Privacy Policy

1. Personal Data We Collect

The information collected depends on the feature you use and may include:

• Account and contact data: name, phone number, email address, Google account identifier, profile photo, user role, account status and OTP verification records.
• Listings and user content: vehicle and spare-part details, prices, city, photos, auction bids, quotations, chats, voice notes, files, ratings, complaints and support communications.
• Roadside-assistance data: precise or approximate location, pickup/drop-off points, route, distance/ETA, responder location, vehicle and issue details, photos, status updates and completion OTP.
• Provider and Champ data: identity or business information, licences, service vehicle/equipment, approved services, service areas, availability, bank/IBAN details, wallet points and payout records.
• Transaction and technical data: orders, payment/subscription amounts and status, transaction references, IP address, user agent, device/usage information, security events and audit logs. Payment-card data is processed by the payment gateway; Shamel receives only the information needed to confirm and reconcile the transaction.

2. How We Use Personal Data

We use personal data to create and secure accounts; provide car, spare-parts, auction, Mojaz and roadside-assistance services; publish approved listings; match customers with eligible providers or Champs; calculate serviceability, distance and ETA; provide navigation or active-job tracking; process quotations, payments, subscriptions and bank payouts; send service notifications; provide support; moderate content; prevent fraud and abuse; resolve disputes; maintain records; comply with law; and improve service reliability. Processing is based on the service requested, applicable legal obligations, Shamel's legitimate interests in operating a safe platform, and consent where required.

3. Device Permissions and Public Content

Shamel may request location, camera, photos/files, microphone and notification permissions only for relevant features. You may deny or revoke permissions through device settings, but some services may not work or may require manual information. Approved car, auction and spare-part listings may be visible to guests and other users. Public content may include listing details, price, city, images and a limited display name. Do not upload IDs, full bank/card details, exact home addresses, unrelated private documents or other people's personal data unless required and lawfully provided.

4. How We Share Personal Data

We share only the data reasonably necessary with:

• Other users and assigned Service Providers or Shamel Champs to operate listings, bids, quotations, chat, orders and accepted roadside-assistance jobs. Precise location and contact data are restricted to authorized parties when needed.
• Mojaz, configured WhatsApp suppliers, Google sign-in/maps, OTP or messaging providers, payment gateways, banks, hosting, notification, security and support providers.
• Government, judicial or regulatory authorities, professional advisers or other parties where required by law or necessary to protect users, Shamel or the public.

We do not sell or rent personal data. Some providers may process data outside Saudi Arabia; Shamel will use lawful safeguards required by the Saudi Personal Data Protection Law and other applicable requirements.

5. Retention and Security

We keep personal data only for as long as needed for the stated purpose, active accounts and transactions, legal or accounting duties, fraud prevention, safety, disputes and legal claims. When no longer required, data is deleted, anonymized or securely destroyed. We use access controls, encryption, authentication controls, audit logs, secure integrations and other reasonable safeguards. No system is completely secure, and users should protect their device, account and OTP codes.

6. Your Rights and Account Deletion

Subject to applicable law, you may request access to, a copy of, correction of, or destruction of your personal data, and may withdraw consent where processing relies on consent. You may also submit a privacy complaint.

7. Children, Changes and Contact

Shamel is not intended for children or persons who cannot legally enter the relevant transactions. We may update this policy when our services, vendors, permissions or legal requirements change, and will show the revised “Last Updated” date and provide additional notice where required.