Privacy Policy

Effective date: 1 June 2026 · Last reviewed: 1 June 2026

This Privacy Policy explains how 800CarGuru Auto Repair LLC (“800CarGuru”, “we”, “us”) collects, uses, shares, stores, and protects personal data when you book any car service through 800carguru.com, the WhatsApp number +971 800 2274878, or the toll-free hotline. We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and any applicable emirate-level regulation, including the Dubai Data Law (No. 26 of 2015).

1. Who we are

800CarGuru is a UAE-licensed mobile car repair and maintenance provider serving Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and Umm Al Quwain. Our registered office is in Al Quoz Industrial Area, Dubai. For any privacy enquiry you can reach our Data Protection lead at [email protected] or call 800-2274878.

2. What personal data we collect

We collect only what we need to deliver the service you asked for:

Contact data: your name, mobile number, and (optionally) email.
Vehicle data: make, model, variant, year, mileage, plate number, registration emirate.
Service-request data: the service you booked, the agreed price, your preferred date/time and location, the technician dispatched, and any notes you shared.
Payment data: we do not store full card numbers. When you pay online, the payment is processed by our PCI-DSS-certified payment partner; we receive a transaction reference and the last four digits only.
Location data: approximate GPS coordinates if you grant browser permission, used to quote the right dispatch fee. We never track your location in the background.
Device + usage data: IP address, user agent, browser type, referrer, and pages viewed — collected via standard analytics (Google Analytics 4) and our own click-event log to improve the site.
Cookies: see Section 7.

3. How we use your data

We use the data above only for the purposes listed:

To dispatch a technician, complete your service, and contact you about arrival, parts, or pricing.
To send transactional messages (booking confirmation, invoice, warranty card) via SMS, WhatsApp, or email.
To process refunds, warranty claims, and disputes.
To send promotional offers — only if you opt in. You can opt out any time by replying STOP, clicking the unsubscribe link, or messaging us on WhatsApp.
To improve the site (anonymised analytics, A/B tests, page-speed monitoring).
To comply with UAE law, including invoicing under the Federal Tax Authority's VAT regulations.

4. Lawful basis for processing

We process personal data under the lawful bases set out in UAE PDPL Article 5: (a) your explicit consent (for marketing), (b) performance of a contract you initiated (booking a service), (c) our legitimate interest in operating and securing the business (fraud prevention, service-quality auditing), and (d) compliance with a legal obligation (tax invoicing, regulatory reporting). Where consent is the basis, you may withdraw it at any time by writing to [email protected].

5. Who we share your data with

We never sell your personal data. We share it only with the parties strictly necessary to fulfil your booking:

Field technicians and dispatch partners — the assigned technician sees your name, phone, address, and vehicle so they can arrive at the right place.
Parts suppliers — receive your vehicle make/model only, never your contact details, when we need to source a part for your job.
Payment processors — Network International, Stripe, or Telr, depending on the payment route you chose. They handle card data under their own PCI-DSS-certified policies.
Cloud hosting — Amazon Web Services (AWS) Middle East (UAE) region for the website and database; Google Cloud (EU/US) for transactional email and analytics.
Authorities — only when compelled by a valid order from a UAE court, the Dubai Police, or a regulator (RTA, FTA, MOIAT) acting within their jurisdiction.

6. Where your data is stored and how long we keep it

Primary storage is in the AWS Middle East (UAE) region. Backups are encrypted at rest (AES-256) and retained for 30 days. We keep your booking record for five years after your last service — required for warranty claims and FTA VAT invoicing — then it is purged or irreversibly anonymised. Marketing-only data is held only while your subscription is active and for 12 months after unsubscribe.

7. Cookies and analytics

We use first-party cookies to remember your selected car, your in-progress booking cart, and your dark-mode preference. We use Google Analytics 4 with IP anonymisation to understand traffic. We do not use third-party advertising cookies or behavioural-targeting trackers. You can clear or block cookies in your browser settings; doing so may break the “remember my car” feature but will not block bookings.

8. How we protect your data

All traffic to 800carguru.com is served over HTTPS (TLS 1.2+). Our database runs in a private VPC with no public ingress. Application credentials are rotated quarterly and stored in a secrets vault. Employee access follows the least-privilege principle and is logged. We run automated dependency scans and quarterly penetration tests. In the unlikely event of a data breach affecting your personal data, we will notify you and the UAE Data Office within 72 hours of discovery, as required by UAE PDPL.

9. Your rights under UAE PDPL

You have the right to:

Access the personal data we hold about you and receive a copy.
Correct any inaccurate or incomplete data.
Delete your data, subject to our legal retention obligations (e.g., we can't delete a paid invoice for 5 years).
Restrict or object to specific processing — for example, telling us to stop marketing without closing your account.
Port your data to another provider in a structured, machine-readable format.
Withdraw consent at any time for any processing based on consent.
Complain to the UAE Data Office (dataoffice.gov.ae) if you believe we've handled your data unlawfully.

To exercise any right, email [email protected]. We respond within 30 days. We may ask you to verify your identity before releasing personal data.

10. Children

800CarGuru is a B2C automotive service for vehicle owners. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact us and we will delete it.

11. Changes to this policy

We may update this policy when laws, technologies, or our services change. The “Effective date” at the top reflects the latest version. Material changes (new third parties, new categories of data, change of lawful basis) will be notified by SMS and email at least 30 days before they take effect.

12. Contact

800CarGuru Auto Repair LLC
Warehouse 45, Al Quoz Industrial 1, Dubai, UAE
[email protected] · 800-2274878 · WhatsApp +971 800 2274878