Data Controller and Contact Details

The data controller is Kordiax Performance Establishment Kordiax Performance Establishment.

For any request for privacy or exercise of rights, please use the Us Contact page published on the site. We do not include an unverified post or telephone number within this policy.

• Commercial address displayed in Shop Settings: Tbok, Saudi Arabia, with an operating address registered in Woo Commerce requiring administrative confirmation before publication as a detailed legal statement.

The types of data we collect.

We collect the data provided by the customer when creating the account or executing the order or the Contact Us, and the data needed to operate and protect the Shop.

• Identification and communication data such as name, contact data, shipping address and billing.
• Account data, log-in, requisitions, products and purchase log.
• Compatibility data such as car type, model year, and engine, and VIN VIN only when needed to verify compatibility.
• Technical data such as IP address, browser type, necessary connection identification files and safety records.
• Content of letters, inquiries and annexes sent by the client to deal with a request or complaint.

Purposes and justifications for treatment

We process the data to the extent necessary to implement the client’s contract, fulfil the statutory obligations, protect the site, improve the service, and respond to queries and complaints.

• Implementation of orders, processing of payment, order of shipment and dispatch of status updates.
• Check the compatibility of the pieces when needed.
• Fraud prevention and protection of accounts and location.
• Maintain order and invoice records in accordance with statutory and accounting requirements.
• Sending marketing messages only when there is an appropriate systemic basis or independent approval when required, with an easy means of cancellation.

Methods of collection and disclosure to others

We collect data directly from the client via the website, account or communication forms, and we may collect technical data from the browser or protection and analysis tools when activated.

We don’t sell personal data. We may disclose the data to those who are required to perform the service, the statutory obligation or the protection of rights.

• WooCommerce and WordPress components needed to run Shop.
• Activated payment providers in Shop such as Paymob, Tabby and MIS Pay according to the client’s method of payment.
• Shipping and clearing companies and suppliers when required to execute the request or verify compatibility.
• Hostage, security and technical support provided to the extent necessary for the operation of the site.
• Official or judicial bodies where there is a statutory obligation.

Payment data

Payment data are processed through approved and activated payment service providers at Shop. Corddex does not normally keep full bank card data within the site when processing through payment gates.

The payment provider may maintain certain data in accordance with its policy and the requirements of financial and security regulations.

Linkage, analysis and marketing files

The site uses necessary connection files to operate the basket, account, session and safety. We may use analytical tools or ads that are activated from time to time to improve service and measure performance.

The names of tools such as Google Analytics, Meta Pixel or TikTok Pixel have not been installed within this policy unless their actual use is confirmed.

• Marketing approval should not be a mandatory condition for the completion of the purchase unless communication is necessary to execute the request.
• Any optional marketing messages should provide an easy way to cancel the subscription.

Data transfer outside the Kingdom

We may need to share limited data with suppliers, shipping companies or service providers outside the Kingdom, including the United States, when there is a need to execute an importer ' s request, verify compatibility or process a claim.

Any transfer or disclosure outside the Kingdom shall be made to the extent necessary and in accordance with the relevant statutory controls. No specific contractual arrangements or guarantees shall be claimed to exist that have not been administratively verified, and the contracts of processors and data-processing agreements shall be reviewed when external suppliers are accredited.

Duration of retention and destruction

When the purpose ends and there is no obligation or legitimate interest to retain, the data shall be deleted, concealed or destroyed in an appropriate manner.

Rights of the data holder

According to the relevant Saudi regulations, the data holder may have rights, including knowledge of the justification and purpose of collecting its data, access to its data, request correction, completion or updating, request destruction in cases permitted by the system, and withdraw consent if the processing is based on consent without affecting previous legitimate treatments.

These rights may be exercised on the page Contact Us, with clarification of the request and the necessary verification data, and a complaint may be filed with the competent authority if the request is not processed in accordance with the regulations.