Privacy Policy
Home . Privacy Policy
1. Terms and Definitions
Personal data: means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Special categories of personal data: means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Controller: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor: means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
International transfer: means the transmission of personal data to the territory of a foreign country or region, a public authority of a foreign state, foreign individual, or foreign legal entity.
2. Legal Grounds to Processing of Personal Data
We will process your personal data only where there are legal grounds to do so. Those grounds include the following:
- Consent: You have provided your consent to the processing of your personal data.
- Legal obligations / situations: The processing is required or authorized by applicable laws, or relates to suspected unlawful activity, serious misconduct, legal proceedings, or law enforcement.
- Legitimate interests and reasonable expectations: We process data where it is necessary for our legitimate interests and within your reasonable expectations, including but not limited to:
- Helping us understand our customers better and provide improved, more relevant services.
- Ensuring that our services run smoothly and reliably.
- Keeping our systems secure and preventing unauthorized access or cyber-attacks.
3. Information We Collect
- Contact information (such as name, address, city, state and postal code, email address, and mobile number).
- Vehicle information (such as vehicle identification number (VIN), make, model, model year, servicing dealer, date of purchase or lease, and service history).
- Vehicle performance data (such as engine and transmission performance, vehicle camera images, and airbag deployment conditions or crash/near-crash information about how a vehicle’s system performed).
- Non-credit-related marketing profile information (such as intended purchase/lease timing and the vehicle(s) of interest).
- Relationships with Geely in addition to purchase/servicing (including incentive eligibility verification information).
- Payment and SMS gateway information (such as name, address, phone number, email address, order details, billing address, gift details, location, ID/Iqama, license expiry details).
- Finance information (such as salary certificate, bank statement, GOSI certificate).
4. Purposes of Processing of Personal Data
We will process your personal data to fulfill the following purposes:
a. Operate our Services: we process personal data to
- Provide, maintain, improve, protect, and develop our services, products, content, and advertisements.
- Register visits to our website.
- Provide car purchase consulting services.
- Provide after-sale and maintenance services.
- Provide payment services.
- Send notices about software updates, updated policies, or other important information.
- Analyze and develop data on service and product usage to deliver better offerings.
- Interact with you regarding your device, services, questions, and requests.
b. Understand usage: we use information to understand how you use our products/services.
c. Account management: we use information (including personal information) to register and close accounts, maintain and update records, and perform similar activities in connection with our services.
We may not be able to perform the above without your personal data—for example, we may not be able to communicate with you or address your inquiries.
5. Ways of Processing of Personal Data
We will carry out the following operations on your personal data: collection, recording, systematization, accumulation, storage, alteration (update, modification), retrieval, use, transfer (provision, access), depersonalization, blocking, and deletion (destruction) of personal data.
We will not take automated decisions (including profiling) that produce legal effects concerning you or similarly significantly affect you.
We implement suitable safeguards to keep personal data accurate, complete, up-to-date, and relevant, and to uphold your rights to access and correct personal data about you.
6. How We Protect and Store Your Personal Data
We take security measures to protect your information, including administrative, technical, and physical safeguards. However, no security measure can guarantee absolute security. If you believe your login credentials have been compromised, please contact us immediately.
When you use our services, the personal data you share may be visible to other users and, in some cases, search engines and the public; it can be read, collected, used, and retained by those parties. You are responsible for the personal data you choose to share or submit in such instances. Please ensure your personal data is accurate.
Examples of security measures include:
- Securing premises where information systems used to process personal data are located.
- Using technical controls including encryption and anonymization where appropriate.
- Authorizing and maintaining a list of personnel who may access information systems where personal data is processed.
- Assessing the effectiveness of measures taken to ensure the security of personal data.
- Detecting unauthorized access attempts and taking appropriate measures.
- Taking practicable measures to restore personal data which has been modified or destroyed.
- Establishing rules for access to personal data being processed.
Personal data collected about you will be stored in AWS data centers located in the Middle East.
We process your personal data for as long as necessary to fulfill the purposes described in this policy and to comply with legal obligations. When retention is no longer necessary, we will delete the personal data we hold about you in a secure manner.
7. How We Share, Transfer, and Publicly Disclose Your Personal Data
- We may share your personal information:
- To comply with applicable laws or regulations;
- To comply with a court order, subpoena, or other legal process;
- In response to a request by a government authority, law-enforcement agency, or similar body;
- Where we believe it is reasonably necessary to comply with applicable laws or regulations;
- To protect our rights, property, users, or the public;
- To enforce our terms and to support service improvements.
We will only publicly disclose your personal information under the following circumstances:
- Where we have obtained your explicit consent;
- Public disclosure required by law or on reasonable grounds (for example, to protect safety).
8. Your Rights
Subject to applicable law, you have the following rights in relation to your personal data:
- Right of access: obtain confirmation whether we process your personal data and a copy of such data.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of your personal data where, for example, it is no longer necessary for the purposes collected, you withdraw consent (where processing was based on consent), or the data has been unlawfully processed.
- Right to restriction: request restriction of processing in certain circumstances (e.g., while we verify accuracy of data you contest).
- Right to portability: receive your personal data in a structured, commonly used, and machine-readable format and have it transmitted to another controller where technically feasible.
- Right to object: object to processing based on our legitimate interests, including profiling; we will cease processing unless we demonstrate compelling legitimate grounds.
- Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time (withdrawal does not affect processing prior to withdrawal).
- Right to lodge a complaint: with a competent supervisory authority if you believe your rights have been infringed.
To exercise your rights, please contact us using the details in the “Contact Us” section below.
9. Minor’s Privacy
We do not invite minors to directly register accounts on our platform. If you are a parent or legal guardian and believe we have collected a child’s personal data without your verified consent, please contact us and we will take steps to delete the information promptly.
10. International Transfer
As we provide products or services through resources and servers around the world, your personal data may be transferred to, stored in, or processed in jurisdictions other than your own. Such jurisdictions may have different data protection laws. Where we transfer personal data internationally, we will ensure that your personal information is adequately protected in accordance with applicable legal requirements (for example, by using standard contractual clauses or other lawful transfer mechanisms).
11. Cookies
When you use our services, we may use cookies and similar technologies to provide, protect, and improve our services. A cookie is a small text file that a visited website sends to your browser, which may be stored on your device to help websites remember information about your visit.
We use cookies for purposes including authentication, keeping you signed in, remembering your preferences, understanding how our services are used, and improving performance. You can configure your browser to accept, reject, or delete cookies. If you disable cookies, certain features of the services may not function properly.
We may also place web beacons in our emails to understand whether messages have been opened or acted upon. You can disable images in your email client to reduce beacon functionality.
12. Notification Regarding Updates
We review this Privacy Policy periodically in light of changes in our business, technology, or legal requirements. We will post updates on this page and update the effective date. Where required by law, we will notify you of material changes and, where applicable, obtain your consent.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@wallan.com.
Name: Wallan Group
Address: PO Box: 1194, P.C:130, Azaiba, Muscat, Sultanate of Oman
City: Muscat
Prefecture: Muscat
Country: Oman
Post code: 12283
Number: (+968) 94440666
