Privacy Policy

1. Who we are

This Privacy Policy describes how Bright Autozone Private Limited ("we", "us", "our", or "the Company"), a company incorporated under the Companies Act, 2013, having its registered office at Bagh No. 2, Shaheed Path Chauraha, Lucknow — 226012, Uttar Pradesh, India, operating the brand City Cab and the website citycabev.com (the "Website"), collects, uses, discloses, and safeguards your personal data.

By using this Website or submitting your information to us, you agree to the practices described in this Privacy Policy. This policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws.

2. What information we collect

When you interact with our Website, fill out the enquiry form, or contact us via WhatsApp, phone, or email, we may collect the following categories of personal data:

• Identification data — full name, contact number, email address, city of residence.
• Communication data — messages, queries, feedback, or product preferences you share with us through the contact form, WhatsApp, phone, or email.
• Business data (for dealership enquiries) — business name, GST number, address, years in business, and references.
• Technical data — IP address, browser type, device information, pages visited, time spent, and approximate location (city-level), collected automatically via standard server logs.

We do not knowingly collect data from any individual under the age of 18. If you are a minor, please do not submit personal information through this Website.

3. How we use your information

Your personal data is processed only for the following specific, lawful purposes:

• To respond to your enquiries, demo requests, and quote requests.
• To process and follow up on dealership applications.
• To send you product information, pricing, brochures, or service-related messages that you specifically requested.
• To improve our products, services, and Website experience.
• To comply with applicable laws, respond to regulatory authorities, and enforce our Terms of Service.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Legal basis & consent

We process your personal data on the basis of your explicit consent, which you provide by voluntarily submitting your details through our enquiry form, WhatsApp chat, or other contact channels. You may withdraw your consent at any time by contacting our Grievance Officer (see Section 11).

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

5. How we share your information

We do not sell your personal data. We may share limited information with:

• Authorised dealers in your region, if you specifically request to be connected with a local dealer.
• Service providers who help us operate our business (hosting providers, email/messaging platforms such as WhatsApp Business, analytics tools), under strict confidentiality and data-protection obligations.
• Government authorities, courts, or regulators, when required by applicable law, legal process, or a valid request.
• Successors, in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is typically retained for up to three (3) years from the date of last contact, unless you request earlier deletion or a longer period is required by applicable law (e.g. tax or accounting obligations).

7. Your rights under the DPDP Act

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

• Right to information — to know what personal data we hold about you and how it is being processed.
• Right to correction & erasure — to request correction of inaccurate data or deletion of data no longer required.
• Right to grievance redressal — to lodge a complaint with our Grievance Officer (see Section 11).
• Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to withdraw consent — to withdraw your consent at any time.

To exercise any of these rights, please email brightautozone@gmail.com with the subject line "DPDP Request — [Your Name]". We will respond within thirty (30) days.

8. Security of your data

We implement reasonable security practices and procedures commensurate with the sensitivity of the data and the risks involved, including SSL/TLS encryption for all data in transit, restricted server access, password-protected databases, and periodic security reviews. However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

9. Cookies and tracking technologies

Our Website may use cookies and similar technologies to enhance your browsing experience and analyse Website traffic. For details on what cookies we use and how you can manage them, please refer to our Cookie Policy.

10. Children's privacy

Our products and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data may contact our Grievance Officer to request deletion.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the rules made thereunder, the contact details of our Grievance Officer are as follows:

We will acknowledge your grievance within forty-eight (48) hours of receipt and seek to resolve it within fifteen (15) days, in accordance with applicable law.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a new "Last updated" date. Material changes will be notified via prominent notice on the Website. We encourage you to review this page periodically.

13. Governing law and jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Lucknow, Uttar Pradesh, India.