Privacy Policy

How Al Sarab Group collects, uses, and protects your personal information when you use our website and services.

Last updated: August 2026

Effective Date: April 2026 Last Updated: August 2026

1. Introduction

At Al Sarab Group, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website or interact with our services.

We encourage you to read this document carefully. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions or concerns, please contact us using the details in Section 19.

2. Who We Are

Al Sarab Group — Al Sarab Company for Automotive Trading and Commercial Agencies Ltd.

Head office:
Address: 100 Meter Road, Makhmour Crossroad - Al-Sarab Auto Company, Erbil, Kurdistan Region, Iraq.
Address: Karrada - Near Kahramana Square - Tariq Bin Ziyad Street - Al-Sarab Auto Company, Baghdad, Iraq.
Website: www.alsarabgroup.com
Email: info@alsarabgroup.com
Phone: 6311

Al Sarab Group is the data controller responsible for the personal information described in this policy.

3. Scope of This Policy

This Privacy Policy applies to information collected through our online platforms, including our official website and any related digital services operated by Al Sarab Group.

It does not apply to:

Information collected through offline channels (in-person visits to our showrooms, printed forms, phone calls)
Third-party websites or services linked from our website
Data collected by our partners, manufacturers, affiliates, or advertisers through their own platforms
Information you provide directly to vehicle manufacturers, financing providers, or insurance companies

We recommend reviewing the privacy policies of any third-party services you access through our website.

4. Information We Collect

4.1 Information You Provide Directly

We collect personal information that you voluntarily provide, including when you:

Fill out a contact, inquiry, test-drive, or service-booking form
Request a quotation or vehicle information
Send us an email, message, or other communication
Apply for a job or business partnership
Subscribe to our newsletter or updates

The types of information we may collect include:

Full name
Email address
Phone number
Company or organization name
City, governorate, or preferred branch
Vehicle of interest, plate number, or VIN (for service requests)
CV, cover letter, and employment history (for job applications)
The content of your messages and any attachments

4.2 Information Collected Automatically

When you visit our website, certain technical information is automatically collected through cookies, log files, and similar technologies. This may include:

IP address and general geographic location (country/city level)
Browser type, version, and operating system
Device type and screen resolution
Language preference (English, Kurdish, or Arabic)
Internet Service Provider (ISP)
Pages visited, time spent on each page, and navigation patterns
Date and time of your visit
Referring and exit URLs

This information is primarily used in aggregate form to analyze website performance, improve user experience, and maintain security.

4.3 Information From Other Sources

We may receive information about you from:

Vehicle manufacturers and brand partners where you have submitted an inquiry through their channels
Social media platforms, if you contact us through them or interact with our pages
Publicly available business directories, in a business-to-business context

5. Legal Bases for Processing

Where data protection law requires a legal basis for processing, we rely on the following:

Purpose	Legal Basis
Responding to your inquiries and service requests	Performance of a contract or steps taken at your request
Operating and securing the website	Legitimate interests
Analytics and website improvement	Consent (analytics cookies) or legitimate interests
Marketing communications	Consent, which you may withdraw at any time
Recruitment and job applications	Steps taken at your request prior to a contract
Meeting legal and regulatory obligations	Legal obligation

6. How We Use Your Information

Al Sarab Group uses the information we collect to:

Operate, maintain, and improve our website and services
Respond to your inquiries, quotation requests, and service bookings
Arrange test drives, vehicle deliveries, and after-sales appointments
Send administrative information, updates, and relevant notices
Personalize your experience and display content in your preferred language
Analyze usage trends and user behavior to enhance our offerings
Develop new features, products, and services
Send marketing and promotional communications, with your consent where required
Assess job applications and partnership proposals
Detect, investigate, and prevent fraudulent or unauthorized activity
Comply with applicable legal obligations

We process your data only for the purposes described above and will not use it in ways that are incompatible with those purposes without first seeking your consent.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather usage data. Cookies are small data files stored on your device that help us recognize returning visitors and remember your preferences.

7.1 Types of Cookies We Use

Essential cookies — Necessary for the website to function correctly, including language and region selection, security, and session management. These cannot be disabled.
Analytics cookies — Help us understand how visitors use our site so we can improve it.
Preference cookies — Remember your settings and choices, such as your language (English, Kurdish, Arabic) and theme.
Marketing cookies — Used to deliver relevant advertisements and measure campaign performance.

7.2 Managing Cookies

You may disable or manage cookies at any time through your browser settings, or through the cookie preferences control on our website where available. Please note that disabling certain cookies may affect the functionality of some parts of our website.

8. Sharing and Disclosure

Al Sarab Group may engage trusted third-party service providers to assist with operating our website and delivering our services. These parties are authorized to use your personal information only as necessary to perform services on our behalf and are contractually obligated to maintain confidentiality.

