1. Who we are
This policy explains how RentX processes personal data when you use the Platform.
2. Data we collect
This may include names, contact and organization data, identity/authorization information when required, device and login records, rental/purchase requests, quotations, contracts, invoices/payments, user-provided service location, photos, signatures, handover/maintenance records and support communications.
3. Purposes
We process data to create accounts, perform requests/contracts, match customers and vendors, administer payments/settlements, protect security and prevent fraud, provide support and complaint handling, meet legal obligations, perform operational analytics and send service-related notifications.
4. Lawful basis
Processing is carried out under the appropriate lawful basis for each purpose, which may include contract performance/pre-contract steps, legal obligations, legitimate interests where applicable and consent where required.
5. Sharing
Necessary data may be shared with the counterparty vendor/customer, hosting/security/communications/payment providers, advisers and government/regulatory bodies where a lawful basis exists. Sharing is limited to what is necessary for the purpose.
6. Cross-border transfers
Where a service requires a transfer of personal data outside Saudi Arabia, it will be handled in accordance with the Saudi PDPL, its implementing requirements and applicable safeguards.
7. Retention
Data is retained for the period required for the purpose, contract, legal obligations, transaction evidence and claim resolution, then deleted or anonymized when no lawful retention purpose remains.
8. Data-subject rights
Subject to applicable law and exceptions, rights include being informed, access, obtaining a copy, correction/completion/update, deletion where conditions apply and withdrawal of consent where consent is the lawful basis.
9. Security
We apply appropriate technical and organizational controls including access restriction, logging/audit, permission management, backups and incident-response procedures.
10. Contact
Privacy requests or complaints can be submitted through the Platform support center or published contact email. Identity verification may be required before fulfilling a data request.