Privacy Policy
Your privacy and data protection are our top priorities. This policy explains exactly what data we collect, why we collect it, and how we protect it.
Last updated: April 2025 ย ยทย Effective: April 2025
Happy Go Bike Rentals ("Happy Go", "we", "our") operates the website happygorentals.com and the Happy Go mobile app. This Privacy Policy describes how we handle personal data collected when you create an account, make a booking, or use our identity-verification features. By using our services you agree to the practices described below.
1. Information We Collect & Why
We only collect data that is strictly necessary to provide our services safely. The table below explains each data type, what exactly is stored, and the reason it is required.
Full Name
Your full name as provided during registration or profile setup.
To personalise your booking confirmations, receipts, and customer-support interactions. Required by our rental operations to identify the person who rented the vehicle.
Contract performance โ needed to fulfil the rental agreement.
Email Address
Your email address provided at sign-up.
To send booking confirmations, payment receipts, OTP verification, and important service notifications (e.g. booking status changes). You may opt out of promotional emails at any time.
Contract performance & legitimate interest (service communications).
Mobile Phone Number
Your 10-digit mobile number.
Used for OTP-based login authentication to verify your identity securely. Also used for booking-related WhatsApp/SMS notifications and emergency contact during your rental period.
Contract performance & security โ OTP is required for account login.
Aadhaar Number (Last 4 Digits Only)
We store ONLY the last 4 digits of your Aadhaar number (masked as XXXX-XXXX-XXXX), along with the name, date of birth, gender, and address as returned by the DigiLocker verification API. The full 12-digit Aadhaar number is NEVER stored in plain text โ it is encrypted at rest and inaccessible to any staff member.
Indian motor-vehicle laws and our rental agreement require us to verify the identity of every customer who rents a two-wheeler. Aadhaar-based DigiLocker verification (via Cashfree) is the government-approved digital identity verification method. Storing the masked number and basic details allows us to confirm the verified identity during bike pickup without requiring you to carry physical documents every time.
Legal obligation (Motor Vehicles Act, 1988) & contract performance.
Driving License Image
A photograph of your driving license, uploaded through the app or website. The image is stored securely on Amazon S3 (encrypted storage).
A valid driving license is a legal requirement to ride any motor vehicle on Indian roads. We store your DL image so our staff can verify its validity at bike pickup without requiring you to present the physical card each time you rent. The image is visible only to authorised Happy Go staff handling your booking.
Legal obligation (Motor Vehicles Act, 1988) & contract performance.
Payment Information
Transaction reference IDs and payment status. We do NOT store card numbers, UPI PINs, or any sensitive payment credentials โ all payments are processed by Razorpay, a PCI-DSS compliant gateway.
To track payment status, issue refunds, and resolve payment disputes.
Contract performance & legal obligation (financial record-keeping).
Location (Pickup City)
The city/location you choose for bike pickup (e.g. Chikkamagaluru). We do NOT collect real-time GPS location.
To show you available bikes in your selected location and to fulfil the booking.
Contract performance.
2. How We Use Your Information
Create and manage your user account
Process bike and hostel bookings and send confirmations
Verify your identity (Aadhaar) and driving eligibility (DL) as required by law
Send OTPs, booking updates, payment receipts, and service alerts
Enable customer support to assist with your bookings
Comply with applicable laws and government regulations
Prevent fraud and ensure the safety of our rental fleet
3. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share data with the following third parties only to the extent necessary to deliver our services:
| Service | Provider | Purpose |
|---|---|---|
| Identity verification | Cashfree (DigiLocker API) | Aadhaar-based KYC |
| Payment processing | Razorpay | Secure payment gateway |
| File storage | Amazon S3 (AWS) | DL image & Aadhaar photo storage |
| SMS / OTP delivery | MessageCentral / Fast2SMS | OTP for login |
| Email delivery | Gmail SMTP | Booking confirmations & alerts |
4. Data Retention
We retain your data only for as long as necessary:
- Account data (name, email, phone) โ retained while your account is active, or up to 3 years after last activity for legal/accounting compliance.
- Driving license image โ retained for the duration of your account and for 1 year after account deletion for dispute resolution, as required under applicable transport regulations.
- Aadhaar masked number & details โ retained for the duration of your account. The full encrypted number is purged within 30 days of account deletion.
- Booking records โ retained for 7 years to comply with Indian financial and tax regulations (GST Act).
- Previous DL images โ when you upload a new DL image, the old file is deleted from cloud storage. A reference (key + timestamp) is retained in our database for audit purposes only; the actual image is not accessible.
5. Data Security
Encryption at Rest
All sensitive fields (full Aadhaar number) are encrypted using AES-256 before being stored in our database.
Encrypted in Transit
All communication between your device and our servers uses TLS 1.2+ (HTTPS). Credentials are never sent over plain HTTP.
Secure Cloud Storage
DL images and Aadhaar photos are stored on Amazon S3 with server-side encryption. Direct public access is restricted.
Access Controls
Only authorised Happy Go staff involved in processing your booking have access to your verification documents.
6. Your Rights
You have the following rights regarding your personal data:
- โAccess: Request a copy of the personal data we hold about you.
- โCorrection: Ask us to correct inaccurate or incomplete information.
- โDeletion: Request deletion of your personal data (subject to legal retention requirements).
- โRestriction: Ask us to restrict processing of your data in certain circumstances.
- โWithdrawal of Consent: Withdraw consent at any time where processing is based on consent.
7. Account & Data Deletion
You have the right to request complete deletion of your account and all associated personal data. To submit a deletion request, please email us from the address registered with your account:
Send your deletion request to
happygobikerentals@gmail.comSubject: Data Deletion Request ย ยทย We will respond within 7 business days.
Note: Booking records may be retained for up to 7 years to comply with Indian GST and financial regulations, even after account deletion. Driving license images and Aadhaar details will be deleted in accordance with Section 4 above.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. A valid driving license is required to rent a vehicle, which in India requires the rider to be at least 16โ18 years of age depending on the vehicle class. If you believe a minor has provided us with personal data, please contact us immediately.
9. Important Disclaimer
While we take every precaution to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data, but we employ industry best practices to minimise risk.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are significant, notify you via email or an in-app notification. Continued use of our services after any changes constitutes your acceptance of the updated policy.
