Privacy Policy
Last updated: 01.01.2026
This Privacy Policy explains how Kalaax (“Kalaax”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you use our website, mobile app, and related services (together, the “Platform”).
1) Who we are
Data Controller: Parts Hub L.L.C.
Email: [email protected]
The entity responsible for processing your data is Parts Hub L.L.C.
2) What data we collect
We collect data in three ways: (a) you provide it, (b) we collect it automatically, and (c) we receive it from partners.
A. Data you provide
- Account data: name, email, phone number, password (hashed), language preferences.
- Order & delivery data: shipping address, order items, order history, invoices, return/refund details.
- Payment & transaction data: payment method (e.g., cash on delivery), payment status, partial payment references (we do not store credit card details if online payment is used).
- Vehicle/fitment data: car make/model/year, VIN and other vehicle identifiers.
- Customer support: messages, call records/notes (where permitted), complaints.
- User content: reviews, ratings, photos/videos uploaded for returns/refunds or support.
B. Data collected automatically
- Device & log data: IP address, browser type, device identifiers, operating system, timestamps, app events, crash logs.
- Usage data: pages viewed, searches, clicks, cart actions, referrals.
- Cookies & similar technologies: see Section 8.
C. Data from partners
- Sellers/suppliers: product availability, warranty/compatibility confirmations, order acceptance status.
- Couriers/logistics providers: delivery status, proof of delivery, COD collection status (if applicable).
- Payment providers: transaction confirmations and fraud signals.
Data is gathered via your direct inputs, automatic tracking, and verified partners.
3) Why we use your data
We use personal data for the following purposes:
- Provide the Platform and process orders (create accounts, place orders, confirm availability, deliver items, manage COD).
- Vehicle matching and recommendations (suggest compatible parts based on your vehicle information).
- Customer support (respond to requests, disputes, warranty issues, and returns/refunds).
- Platform security and fraud prevention (detect suspicious activity, prevent abuse and account takeover).
- Legal and compliance (tax, accounting, lawful requests, enforcing terms).
- Marketing (newsletters, promotions, personalized offers where permitted, and only with choices available to you).
- Analytics and improvement (understand what works, fix bugs, improve UX, measure campaign performance).
Primary use is to power the platform and personalize auto part compatibility for your vehicle.
4) Legal basis (important)
Where required by applicable law, we process personal data based on:
- Your explicit consent: (especially where required under Egypt’s PDPL for collection/processing/disclosure unless an exception applies).
- Contract necessity: (to fulfill your orders and provide requested services).
- Legal obligation: (e.g., accounting/tax obligations).
- Legitimate interests: (security, fraud prevention, service improvement), where permitted and balanced with your rights.
Processing is fully aligned with local legislation including the Egyptian PDPL.
6) International data transfers
Your data may be processed outside Egypt (for example, where our hosting or support providers are located). Cross-border transfers may be restricted under Egypt’s PDPL and may require specific conditions/approvals.
If GDPR applies (e.g., EU users), we use appropriate safeguards such as contractual protections.
Contractual safeguards are enforced to protect international data transfers.
7) Data retention
We keep personal data only as long as needed for the purposes in this policy, including:
- Account data: while your account is active.
- Order/invoice data: as required for legal, tax, and dispute purposes.
- Return photos/videos: as needed to process the claim and handle disputes, then deleted or archived according to our retention rules.
We may retain limited data longer if required by law or to establish, exercise, or defend legal claims.
We retain transaction data for periods mandated by tax and commercial laws.
9) Your rights and choices
Depending on applicable law, you may have rights to:
- Access your personal data
- Correct inaccurate data
- Delete/erase data (in some cases)
- Withdraw consent (where processing is based on consent)
- Object / restrict processing (in some cases)
- Be informed about certain processing and disclosures
Egypt’s PDPL grants individuals rights and generally requires explicit consent for processing unless permitted by law. If GDPR applies, you have a defined set of rights and transparency protections.
How to exercise your rights: Email us at [email protected] from your registered email/phone. We may need to verify your identity before acting.
Marketing choices: You can opt out of marketing emails/SMS at any time using the unsubscribe link or by contacting us. Service messages (order confirmations, delivery updates) may still be sent.
Exercise your access or deletion rights by emailing [email protected].
10) Security
We use reasonable technical and organizational measures to protect personal data (access controls, encryption in transit such as HTTPS, monitoring, least-privilege access). However, no system is 100% secure, and you use the internet at your own risk.
All traffic is fully encrypted and secured via HTTPS.
11) Children
Kalaax is not intended for children. If you are under 18, please do not use the Platform or provide personal data without a parent/guardian.
Service is restricted to users 18 years or older.
12) Third-party links
Our Platform may contain links to third-party sites. We are not responsible for their privacy practices.
External links are not covered by our Privacy Policy.
13) Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on the Platform and update the "Effective date". If changes are material, we will provide additional notice where appropriate.
Users will be notified of material updates before they take effect.
14) Contact and complaints
Questions or requests: [email protected]
If you believe your data has been mishandled, you may also have the right to lodge a complaint with the relevant regulator, depending on where you are located and which laws apply.
For further inquiries, contact us at [email protected].

