Personal data
Privacy Policy
This policy explains what AMF AUTO SERVICES LLC receives when you browse the site, contact the workshop or request an appointment, why the information is used and how to ask about it.
AMF AUTO SERVICES LLC is responsible for the personal data described here. The website does not need an account for ordinary browsing. Information is received when you contact the workshop, submit an enabled appointment form, send vehicle details or become a workshop customer.
Who controls the data
The controller is AMF AUTO SERVICES LLC, operating Audi Specialist Dubai from Warehouse 39, Al Quoz 4, Dubai, United Arab Emirates.
Privacy requests can be started by calling 050 608 7150, using the workshop WhatsApp route shown on the Contact page, or visiting the workshop during published opening hours. We may need to verify your identity and your relationship to the vehicle or job before disclosing or changing records.
Information we receive
| Category | Examples | Why it is used |
|---|---|---|
| Contact details | Name, mobile or WhatsApp number, optional email and preferred contact route. | To answer an enquiry, discuss an appointment, provide findings or an estimate and manage the customer relationship. |
| Vehicle details | Audi model, year, engine or trim, mileage, registration, VIN, dashboard message and symptoms. | To identify the vehicle, choose a test route, check part fitment and keep the job record tied to the correct Audi. |
| Booking details | Requested date or time window, service category, drivability description and recent related repair. | To assess the request, prepare the workshop and explain that a preferred time is not confirmed until the workshop replies. |
| Workshop records | Job card, approvals, estimates, parts identity, measurements, scan findings, invoices, warranty terms and communication history. | To perform authorised work, record decisions, support a warranty or complaint review and meet accounting or legal duties. |
| Media | Photographs or short videos of the vehicle, dashboard, component, leak, sound or damage. | To understand an enquiry, record vehicle condition, support technical findings or document authorised work. |
| Technical request data | IP address, user-agent information, requested URL, time and security signals recorded by the host or website controls. | To deliver the site, protect forms, investigate faults and limit abusive or automated requests. |
Do not send bank-card details, passwords, identity documents or unrelated sensitive information through a website form or WhatsApp. If a document is genuinely needed for a repair or legal requirement, ask the workshop which secure route to use.
Appointment form handling
The online appointment form is enabled only when a monitored workshop recipient and a published privacy policy are configured. When enabled, the form can collect the contact, vehicle, symptom, drivability, date preference and consent fields visible before submission. A submission is emailed to the configured workshop recipient. The public page does not place those customer details in the redirect URL.
The form uses the following short-lived controls:
- a one-time form token that can exist for up to one hour;
- sanitisation, field limits, a hidden anti-bot field and a two-second minimum completion check;
- a salted hash derived from the request IP address and user agent for a fifteen-minute rate limit;
- a ten-minute server-side retry record and an opaque ten-minute retry cookie after a validation problem;
- a one-time result token retained for up to ten minutes to display a submission outcome.
Retry information is consumed and deleted when the next page render uses it. If the monitored recipient is not configured or delivery fails, the page directs the visitor to call or use WhatsApp instead of treating the request as a confirmed appointment.
Browser storage and external services
The workshop pages do not intentionally load optional advertising or analytics cookies at the effective date. Essential security, form or administrator-session cookies may appear only when the relevant feature is used. The short-lived appointment retry cookie and server-side tokens are described above.
A phone call is handled through the relevant telecommunications providers. If you choose WhatsApp, Meta and WhatsApp process the message, account and device information under their own terms. If you choose the Google Maps link, Google receives the normal information associated with opening its service. These services may process data outside the UAE.
The website does not send your appointment-form fields to WhatsApp or Google Maps automatically. You decide whether to open those destinations and what to send.
Why the information is used
Depending on the interaction, processing may be needed to answer your request, take steps toward a workshop service, perform an approved job, keep required business records, protect the website or comply with law. Where consent is the appropriate basis, such as an optional publication use, consent must be specific and can be withdrawn for future use.
Withdrawing consent does not undo processing that was lawful before withdrawal, and it may not require deletion of records that must be retained for an active job, invoice, legal obligation, safety issue or dispute.
Who may receive information
Information is shared only where the task requires it. Recipients may include the website host, email provider, communications provider, technicians or service advisers working on the request, parts suppliers for VIN-led fitment, an approved recovery provider, professional advisers, insurers when you instruct us, and public authorities where disclosure is required by law.
We do not sell customer personal data. A supplier should receive only the information needed for the fitment, availability, warranty or delivery question. A customer name or full communication history is not normally needed for a part-number check.
Photographs and publication
Workshop photographs can form part of a vehicle condition, finding, estimate or repair record. Public use is a separate decision. A customer vehicle, registration plate, face, document or message should not be published as marketing or case-study material without a suitable permission and privacy review.
Website images labelled as purpose-created visuals are presentation assets, not records of a customer job. The Website Terms of Use explains these labels.
How long information is kept
| Record | Current retention approach |
|---|---|
| Form token | Up to one hour and usable once. |
| Form retry data | Up to ten minutes and deleted when consumed. |
| Rate-limit signal | Up to fifteen minutes as a salted hash rather than a public customer record. |
| Submission result | Up to ten minutes and deleted when consumed. |
| Enquiry and workshop records | Only for as long as reasonably needed for the enquiry, approved job, service history, warranty, complaint, accounting, fraud prevention or applicable legal obligation. Different record types can require different periods. |
| Publication permission | For as long as the related material is used, plus any period needed to record the permission or withdrawal. |
You may ask which retention rule applies to a specific record. We will not invent a fixed period where the underlying legal or operational record type has not been identified.
Your data rights
Subject to the UAE Personal Data Protection Law and its exceptions, a person may have rights relating to access, information, transfer, correction, erasure, restriction or stopping processing, and certain automated decisions. The exact right depends on the data, reason for processing and any legal duty to retain it.
Send a clear request that identifies you, the relevant Audi or enquiry, the record involved and what you want us to do. We may ask for proportionate verification. We will explain if a request cannot be completed because another person’s privacy, an active legal duty, a safety concern or a legal exception applies.
Security and incidents
The website uses HTTPS, request validation, input limits, short-lived form tokens, rate limiting and security headers. Access to workshop records should be limited to people and providers who need it for the stated task. No website or communication channel can be promised as risk free.
If you believe information sent to the workshop has been lost, disclosed to the wrong person or used unexpectedly, contact the workshop promptly with the date, route and record involved. Do not include more sensitive information than is needed to identify the issue.
Children and policy changes
The website and workshop booking routes are intended for adults who can authorise an enquiry or vehicle service. We do not intentionally request personal data from children for marketing or account creation.
This policy may change when the contact form, providers, legal requirements or workshop process changes. The effective date at the top records the current published version. A material change will not be used to rewrite the terms of an older repair retrospectively.
Ask about the wording before you rely on it
Use the workshop contact routes for a current document, job-card term or repair-specific warranty question.