1Who we are

Bosla Technologies is the controller of personal data processed through the website and, where we determine the purposes of processing, through the platform. Where we process data on behalf of an operator or employer that provisions your access, that organization is the controller and we act as a processor under their instructions. Our headquarters are in Jeddah, Kingdom of Saudi Arabia.

2Data we collect

Depending on how you use the Services, we may collect:

• Account & contact data — name, company, role, email, phone number and login credentials.
• Demo & enquiry data — information you submit through our contact and demo forms, including fleet size and your message.
• Operational data — shipments, trips, orders, vehicles, drivers, documents and related records entered into the platform.
• Location & device data — GPS location, route, trip and device information collected during active duty to provide live tracking and ETAs.
• Usage & technical data — IP address, browser and device type, pages viewed, and similar diagnostics collected automatically.

3How we use data

We use personal data to provide, operate, secure and improve the Services; to deliver real-time tracking, dispatching and reporting; to respond to demo requests and enquiries; to manage accounts and billing; to communicate service and security notices; to comply with legal and regulatory obligations; and to detect and prevent fraud or misuse.

4Legal basis

We process personal data where it is necessary to perform a contract with you or your organization, to comply with a legal obligation, to pursue our legitimate business interests in a balanced way, or on the basis of your consent where required — for example for certain marketing communications. You may withdraw consent at any time.

5Location data

The platform and driver app rely on GPS and device location to provide tracking, geofence-based status updates, route information and estimated arrival times. Location data is collected during active duty and may be shared with the operator or customer responsible for the relevant shipment. You can control device-level location permissions, though disabling them may limit operational features.

6Sharing & disclosure

We do not sell personal data. We may share data with: the operator, carrier or customer connected to a shipment; service providers and sub-processors who host or support the Services; government or regulatory bodies where required (for example for waybill and tax compliance); and professional advisers or authorities where legally required. All processors are bound by confidentiality and data protection obligations.

7Sub-processors & third parties

We use trusted third parties for cloud hosting, mapping and location, communications and analytics. These providers process data only as needed to deliver their service to us and under appropriate safeguards. A current list of key sub-processors is available on request.

8International transfers

Personal data is primarily processed within the Kingdom of Saudi Arabia. Where data is transferred outside the Kingdom, we do so in accordance with the PDPL and apply appropriate safeguards to protect it.

9Data retention

We retain personal and operational data for as long as needed to provide the Services, and thereafter as required for legal, tax, audit and compliance purposes. Operational records may be retained where regulations require. When data is no longer needed, we delete or anonymize it securely.

10Security

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, role-based access controls, network protections and monitoring. No method of transmission or storage is completely secure, but we work continuously to safeguard the data entrusted to us.

11Your rights

Subject to applicable law, you have the right to access your personal data, to request correction of inaccurate data, to request deletion, to object to or restrict certain processing, and to withdraw consent. Where we act as a processor for your organization, we will direct your request to the relevant controller. To exercise your rights, contact us using the details below.

12Cookies

The website uses essential cookies and similar technologies to operate the site, remember your language preference and understand usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

13Children

The Services are intended for business use and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

14Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.