We may share information with the following categories of recipients:

Hosting and infrastructure providers — for website hosting, databases, and file storage
Analytics providers — for aggregated usage statistics
Email and communications providers — for delivering messages and newsletters
Vehicle manufacturers and brand principals — where necessary to process a warranty claim, recall notice, or manufacturer-backed inquiry
Professional advisors — legal, accounting, and audit services

We may also disclose your information:

When required by law, regulation, or a valid order from a competent authority
To protect the rights, property, or safety of Al Sarab Group, our customers, or the public
In connection with a merger, acquisition, restructuring, or sale of assets, in which case you will be notified

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes.

9. International Data Transfers

Al Sarab Group operates in Iraq. Some of our service providers store or process data outside Iraq, including in the European Union and the United States.

Where personal data is transferred internationally, we take reasonable steps to ensure it remains protected to a standard consistent with this policy, including through contractual safeguards with our providers.

10. Data Security

We take the protection of your personal information seriously. Al Sarab Group implements technical and organizational measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit (HTTPS/TLS)
Access controls and role-based permissions for internal systems
Secure, reputable hosting environments
Regular review of access rights

However, please be aware that no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

Please do not send sensitive information such as bank details, full identification documents, or passwords through website forms or unencrypted email.

11. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

As a general guide:

Type of Data	Typical Retention Period
Website inquiries and contact form submissions	Up to 24 months from last contact
Service and warranty records	For the duration of the warranty plus any legally required period
Job applications (unsuccessful)	Up to 12 months, unless you ask us to delete sooner
Newsletter subscriptions	Until you unsubscribe
Website analytics data	Up to 26 months, in aggregated form

When your data is no longer needed, we will securely delete or anonymize it.

12. Your Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights regarding your personal data:

Right of access — Request a copy of the personal data we hold about you
Right to rectification — Request correction of inaccurate or incomplete information
Right to erasure — Request deletion of your personal data under certain conditions
Right to restrict processing — Request that we limit how we use your data
Right to object — Object to our processing of your data for specific purposes, including direct marketing
Right to data portability — Request transfer of your data to another organization or to yourself
Right to withdraw consent — Where we rely on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal
Right to lodge a complaint — File a complaint with your local data protection supervisory authority

12.1 How to Exercise Your Rights

Send your request to info@alsarabgroup.com with the subject line "Data Rights Request." We may ask you to verify your identity before acting on the request.

We will respond within one (1) month of receiving your request. If your request is complex, we may extend this period by up to two further months and will inform you if we do so. There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive.

13. California Residents — CCPA/CPRA Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

The right to know what personal information we have collected about you, the sources, the purposes, and the categories of recipients
The right to request deletion of your personal information
The right to correct inaccurate personal information
The right to opt out of the sale or sharing of your personal information
The right to limit the use of sensitive personal information
The right to non-discrimination for exercising your rights

We do not sell or share personal information as those terms are defined under California law, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

To submit a request, contact us using the details in Section 19. We will confirm receipt within ten (10) business days and respond substantively within forty-five (45) days, extendable by a further forty-five days where reasonably necessary. You may designate an authorized agent to make a request on your behalf.

14. Children's Privacy

Al Sarab Group is committed to protecting the privacy of children. Our website is directed at adults and is not intended for children.

We do not knowingly collect personal information from children under 13 years of age, or under 16 years of age where you are located in the EEA or a jurisdiction that sets a higher age of digital consent.

If you believe that a child has provided us with personal information without parental consent, please contact us immediately. We will take prompt action to remove such information from our records.

We encourage parents and guardians to actively monitor and guide their children's online activity.

15. Marketing Communications

If you subscribe to our newsletter or consent to receive marketing messages, you may opt out at any time by:

Clicking the unsubscribe link in any marketing email
Replying to the message with a request to unsubscribe
Emailing info@alsarabgroup.com

Opting out of marketing does not affect service-related messages, such as responses to your inquiries, appointment confirmations, warranty notices, or safety recalls.

16. Automated Decision-Making

We do not use your personal information to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

17. Language

This Privacy Policy is published in English, Kurdish, and Arabic. We work to keep all versions consistent. In the event of any discrepancy or conflict between versions, the English version shall prevail.

18. Updates to This Policy

Al Sarab Group reserves the right to update or modify this Privacy Policy at any time. When we make significant changes, we will:

Update the "Last Updated" date at the top of this document
Where appropriate, provide a more prominent notice on our website
Where required by law, seek your consent again

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes have been posted constitutes your acceptance of the updated policy.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:

Al Sarab Group Al Sarab Company for Automotive Trading and Commercial Agencies Ltd.

Website: www.alsarabgroup.com
Email: info@alsarabgroup.com
Phone: 6311
Address: 100 Meter Road, Makhmour Crossroad - Al-Sarab Auto Company, Erbil, Kurdistan Region, Iraq.
Address: Karrada - Near Kahramana Square - Tariq Bin Ziyad Street - Al-Sarab Auto Company, Baghdad, Iraq.

We are committed to addressing your concerns and will make every effort to resolve any issues in a timely and transparent manner.