Visit Masar

1. Introduction

At Masar Buses, operated by National Advanced Mobility Automotive Co. (NAMA) — a subsidiary of Electromin — we place the highest importance on safeguarding your privacy and personal data.

This Privacy Policy outlines how we collect, use, share, and protect your information when you engage with our ticketing services, whether through Ticket Vending Machines (TVMs), mobile applications, Point-of-Sale (POS) systems, or online platforms.

We are fully committed to adhering to the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia (Royal Decree No. M/19 of 1443H) and its implementing regulations, ensuring that your data is handled with transparency, integrity, and security.

2. Data We Collect

We only collect personal data necessary to provide and improve our transportation and ticketing services, including:

A. Registration Data: Age, Gender, phone number, and email address.

B. Usage Data

Trip details (date, time, and route information)
Stations and gates used
Mobile app or device identifiers

C. Payment and Transaction Data

Transaction details and payment reference numbers
Data required for e-invoicing under ZATCA regulations

Note: Payments are processed securely through approved gateways PayTabs. We do not store card numbers, CVV codes, or other sensitive payment credentials.

D. Technical Information

IP address and browser/device type (for app/website access)
Cookies and usage data for service improvement

3. Consent to Data Collection

We request your explicit consent before collecting or processing your personal data, except in cases where the law permits processing without consent (such as fulfilling a contractual obligation or complying with legal requirements). You may withdraw your consent at any time by contacting us.

4. Use of Data

We use your personal data for the following purposes:

To provide, operate, and manage Masar Buses' transportation and ticketing services effectively.
To process payments and issue electronic invoices (in compliance with ZATCA E-Invoicing Regulations).
To improve operational efficiency, service quality, and passenger experience.
To communicate service updates, route changes, or support responses.
To comply with Saudi laws, regulatory requirements, and audit obligations.
To ensure system security, fraud prevention, and service monitoring.

5. Data Protection

We take strict security measures to protect your personal data from unauthorized access, loss, damage, or unlawful disclosure. These measures include encryption, access control, and continuous system monitoring.

6. Data Sharing and Disclosure

We do not sell or rent personal data. We may share it only in the following cases:

With Service Providers: Payment gateways PayTabs, IT support, maintenance contractors, and data processors who are bound by confidentiality and PDPL obligations.
Legal Requirements: When disclosure is required by courts, government authorities, or law enforcement.
Business Operations: Within Electromin/NAMA entities for legitimate operational purposes under strict confidentiality.

7. User Rights

In accordance with the Personal Data Protection Law, you have the following rights:

Right to Access: You may request access to your personal data that we hold.
Right to Correction: You may request correction or updating of your personal data.
Right to Destruction: You may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
Right to Withdraw Consent: You may withdraw your consent to process your data at any time.

To exercise these rights, please contact us through the channels mentioned in the "Suggestions & Complaints" section.

8. Data Retention and Destruction

We retain personal data only for the period necessary to achieve the purposes for which it was collected, or in accordance with legal requirements. After the need for the data ends, we destroy it securely.

9. Cross-Border Data Transfers

We do not transfer your personal data outside the Kingdom of Saudi Arabia unless:

The transfer is required for providing the service and complies with PDPL Article 29.
Adequate safeguards and prior approval from the Competent Authority are in place.

10. Breach Notification

In the unlikely event of a data breach that poses a risk to your rights or freedoms, we will:

Notify you promptly through the contact details provided.
Inform the Saudi Data & Artificial Intelligence Authority (SDAIA) as required by PDPL.

11. Inquiries and Complaints

For questions, complaints, or to exercise your data rights, please contact:

Email: bus-support@electromin.com

Phone: 800-244-0331

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in operational, legal, or regulatory requirements.

Any updates will be published on the official Masar platforms, and material changes will be communicated directly to users.