vehicle owners. We do not knowingly collect personal data from anyone under 18.

11. Security

The site is served only over HTTPS, forms are protected by Turnstile, and access to customer data is limited to staff who need it.

12. Changes to this policy

We may update this policy from time to time. We will publish the updates on this page along with the latest review date.

13. Contact

For any questions about this policy, contact us: privacy@evsksa.com or info@evsksa.com — +966 55 458 6777.