Privacy Policy

1. Who we are

g.u.t.autos ("we", "us") operates an online marketplace in the Kingdom of Saudi Arabia where verified dealers and private sellers list vehicles and buyers contact them.

We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2. Data we collect

Account data: name, email address, password (stored hashed), phone number and city if you provide them.

Listing data for sellers: vehicle details, photos, price, location and contact numbers you choose to publish.

Communication data: inquiries and messages you send to sellers, reviews you write and reports you submit.

Usage data: favourites, saved searches, recently viewed vehicles and anonymous lead events (for example "phone number shown"), stored with a one-way hashed visitor identifier — not your IP address in clear text.

Technical data: essential cookies for sign-in, security (CSRF), language and display theme.

3. Why we use your data (legal basis)

To provide the service you request — creating your account, publishing listings, delivering your messages to sellers and alerts to you (performance of the service).

To keep the marketplace safe — moderation, fraud prevention, rate limiting and handling reports (legitimate interest and legal obligation).

Analytics and advertising cookies are used only if you opt in through the privacy settings banner (consent). You can change your choice at any time from "Privacy settings" in the footer.

4. Who we share data with

Sellers receive the details you include in an inquiry (name, phone and message) so they can reply.

Service providers that host or operate the platform on our behalf (hosting, email delivery), bound by confidentiality and data-processing terms.

Authorities when required by Saudi law. We do not sell personal data.

5. How long we keep data

Account data is kept while your account is open. Private-seller ads expire after 60 days.

When you delete your account we remove your profile, favourites, saved searches, reviews and private ads; inquiries you sent stay with the seller with your name and contact details removed.

6. Your rights

You can access and download a copy of your personal data and delete your account at any time from Account → Settings → "Your data & account".

You can correct your profile details in Settings, withdraw consent for optional cookies, and contact us with any other request about your data. We respond within the time limits set by the PDPL.

7. Security

Connections are encrypted (HTTPS), passwords are hashed, sign-in attempts are rate-limited and suspended accounts lose access immediately.

8. Contact

For privacy questions or to exercise your rights, contact us through the Contact page. If you are not satisfied with our response you may contact the Saudi Data & AI Authority (SDAIA).