Privacy Policy

1. Data controller and contact

Zan Arabia L.L.C. operates this website and acts as the controller for personal data it collects directly through the website and its official communication channels.

Privacy enquiries and requests may be sent to info@zanarabia.com. Customer service is also available on +966 9200 28988.

2. Personal data we may collect

• Identity and contact data, such as name, email address, phone number, city, country, and business name.
• Enquiry, business-profile, warranty, support, installer, product-verification, and communication details you choose to provide.
• Transaction or service evidence submitted for support, such as invoice details, installation center, product or roll information, photos, and claim documents.
• Technical and usage data, such as IP address, browser, device, pages visited, referral source, cookies, analytics identifiers, and security logs.
• Information received from authorized installers, XPEL, or service providers where needed to respond to a request, verify a product, or route support.

3. Why we use personal data

• Responding to enquiries, quotations, business applications, and customer-service requests.
• Providing product information, installer directions, verification, warranty guidance, and support routing.
• Managing relationships with customers, installers, partners, and applicants.
• Protecting the website, preventing misuse or fraud, maintaining records, and establishing or defending legal rights.
• Measuring website performance and improving content, navigation, campaigns, and services.
• Sending marketing communications only where consent or another lawful basis permits, with an available opt-out.
• Complying with applicable legal, regulatory, accounting, and authority requirements.

4. Legal basis for processing

Depending on the purpose, processing may be based on your consent, steps taken at your request before entering a contract, performance of a contract, compliance with a legal obligation, or another basis permitted by applicable Saudi personal-data law.

Where processing relies on consent, you may withdraw that consent without affecting processing already carried out lawfully before withdrawal.

5. When data may be shared

• With XPEL when needed for product support, technical review, verification, warranty administration, or an enquiry relating to XPEL products.
• With an authorized installer or relevant service provider when needed to fulfil your request or direct you to a suitable service, using only the data reasonably necessary.
• With hosting, email, analytics, security, document-storage, and other technical providers operating under appropriate confidentiality and data-protection obligations.
• With competent authorities, courts, regulators, advisers, auditors, or insurers where required by law or necessary to protect rights and interests.
• In connection with a lawful restructuring or transfer of business, subject to applicable safeguards.

6. Transfers outside Saudi Arabia

Some support or technical providers, including XPEL-related services, may process data outside the Kingdom when necessary. Any such transfer will be handled in accordance with applicable Saudi requirements for cross-border personal-data transfers and with appropriate safeguards.

7. Retention

Personal data is retained only for as long as needed for the purpose for which it was collected, to maintain service and warranty records, resolve disputes, enforce agreements, protect rights, and meet applicable legal or regulatory retention requirements.

When data is no longer required, it will be securely deleted, destroyed, or anonymized, unless continued retention is legally permitted or required.

8. Security

We apply reasonable organizational, technical, and administrative safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No digital system can be guaranteed completely secure, so users should also protect their devices, accounts, and communications.

9. Your rights

• The right to be informed about the legal basis and purpose of collection.
• The right to access personal data and request a copy in a clear and readable form, subject to applicable rules.
• The right to request correction, completion, or updating of inaccurate data.
• The right to request destruction of personal data where the legal conditions are met.
• The right to withdraw consent where processing depends on consent.
• The right to submit a complaint to the competent authority if you believe your personal data has been processed contrary to applicable law.

10. Cookies and analytics

The website may use necessary cookies for security, language preferences, forms, and essential functions, as well as analytics technologies to understand website use and improve performance. Browser settings can be used to limit or delete cookies, although disabling necessary cookies may affect certain functions.

11. Children’s data

The website is intended for general audiences and business and customer enquiries. We do not knowingly seek to collect personal data from children without an appropriate legal basis or required guardian involvement. If such data is submitted inadvertently, please contact us.

12. Policy updates and requests

This Policy may be updated to reflect changes in services, technology, or legal requirements. The latest version is the one published on this page.

To exercise a privacy right or submit a question, email info@zanarabia.com and provide enough information to identify the relevant request. We may ask for reasonable verification before acting on a request.