Introduction

Lumi Car Rental Company (“Lumi”, “we”, “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we use the personal information we may collect from you. By using our applications or websites, you agree to this use. This Privacy Policy does not apply to our business partners’, affiliates’, or any other third-party websites, even if their websites are linked to ours. We recommend that you review the privacy policies of other parties you interact with.

The purpose of this notice is to inform the user of the following:

• The types of data Lumi may collect about the customer when using the website and the purpose of collecting it.
• How Lumi uses the data collected from the user and with whom it is shared.
• The user's rights regarding their personal data.

Collection of Personal Data

Data Provided by the Customer to Lumi:

• Personal information, including your email address, name, and phone number through (Rental, Lease and website/Application).
• National ID number and business details are recorded and kept confidential for billing purposes through (Data Controller).
• Transaction-related information, such as bidding details, through (Website).

Data Collected Automatically:

• Lumi may automatically collect certain personal data sent by your browser whenever you visit the website or application, such as data collected through cookies or other tracking technologies. We may also collect mandatory personal data to provide basic services; failure to provide this data may result in the inability to receive these services. Additionally, we may collect optional personal data to improve services and user experience, which does not affect service delivery.

Lumi does not knowingly collect, store, or retain personal data from children. Lumi is only intended for use by individuals over 18 years old and those legally able to enter binding contracts under applicable law.

• Session ID, device (mobile/desktop) characteristics, metadata, and browser data through (Cookies).
• Other information such as your browsing activity on the website and mobile application through (Cookies).

Data Retention Period: Lumi retains your personal data only for the period necessary to achieve the purposes outlined in this policy or as required by applicable laws in Saudi Arabia, without exceeding the period necessary to fulfill legal, contractual, or operational purposes unless there is a legal or regulatory need for a longer retention period.

Data Storage, Information Protection, and Destruction

Your personal information will be securely and encryptedly stored. We do not store your credit/debit card data. All credit card and payment information is subject to security and data encryption standards and handled by fully certified payment service providers. If you book a vehicle on behalf of someone else, you must obtain their consent to use their personal information. We assume you have obtained this consent.

Data Subject Rights

• Right to be Informed: You have the right to know how we collect your data, the legal basis for collection and processing, how we process, store, and destroy it, and with whom it will be shared. You can access all details through this Privacy Policy or contact us via the provided contact details.
• Right to Access Personal Data: You have the right to request a copy of your personal data by contacting us via the provided email, and it will be sent to you via email.
• Right to Correct Personal Data: You have the right to request corrections to your personal data if you believe it is inaccurate, incorrect, or incomplete by contacting us via email. It will be reviewed, updated, and you will be notified via email.
• Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances unless a legal provision requires retention for a specific period or contractual requirements exist.
• Right to Withdraw Consent: You can withdraw your consent to process your personal data at any time, unless legitimate purposes require otherwise.

Disclosure and Processing of Your Information

We may exchange, process, and share any information and data you knowingly provide to us or that we collect about you with third-party suppliers and other relevant entities.

Data Processing Outside the Country

Your data and information may be processed outside Saudi Arabia if required to fulfill obligations under agreements to which Saudi Arabia is a party, to serve its interests, or for other purposes as specified by relevant Saudi laws and regulations.

Cookie Policy

There is a technology called “cookies” that we may use to provide you with customized information on Lumi’s website or mobile applications. A cookie is a data element a website or mobile application sends to your browser, which may then be stored on your system. Cookies allow us to know who viewed pages and ads, how often certain pages are visited, and to identify the most popular sections of our website. Cookies also make the website or app more user-friendly, for example by remembering your preferred language to enhance your experience during future visits. Most browsers accept cookies automatically. You are not required to accept cookies and should review your browser’s information on how to set it up to notify you when you receive a cookie, so you can decide whether to accept it.

Governing Law

This Privacy Policy and its subject matter are governed by the laws and regulations in force in the Kingdom of Saudi Arabia.

Contact Information, Complaints, and Inquiries

• For any complaints or inquiries about the Privacy Policy, you can contact the site management via the following email: info@lumirental.com
• For any complaints or inquiries about personal data handling, you can contact Lumi’s Data Protection Officer via the following email: privacy@lumirental.com

Privacy Policy Updates

• The last update to this Privacy Policy was made on 19/3/1447H.
• Lumi management reserves the right to add or change any of the terms of this Privacy Policy. We will notify the data subject of any such changes. Lumi management has the right to terminate the data subject’s account if they do not accept any changes to the Privacy Policy.
• The Arabic language is the official language in applying terms and conditions. In the event of a dispute in the interpretation of any text in another language, the Arabic text shall prevail.