Privacy Policy

Last Updated: 2026-04-27

Effective From: 2026-04-27

1. Who We Are (Data Controller)¶

YAXIN PARTS (referred to as "we", "us", or "the Company") operates the website at https://www.yaxinparts.com and provides B2B automotive parts inquiry, catalog, and sales-support services to importers, distributors, and trade buyers in MENA, CIS, SEA, EU, and Americas markets.

Legal entity (controller of record): YAXIN PARTS (controller representative: Amir, CEO)

Registered address: privacy@yaxinparts.com

Contact for privacy enquiries: privacy@yaxinparts.com

Designated representative for KSA / UAE / Egypt extraterritorial requests: privacy@yaxinparts.com

2. Scope and Extraterritorial Application¶

This policy applies whenever you visit our website, submit an inquiry, or otherwise interact with us, regardless of where you are physically located. Specifically, this policy is designed to comply with:

• Kingdom of Saudi Arabia — Personal Data Protection Law (Royal Decree M/19, 1443H), Article 4 (extraterritorial scope: any processing of KSA-resident personal data);
• United Arab Emirates — Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and any cross-border data transfer rules issued by the UAE Data Office;
• Arab Republic of Egypt — Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations;
• Russian Federation — Federal Law No. 242-FZ (data localization) — see § 7 below.

3. What We Collect¶

When you submit an inquiry through the website, we collect:

• Contact details you provide (name, company, email, phone or WhatsApp number);
• The subject of your inquiry (part number, vehicle, quantity, market region);
• Free-text notes you choose to send;
• Technical data your browser sends automatically (IP address, user-agent, referer, accept-language header);
• Cookies and equivalent tracking identifiers as described in § 9.

We do not collect: passport / ID document numbers, payment-card details, biometric data, or sensitive personal data (health, religious belief, political affiliation) for ordinary inquiries.

4. Why We Collect (Lawful Bases)¶

— Purpose: Respond to your B2B inquiry · Legal basis (KSA PDPL / UAE PDPL / Egypt 151): Performance of a request you initiated (pre-contract)

— Purpose: Send you a quote or catalog · Legal basis (KSA PDPL / UAE PDPL / Egypt 151): Performance of a request you initiated

— Purpose: Comply with tax / customs / export-control laws · Legal basis (KSA PDPL / UAE PDPL / Egypt 151): Legal obligation

— Purpose: Prevent fraud / abuse of our forms · Legal basis (KSA PDPL / UAE PDPL / Egypt 151): Legitimate interest

— Purpose: Improve our website (analytics) · Legal basis (KSA PDPL / UAE PDPL / Egypt 151): Consent (where required)

5. How Long We Keep Your Data¶

We keep inquiry-related personal data for 90 days after the inquiry is closed, unless a longer retention period is required by tax, customs, or contractual obligations (typically up to 7 years for invoiced transactions). After the retention period, your data is deleted or anonymized.

6. Your Rights as a Data Subject¶

Under each of the four laws above, you have the following rights:

• Right to access the personal data we hold about you;
• Right to correction of inaccurate or incomplete data;
• Right to deletion ("right to be forgotten"), subject to lawful retention obligations;
• Right to object to processing, in particular to direct marketing;
• Right to data portability — to receive your data in a machine-readable format;
• Right to withdraw consent at any time, where consent is the lawful basis;
• Right to lodge a complaint with the competent supervisory authority:
• KSA: Saudi Data and Artificial Intelligence Authority (SDAIA)
• UAE: UAE Data Office (Federal level) or the relevant Free Zone authority
• Egypt: Personal Data Protection Center (PDPC)
• RU: Roskomnadzor (subject to § 7 below)

To exercise any right, email us at privacy@yaxinparts.com. We will respond within the timeframe required by the law applicable to you (typically 30 days; KSA PDPL: 30 days; UAE PDPL: as specified by the Data Office regulation; Egypt 151: as specified in the Executive Regulation).

7. Russia Federation — § 242-FZ Posture¶

Inquiries from users in the Russian Federation are routed to WhatsApp (a third-party messaging service operated by WhatsApp LLC). When you click the WhatsApp button on a /ru/... page, your message is sent through WhatsApp's infrastructure, not stored on our web servers.

Where our website nevertheless logs minimal technical data (IP, headers) about a visit from a Russian Federation user, we limit such processing to anti-abuse and security purposes. We do not transfer Russian Federation residents' personal data to our customer-relationship database absent your explicit, separate written consent.

If you are a Russian Federation resident and you believe your personal data has been processed in a way that does not comply with § 242-FZ, please contact us at privacy@yaxinparts.com or contact Roskomnadzor.

8. Cross-Border Transfers¶

Our servers are located in multiple regions including Vercel Edge Network (global) and AWS Frankfurt (eu-central-1). When you submit an inquiry, your personal data may therefore be transferred outside your country of residence.

For transfers from KSA, UAE, or Egypt, we rely on the following safeguards:

• KSA PDPL Article 29: explicit consent obtained at the point of inquiry submission, supplemented by standard contractual clauses where applicable
• UAE PDPL Article 22: explicit consent obtained at the point of inquiry submission, supplemented by standard contractual clauses where applicable
• Egypt 151/2020 Article 14: explicit consent obtained at the point of inquiry submission; PDPC license to be obtained as required

9. Cookies and Analytics¶

We use the following first-party and third-party identifiers:

• Strictly necessary (no consent required): session cookies, CSRF tokens, locale preference;
• Analytics (consent required where applicable): Google Analytics 4, Yandex Metrica;
• Essential third parties: Sanity (CMS), Vercel (hosting), Resend (email delivery), Sentry (error tracking — IP-truncated).

You can withdraw analytics consent via the cookie banner or by clearing site data in your browser.

10. Children¶

Our service is B2B and not directed at individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact privacy@yaxinparts.com so we can delete it.

11. Changes to This Policy¶

We will post the updated date at the top of this page. Material changes will be additionally announced via the website banner for at least 30 days.

12. Contact¶

— Purpose: General privacy enquiries · Email: privacy@yaxinparts.com

— Purpose: KSA / UAE / Egypt local-representative requests · Email: privacy@yaxinparts.com

— Purpose: Roskomnadzor requests · Email: privacy@yaxinparts.com

— Purpose: Data Protection Officer (if appointed) · Email: dpo@yaxinparts.com