Privacy Policy
Last updated: 15 July 2026
THE ADDRESS UNITED (“we”, “us”, or the “Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal data when you use our website, mobile applications, and car-rental services in the Kingdom of Saudi Arabia.
We process personal data in accordance with the Personal Data Protection Law issued under Royal Decree No. M/19 dated 9/2/1443H and its Implementing Regulations, as supervised by the Saudi Data & Artificial Intelligence Authority (SDAIA), together with any other applicable laws of the Kingdom.
1.Personal Data We Collect
- Identity data: full name, national ID or Iqama number, passport and driving-licence details, date of birth, and nationality.
- Contact data: mobile number, email, and national address.
- Booking data: pickup/return dates and branches, vehicle selection, and rental history.
- Payment data: card or bank transfer details processed through licensed payment providers (we do not store full card numbers).
- Technical data: IP address, device and browser information, and cookie identifiers (see our Cookie Policy).
2.Purpose and Legal Basis
We process your data to create and manage your account, fulfil and administer rental contracts, verify identity and eligibility to drive, process payments, comply with legal and regulatory obligations (including traffic, insurance, and tax requirements), prevent fraud, and — where you have consented — send you marketing communications. Our legal bases include performance of a contract, compliance with a legal obligation, protection of legitimate interests, and your consent, as recognised under the PDPL.
3.Sharing and Disclosure
We may share your data with authorised traffic and government authorities (such as the General Department of Traffic and Absher/Tawakkalna services), insurance providers, licensed payment processors, and service providers acting on our behalf under binding confidentiality obligations. We do not sell your personal data.
4.Cross-Border Transfers
Your personal data is primarily processed and stored within the Kingdom of Saudi Arabia. Any transfer of personal data outside the Kingdom will be carried out only where permitted by the PDPL and its regulations and subject to appropriate safeguards.
5.Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy and to meet legal, regulatory, accounting, and reporting requirements. When data is no longer required, it is securely deleted or anonymised.
6.Your Rights
Subject to the PDPL, you have the right to be informed about the processing of your data, to access your data, to request correction of inaccurate data, to request deletion where permitted, and to withdraw consent to marketing at any time. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the competent supervisory authority.
7.Data Security
We apply appropriate technical and organisational measures — including encryption in transit, access controls, and restricted staff access — to protect your personal data against loss, misuse, or unauthorised access.
8.Contact Us
For any privacy request or question, contact our data protection team at info@theaddressunited.com or +966 55 197 5500.
This document is provided for general information and does not constitute legal advice. The Company recommends that this policy be reviewed and approved by a licensed Saudi legal advisor before it is relied upon.