XMotors Legal

Privacy Policy

Last updated: 11 February 2026

This Privacy Policy explains how X Inc., trading as XMotors ("XMotors", "we", "us"), collects, uses, stores and protects your personal data when you use xmotorspro.com, our services, and any related applications. We operate globally and comply with the Tanzania Personal Data Protection Act 2022, the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) where applicable.

1. Data we collect

Account data: name, email address, phone number and password (stored as a secure hash).
Order and enquiry data: vehicle plate numbers, VIN/chassis numbers, parts orders, service bookings, import enquiries, delivery addresses and payment references.
Technical data: IP address, browser type, device identifiers, pages visited and approximate location, collected via cookies and similar technologies.
Communications: messages you send us via contact forms, email or WhatsApp.

2. How we use your data

To provide quotations, process orders, bookings and vehicle imports.
To verify vehicle details through plate or VIN lookups you request.
To process payments through our payment providers. We never store full card numbers on our servers.
To send service updates, order confirmations and — only with your consent — marketing communications.
To prevent fraud, enforce our Terms and comply with legal obligations.

3. Legal bases (GDPR)

Performance of a contract: processing orders, bookings and deliveries.
Legitimate interests: site security, fraud prevention and service improvement.
Consent: marketing emails and non-essential cookies. You may withdraw consent at any time.
Legal obligation: tax, customs and accounting record-keeping.

4. Sharing your data

We share data only with: payment processors (e.g. Stripe), shipping and customs partners for vehicle imports, parts suppliers fulfilling your order, and IT providers hosting our platform.
We never sell your personal data to third parties.
Where data is transferred internationally (e.g. between Tanzania, the UK, the EU and the USA) we use appropriate safeguards such as standard contractual clauses.

5. Data retention

Account data is kept while your account is active and for up to 24 months after closure.
Transaction records are kept for the period required by tax and customs law (typically 5–7 years).
You may request deletion at any time; we will erase data we are not legally required to keep.

6. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability.
EU/UK residents may complain to their supervisory authority; California residents have rights under the CCPA including the right to know and the right to opt out of sale (we do not sell data).
To exercise any right, email info@xmotorspro.com. We respond within 30 days.

7. Security

All traffic is encrypted via HTTPS/TLS. Passwords are hashed, access to production data is restricted, and payment card details are handled exclusively by PCI-DSS compliant processors.

8. Children

Our services are not directed at children under 16 and we do not knowingly collect their data.

9. Contact

Data controller: X Inc. (XMotors), Dar es Salaam, Tanzania. Email: info@xmotorspro.com.
We may update this policy from time to time; material changes will be announced on this page.

Questions about our policies? Contact info@xmotorspro.com or WhatsApp +255 742 281 021.