Privacy Policy

At DriveAssist Hub (“we”, “our”, “us”), we value your trust and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and how you can exercise your rights.

1. Who We Are

Legal Entity: M/s. DriveAssist Hub (operating as DriveAssist Hub)

GST: 09ABCDE1234F1Z5

Registered Office: Shop No. 12, Sector 6, HSR Layout, Bengaluru, Karnataka — 560102, India

Contact: support@driveassisthub.in • Phone: +91 98765 43210

Grievance Officer / DPO: Anil Singh — dpo@driveassisthub.in, Phone: +91 98765 43210

Data Controller for the purposes of this policy: M/s. DriveAssist Hub.

2. Information We Collect

We collect the following categories of information when you interact with our website or use our services:

• Contact details: name, phone number, email address, delivery address.
• Service & booking information: selected service, preferred dates/times, instructor preferences, and city.
• Vehicle information (optional): registration number, make/model (if provided), and State/UT.
• Sensitive vehicle identifiers: chassis number and engine number — collected only when necessary to process certain bookings. We treat these as sensitive and handle them with extra care and limited retention.
• Order & payment information: booking ID, products or services booked, amount, payment status, transaction ID, payment proof file name.
• Technical & log data: IP address, browser type, device identifiers, and cookies (see Cookies section).
• Communications: messages you send via contact forms, support requests, or email.

3. Why We Collect Your Information & Legal Basis

We process your personal data for the following purposes:

• Booking fulfilment: to arrange lessons, mock tests, coaching sessions, match instructors, and issue invoices (Legal basis: Contract performance).
• Payment processing: to validate payments and store payment proof for reconciliation (Contract performance / Legal obligation for tax records).
• Support and communications: to respond to enquiries and provide after-sales support (Contract performance / Legitimate interest).
• Fraud prevention & security: to detect and prevent fraudulent or abusive activity (Legitimate interest).
• Legal & accounting compliance: to keep records for GST and tax compliance (Legal obligation).
• Analytics & improvement: aggregated analytics to improve our services (Consent where required).

We only collect the minimum information necessary for these purposes.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Payment processors: (e.g., Razorpay, Paytm) — to process payments (we share name, email, amount and order/booking reference required for reconciliation).
• Hosting and infrastructure providers: for storing encrypted backups and logs.
• Email/notification providers: to send booking confirmations and invoices.
• Trusted third-party service providers: such as local instructors, courier partners (for in-person equipment deliveries), professional services (accounting), and fraud-prevention tools — only necessary order or booking details are shared.

All processors are contractually required to protect your information and only process it for the purposes we specify.

5. Cookies & Tracking

We use essential cookies required for site functionality. Analytics and marketing cookies are used only after you give consent via the cookie banner. You can change cookie preferences anytime via your browser settings or the Cookie Settings page.

We use Google Analytics in anonymized mode (IP anonymization enabled) and other privacy-focused analytics where appropriate.

6. Data Retention & Payment Proofs

We retain personal data only for as long as needed for the purposes listed above and as required by law. Typical retention periods are:

• Booking records & invoices: retained for up to 7 years to comply with GST and accounting laws.
• Payment proofs (images/PDFs): retained for up to 180 days for reconciliation and fraud prevention. After this period proofs are deleted or archived securely, except when required for an ongoing dispute or legal obligation. You may request earlier deletion where no legal obligation prevents it.
• Support correspondence: retained for up to 24 months.
• Anonymous analytics data: retained as aggregated records (no personal identifiers).

Note: Some records (for tax or regulatory reasons) must be kept for the statutory period and cannot be deleted on request.

7. Security

We use industry-standard technical and organisational measures to protect your data: HTTPS (SSL/TLS), restricted access controls, encrypted backups, malware scanning, and periodic security reviews. Uploaded files are stored in protected storage and are not publicly accessible. Access to sensitive data is limited to staff who need it to perform their job.

In the unlikely event of a data breach, we will notify affected users and authorities as required by applicable law.

8. Your Rights

You have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where we do not have a legal requirement to retain it.
• Object to processing for direct marketing or withdraw consent (where we rely on consent).
• Request data portability (in a commonly used machine-readable format), where applicable.

To exercise your rights, contact us at support@driveassisthub.in or dpo@driveassisthub.in. We will usually respond within 30 days.

9. Children

Our services are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data about a child, contact us and we will take steps to remove it.

10. International Transfers

Some of our service providers (hosting, email, analytics) may process data outside India. Where data transfers occur, we ensure appropriate safeguards are in place (standard contractual clauses or equivalent protections) as required by law.

11. Policy Updates

We may update this Privacy Policy to reflect operational or legal changes. The “Last updated” date at the top indicates the current policy. We will notify you of material changes via the website or by email if you are a registered user.