How we collect, use and protect your personal information — in full compliance with UAE Federal Law No. 45 of 2021 on Personal Data Protection.
Last updated: June 2026
1 Who We Are
This Privacy Policy applies to Saher Auto General Repairing LLC, trading as FixHive Garage, located at WH2 FixHive, 80 Street, Dubai Investment Park First, Dubai, United Arab Emirates (hereinafter "FixHive", "we", "us" or "our").
We operate the website myfixhive.ae and provide automotive repair and maintenance services. We are the data controller for personal data collected through our website, workshop operations, and communication channels.
This policy is issued in compliance with UAE Federal Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations, as well as any other applicable UAE data protection legislation.
2 Personal Data We Collect
We may collect and process the following categories of personal data:
Identity data: name, Emirates ID number (where required for certain services), nationality.
Vehicle data: make, model, year, chassis/VIN number, registration plate, odometer reading, service history.
Transaction data: details of services provided, repair records, invoices, payment history.
Communication data: messages you send us via WhatsApp, email, or our website contact form, including queries, booking requests and complaint records.
Technical data: IP address, browser type, device type, pages visited, referring URL, time on site — collected automatically when you use our website.
Marketing preferences: your preferences regarding receiving promotional communications from us.
We do not collect sensitive personal data (as defined under the PDPL) such as health information, biometric data, or financial account credentials.
3 How We Collect Your Data
We collect personal data through the following means:
Direct interactions: when you contact us by phone, WhatsApp, email, or via our website contact form; when you visit our workshop and book a service; or when you make a payment.
Automated technologies: when you browse our website, we automatically collect technical data using cookies, server logs, and Google Analytics.
Third parties: we may receive contact or vehicle information from referral partners, insurance companies, or fleet management companies that engage us on your behalf.
4 Why We Use Your Data & Legal Basis
Under the UAE PDPL, we must have a valid legal basis for processing your personal data. The table below sets out the purposes for which we use your data and the corresponding legal basis:
To provide our automotive services (including booking, repair, inspection, and payment processing) — performance of a contract with you.
To communicate with you about your booking, service status, and vehicle — performance of a contract and legitimate interests.
To issue invoices and maintain financial records — compliance with a legal obligation under UAE commercial and tax law.
To send you promotional communications, offers, and service reminders — your consent (you may withdraw at any time).
To improve our website and services through analytics — legitimate interests (we balance these interests against your rights).
To comply with applicable UAE law, respond to court orders, or assist regulatory authorities — compliance with a legal obligation.
To protect our legal rights in any dispute — legitimate interests.
We will only contact you for marketing purposes if you have given us your explicit consent or if you are an existing customer and we are communicating about similar services. You may opt out at any time by messaging us on WhatsApp or emailing sale.ae@myfixhive.ae.
5 Sharing Your Data
We do not sell your personal data to third parties. We may share your data only in the following circumstances:
Service providers: third-party companies that help us operate our business, including payment processors (e.g. Paymob, Tabby), cloud hosting providers, and Google Analytics. These parties process data on our behalf and under our instructions, and are bound by confidentiality obligations.
Vehicle manufacturers and parts suppliers: we may share vehicle data (VIN, mileage, fault codes) with authorised parts suppliers or manufacturers solely for the purpose of obtaining correct parts or technical information for your repair.
Insurance companies or fleet operators: where you or your employer has engaged us through an insurance or fleet management arrangement, we will share service records and invoices with that organisation.
Legal and regulatory authorities: where required to do so by UAE law, a court order, or a government authority (including the Dubai Roads and Transport Authority, Dubai Police, or UAE tax authorities).
Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
We do not transfer your personal data outside the UAE except to cloud service providers who maintain data centres in compliant jurisdictions and are subject to adequate data protection standards consistent with the PDPL.
6 How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by UAE law:
Service and transaction records (invoices, repair history): retained for a minimum of 5 years in accordance with UAE Commercial Transactions Law (Federal Law No. 18 of 1993) and VAT record-keeping requirements under the UAE VAT Law (Federal Decree-Law No. 8 of 2017).
Contact and communication data: retained for 3 years from the date of last interaction, after which it is securely deleted.
Website analytics data: retained for a maximum of 26 months (Google Analytics default retention period).
Marketing consent records: retained until you withdraw your consent, then deleted within 30 days.
When data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you.
7 How We Protect Your Data
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
HTTPS encryption on our website (TLS).
Access controls limiting who can view customer records within our business.
Secure, password-protected systems for storing service records.
Staff training on data privacy obligations.
Regular review of our data security practices.
While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. If you believe your data has been compromised, please contact us immediately at sale.ae@myfixhive.ae.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the UAE Data Office and affected individuals in accordance with the timeframes prescribed under the PDPL.
8 Your Rights Under UAE Law
Under the UAE Federal Law No. 45 of 2021 on Personal Data Protection, you have the following rights in respect of your personal data:
Right of access: you have the right to request a copy of the personal data we hold about you and information about how we use it.
Right to rectification: you have the right to request correction of inaccurate or incomplete personal data.
Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent was the legal basis), subject to applicable legal retention obligations.
Right to restrict processing: you have the right to request that we limit the processing of your data in certain circumstances.
Right to data portability: where technically feasible, you may request that we provide your data in a structured, commonly used, machine-readable format.
Right to object: you have the right to object to processing of your personal data for direct marketing purposes or where we rely on legitimate interests as our legal basis.
Right to withdraw consent: where we rely on your consent as our legal basis, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us using the details in Section 12 below. We will respond to all verified requests within 30 days in accordance with the PDPL. We may need to verify your identity before processing your request.
If you are unsatisfied with our response, you have the right to lodge a complaint with the UAE Data Office (the competent supervisory authority under the PDPL): uaedataoffice.ae.
9 Cookies & Analytics
Our website uses cookies and similar tracking technologies to improve your browsing experience and to help us understand how visitors use our site.
What are cookies? Cookies are small text files placed on your device by a website. They allow the website to remember your actions and preferences over time.
We use the following types of cookies:
Essential cookies: necessary for the website to function correctly (e.g. navigation, security). These cannot be disabled.
Analytics cookies: we use Google Analytics (including Google Ads conversion tracking) to collect anonymised data about how visitors interact with our website — pages visited, session duration, traffic sources. This data helps us improve our content and services. Google Analytics data is aggregated and does not directly identify you.
You can control cookie settings through your browser preferences. Most browsers allow you to refuse or delete cookies. Disabling analytics cookies will not affect your ability to use our website. You may also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.
10 Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us immediately and we will delete that information promptly.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we provide. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website or services after any changes to this policy constitutes your acknowledgement of the updated terms. If any change materially affects how we process data for which we rely on your consent, we will seek fresh consent from you.
12. Contact Us / Data Enquiries
For any questions about this Privacy Policy, to exercise your data rights, or to report a data concern, please contact us:
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Dubai, UAE.