Privacy Policy

TBIKE Motorcycle Rental Company ("TBIKE," "we," "our," or "ours") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, and protect the personal information we may obtain from you when using our applications, websites, or services.

By using these services, you agree to what is outlined in this policy.

This Privacy Policy does not apply to websites of our business partners or other third parties, even if their sites are linked to our services. We always recommend reviewing the privacy policies of any third party you deal with.

We take protecting your personal data seriously. We may collect the following information when you use our services (app, website, or any related platforms):

We will use your data for the following purposes:

• Execute rental agreements and complete bookings.
• Process payments and issue invoices.
• Communicate with you regarding booking confirmation, technical support, or any operational issues.
• Personalize your experience and improve our services.
• Send transactional notifications related to bookings, payments, and account activity.
• Comply with legal requirements and provide information to official authorities upon request.
• Improve the app and website through analytics and user experience.

Your personal data may be shared with:

• Our employees and agents to provide services.
• Moyasar (payment processor) to securely process card payments and transactions in Saudi Arabia.
• Sentry (error tracking service) to monitor app performance, detect crashes, and improve stability. This may include device information, app state, and error logs.
• Trusted technical service providers (such as server hosting, customer support systems).
• Official authorities when there is a legal obligation.
• Affiliate or partner companies in accordance with applicable laws, with their commitment to the same protection standards.

We confirm that we do not sell or rent your data to any third party for independent marketing purposes.

Under applicable data protection laws, including the Saudi Arabia Personal Data Protection Law (PDPL), you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: You can request that we correct any inaccurate or incomplete personal data.
• Right to Deletion: You can request the deletion of your personal data, subject to legal retention requirements.
• Right to Object: You can object to the processing of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of your privacy rights, you can contact us through the following channels:

• Email: support@tbikes.com
• Phone: +966 54 559 8855
• In-App: Through the "Privacy Settings" section in your account

We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request. If we cannot fulfill your request due to legal obligations or legitimate business reasons, we will explain the reasons to you.

When using the TBIKE mobile application, we may collect additional data:

• Phone Number & SMS Verification: We use your phone number for account authentication via one-time password (OTP) sent by SMS. OTP codes are temporary and not stored after verification.
• Location Data: Approximate or precise location (when enabled) to identify nearby branches and support rental operations such as bike unlock/return verification and incident reporting.
• Device Diagnostics: Device-related technical identifiers (such as anonymized identifiers generated by the app) used solely for diagnostics, security, and service stability. These identifiers are not used for advertising or cross-app tracking.
• Push Notifications: Notification tokens to send booking updates, rental reminders, and payment confirmations.
• Camera Access: Required for uploading driver's license, motorcycle condition photos (4 angles at pickup and return), helmet photos, odometer readings, and incident documentation.

You can control location sharing and other data permissions through your device settings at any time.

We implement appropriate technical and organizational measures to protect your personal data:

• We use modern encryption protocols (SSL/TLS) to protect your data during transmission.
• Data at rest is encrypted using industry-standard encryption.
• We comply with globally recognized security standards (GDPR principles, PCI DSS when applicable).
• Access to personal data is restricted to authorized personnel only.
• We conduct regular security audits and assessments.

The user bears responsibility for maintaining the confidentiality of login data and password. Please notify us immediately if you suspect unauthorized access to your account.

Our website and app may contain links to third-party websites, plug-ins, and applications. These include:

• Payment gateway providers
• Social media platforms
• Map and navigation services
• Partner websites

Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies or practices. We encourage you to read the privacy policy of every website you visit.

We may transfer your personal data to countries other than the Kingdom of Saudi Arabia when needed (such as for hosting servers or technical service providers).

When we transfer data internationally, we ensure:

• Adequate level of protection is applied in compliance with Saudi regulations.
• Appropriate safeguards are in place (contractual clauses, certifications).
• Your rights remain protected regardless of where data is processed.

We retain your personal data only for the period necessary to achieve the purposes mentioned in this policy or as required by law.

Retention periods vary based on data type:

• Account Information: Retained while your account is active, plus 5 years after closure.
• Transaction Records: Retained for 7 years for tax and legal purposes.
• Communication Records: Retained for 2 years.
• Analytics Data: Retained for 2 years in anonymized form.

When data is no longer needed, we securely delete or anonymize it.

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

• We will update the "Last Updated" date at the top of this policy.
• For material changes, we will notify you via email or in-app notification.
• We encourage you to review this policy periodically.

Your continued use of our services after the update constitutes acceptance of the modified policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: