Data Protection Policy

1. Roles

• Each workshop is the controller of its own customers’ data (names, phone numbers, vehicles, invoices).
• Thynqsys Technologies (SMC-Private) Limited, Pakistan processes that data on the workshop’s behalf, only to provide TyreX.
• Thynqsys Technologies (SMC-Private) Limited, Pakistan is the controller for website enquiries and workshop account data.

2. Safeguards

• Logical isolation: every database query is limited to the signed-in workshop.
• Role and branch-based access for workshop staff.
• HTTPS for all connections; passwords stored as one-way hashes.
• Two-factor authentication and audit logs for platform administrators.

3. Requests from individuals

If a workshop’s customer asks to see, correct or delete their data, the workshop handles the request; we will help when asked.

4. Incidents

If we become aware of a personal data breach affecting a workshop, we will inform it without undue delay with the information we have.

5. Retention

Tax records may need to be kept for at least 5 years under UAE tax law. Other data is deleted or anonymised after an account is closed, on request.