Privacy Policy and Data Protection

Data controller: SD ASSIST.

Contact: info@sdassist.com | +90 216 683 93 52 | +44 203 800 1361 | +32 2 899 06 94

• Identity data: name, date of birth, identity information (optional — only if provided by the customer)
• Contact data: email, phone, address
• Vehicle data: license plate, make, model, year, chassis number
• Payment data: credit card details (securely processed by Stripe; SD ASSIST does not store card numbers)
• Location data: GPS coordinates shared only during emergency breakdown cover calls
• Camera access: used only to scan QR codes and number plates; scanning happens on your device, and no images are stored or sent to our servers
• Notification token: your device token, used so we can deliver notifications to the app

Your personal data is processed for the following purposes:

• Providing and coordinating breakdown cover services
• Membership and subscription management
• Payment processing, invoicing and policy issuance
• Compliance with legal obligations
• In emergencies: sharing your contact details with service providers

To provide you with the fastest possible assistance, your contact details (phone, location, vehicle data) may be shared with our contracted service providers (towing companies, accommodation providers, hospitals, consulates, etc.), with our partners and, where necessary, with official public and private institutions and organisations.

Your data is never sold to third parties or transferred to them for marketing purposes. Your contact details may be used for SD ASSIST's own campaign and information messages (SMS, WhatsApp, e-mail); by purchasing a policy you accept this. You can opt out of these messages free of charge at any time: use the one-click unsubscribe link in every campaign e-mail, or write to help@sdassist.com. Opting out does not affect transactional messages (order confirmation, policy delivery, service and claim notifications), which continue to be sent as part of the performance of the contract. Payment transactions are processed securely by Stripe Inc. in accordance with PCI DSS.

Transfers outside the EEA: To deliver the service, some of your data is processed by providers established outside the European Economic Area — Stripe, Inc. for payments; Google (Firebase) for authentication and infrastructure; Apple and Expo for app distribution and notifications. These transfers rely on the providers’ certification under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses (SCCs); for Türkiye, Article 9 of the KVKK applies. You may request a copy of the safeguards in place at info@sdassist.com.

• Right of access: know what data is being processed
• Right to rectification: request correction of incomplete or incorrect data
• Right to erasure (right to be forgotten): request deletion of your data
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decision-making, including profiling

To exercise your rights, send an email to info@sdassist.com or call +32 2 899 06 94. Your request will be answered within 30 days.

Our website uses essential functional cookies and performance analytics cookies. Analytics cookies are only activated with your consent.

You can manage your cookie preferences via your browser settings or our cookie banner.

Your data is protected by SSL/TLS encryption, firewalls and access controls.

Personal data is retained for the duration of the membership and thereafter for up to 10 years in accordance with legal obligations.

For questions, requests or complaints about our privacy policy, please contact us. You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA) or the Turkish Personal Data Protection Authority (KVKK).

Email: info@sdassist.com | TR: +90 216 683 93 52 | UK: +44 203 800 1361 | Tel: +32 2 899 06 94

This policy also covers the SD ASSIST app on the App Store and Google Play. Here is how the app handles your data:

• Location: read only when you request roadside assistance and the app is open. There is no background location tracking.
• Camera: opened to scan QR codes and number plates. Scanning happens on your device; no image is saved or transmitted.
• Notifications: we keep a notification token for your policy, assistance requests and reminders. You can withdraw permission at any time.
• Sign-in: by email, or with your Google, Apple or Facebook account. Authentication runs through Firebase Authentication.
• Payment: card details are handled by Stripe; the app never sees or stores your card number.
• Advertising and tracking: the app uses no advertising identifier and contains no analytics or tracking software.

You can delete your account and data from inside the app: Settings → Delete my account.