Privacy policy

1. Who we are

Electric Vehicle Services ("EVS", "we", "us") is a brand operated by Alhulul Alkamilah For Cars Maintenance Company (شركة الحلول الكاملة لصيانة السيارات), a limited liability company, Commercial Registration Unified National Number 7030650217. EVS is an electric and hybrid vehicle service and repair workshop in Riyadh, Saudi Arabia, and the controller of the personal data described here. This policy covers evsksa.com, our WhatsApp and phone channels and service at our branches, and follows the Saudi Personal Data Protection Law (PDPL).

2. Data we collect

We collect only what we need:

• Booking form: name, mobile number, optional email, service, branch, vehicle make, model and year, preferred date and time, and notes.
• Contact form: name, mobile number, email, enquiry type, branch and message.
• At the workshop: details needed to service your vehicle, such as its plate number, VIN and service history.
• Technical data: IP address, browser and device type, pages visited and the page that referred you. Our hosting provider processes this to run, protect and measure the speed of the site. Advertising tools and other analytics tools receive it only if you accept them; before you accept, Google Analytics, Google Ads and Cloudflare Web Analytics receive only cookieless signals (section 5).
• We do not take payments on the website and do not store card data.

3. Why we use it

• To handle your booking or enquiry and service your vehicle (to take steps you asked for and perform our service).
• To protect our forms from spam and abuse (our legitimate interest in a secure site).
• To measure visits and the results of our advertising (only with your consent).
• To send offers, only if you agree; you can opt out at any time.
• To meet legal, accounting and regulatory obligations.

4. WhatsApp, email and form protection

When you submit the booking or contact form, WhatsApp opens with your details filled in. Once you send that message, it is handled by WhatsApp (Meta) under WhatsApp's own privacy policy.

A copy of the form is also emailed to info@evsksa.com through Cloudflare's email service. Before it is sent, Cloudflare Turnstile checks that a person, not a bot, submitted it, which involves your IP address and browser signals. We do not store form submissions in a database; the copy stays in our business mailbox. If the email cannot be sent straight away, your browser keeps it for this session only and retries.

To prevent spam, we keep a one-way hash of your IP address and of the form content for a few minutes; neither can be turned back into the original, and both are deleted automatically.

5. Cookies, analytics and advertising

On your first visit we ask for your choice. Until you accept, no analytics or advertising cookies are set, and no advertising tag loads other than the Google tag described here. Apart from Cloudflare's cookieless Web Analytics script (described below), only the Google tag loads, through Google Tag Manager, for Google Analytics 4 and Google Ads, in Google Consent Mode with every setting denied: it sets no cookies and stores no identifier on your device, and it sends Google cookieless signals, such as a page view, a form submission or a WhatsApp or phone click, with the page address and the browser data and IP address that come with any web request. Google uses these signals to estimate visits and ad results in aggregate, and ad click identifiers are removed from them. The Google tag loads from our own domain (Google tag gateway): our Cloudflare hosting forwards its requests to Google with your IP address and the approximate location (country, region, city and approximate coordinates) Cloudflare derives from it. Other cookies on our domain are not passed on; Google's own measurement cookies are, once you accept cookies. Cloudflare, our hosting provider, also adds its Web Analytics script to the site's pages before you make your choice. It sets no cookies and stores no identifier on your device; it sends Cloudflare the page address, the address of the page that referred you, the browser data and IP address that come with any web request, and page-speed measurements, which Cloudflare reports to us only in aggregate. If you accept, we use:

• Google Analytics 4 (Google) to count visits and understand which pages help visitors.
• Google Ads (Google) to measure which of our Google ads lead to a booking, call or message, and to show our ads again to people who visited the site. When you send the contact or booking form after accepting, the Google tag turns your mobile number and email (if you gave one) into a one-way SHA-256 hash in your browser and sends that hash to Google, which uses it to link the request to the ad you clicked ("enhanced conversions"). Google does not receive the number or email as readable text, and this does not happen if you decline or have not chosen yet.
• Microsoft Clarity (Microsoft) to see how pages are used, including clicks and scrolling, so we can fix usability problems.
• Meta Pixel (Meta) and TikTok Pixel (TikTok) to measure the results of our ads on those platforms.

You can change your choice at any time from "Cookie settings" in the site footer.

We also keep a few items in your browser: your consent choice (evs.consent) and theme (evs-theme), which stay until you clear them, and form drafts and the campaign that brought you to the site, which are cleared when you close the tab.

Branch pages show an embedded Google Map, which loads automatically as you scroll near it. Loading it lets Google receive your IP address and browser data under Google's privacy policy. The "Open in Google Maps" link opens the branch in the Maps app.

Some articles include a YouTube video. Nothing is loaded from YouTube until you press play. When you do, the video loads from YouTube's privacy-enhanced domain (youtube-nocookie.com), which lets Google receive your IP address and browser data under Google's privacy policy. Once playing, the player may use Google's own cookies or browser storage.

6. Who we share data with

We do not sell your data. We share it only with providers that help us run the service, and only as needed:

• Cloudflare: website hosting, security, Turnstile, email delivery and Web Analytics.
• Google (Tag Manager, Analytics, Ads, Maps), Microsoft (Clarity), Meta (WhatsApp, Meta Pixel) and TikTok (TikTok Pixel), as described above.
• Vehicle manufacturers such as Tesla and Lucid: only your VIN, when their service portals require it to look up parts, recalls or service information for your vehicle.
• Your insurer, only when you ask us to handle an insurance claim.
• Government authorities, when the law requires it.

7. Transfers outside Saudi Arabia

Some of these providers process data outside the Kingdom, for example on Cloudflare's global network or Google, Microsoft, Meta and TikTok servers. We limit these transfers to what each service needs and handle them in line with the PDPL and its implementing regulations.

8. How long we keep data

Form emails and service records are kept for as long as we need them to serve you and to meet our accounting and legal obligations, then deleted. Analytics data is kept for the period set with each provider. Session data in your browser is cleared when you close the tab.

9. Your rights

Under the PDPL you can ask to be informed about how your data is used, get access to and a copy of it, have it corrected or deleted, and withdraw your consent at any time. Withdrawing consent does not affect processing that took place before it.

To use these rights, email privacy@evsksa.com; we reply within 30 days. If you are not satisfied with our reply, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

10. Children

Our services are meant for vehicle owners. We do not knowingly collect personal data from anyone under 18.

11. Security

The site is served only over HTTPS, forms are protected by Turnstile, and access to customer data is limited to staff who need it.

12. Changes to this policy

We may update this policy from time to time. We will publish the updates on this page along with the latest review date.

13. Contact

For any questions about this policy, contact us: privacy@evsksa.com or info@evsksa.com, +966 55 458 6777.