๐Ÿ“ Chikkamagaluru

Privacy Policy

Your privacy and data protection are our top priorities. This policy explains exactly what data we collect, why we collect it, and how we protect it.

Last updated: April 2025 ย ยทย  Effective: April 2025

Happy Go Bike Rentals ("Happy Go", "we", "our") operates the website happygorentals.com and the Happy Go mobile app. This Privacy Policy describes how we handle personal data collected when you create an account, make a booking, or use our identity-verification features. By using our services you agree to the practices described below.

1. Information We Collect & Why

We only collect data that is strictly necessary to provide our services safely. The table below explains each data type, what exactly is stored, and the reason it is required.

๐Ÿ‘ค

Full Name

What we collect

Your full name as provided during registration or profile setup.

Why we need it

To personalise your booking confirmations, receipts, and customer-support interactions. Required by our rental operations to identify the person who rented the vehicle.

Legal basis

Contract performance โ€” needed to fulfil the rental agreement.

๐Ÿ“ง

Email Address

What we collect

Your email address provided at sign-up.

Why we need it

To send booking confirmations, payment receipts, OTP verification, and important service notifications (e.g. booking status changes). You may opt out of promotional emails at any time.

Legal basis

Contract performance & legitimate interest (service communications).

๐Ÿ“ฑ

Mobile Phone Number

What we collect

Your 10-digit mobile number.

Why we need it

Used for OTP-based login authentication to verify your identity securely. Also used for booking-related WhatsApp/SMS notifications and emergency contact during your rental period.

Legal basis

Contract performance & security โ€” OTP is required for account login.

๐Ÿชช

Aadhaar Number (Last 4 Digits Only)

What we collect

We store ONLY the last 4 digits of your Aadhaar number (masked as XXXX-XXXX-XXXX), along with the name, date of birth, gender, and address as returned by the DigiLocker verification API. The full 12-digit Aadhaar number is NEVER stored in plain text โ€” it is encrypted at rest and inaccessible to any staff member.

Why we need it

Indian motor-vehicle laws and our rental agreement require us to verify the identity of every customer who rents a two-wheeler. Aadhaar-based DigiLocker verification (via Cashfree) is the government-approved digital identity verification method. Storing the masked number and basic details allows us to confirm the verified identity during bike pickup without requiring you to carry physical documents every time.

Legal basis

Legal obligation (Motor Vehicles Act, 1988) & contract performance.

๐Ÿชช

Driving License Image

What we collect

A photograph of your driving license, uploaded through the app or website. The image is stored securely on Amazon S3 (encrypted storage).

Why we need it

A valid driving license is a legal requirement to ride any motor vehicle on Indian roads. We store your DL image so our staff can verify its validity at bike pickup without requiring you to present the physical card each time you rent. The image is visible only to authorised Happy Go staff handling your booking.

Legal basis

Legal obligation (Motor Vehicles Act, 1988) & contract performance.

๐Ÿ’ณ

Payment Information

What we collect

Transaction reference IDs and payment status. We do NOT store card numbers, UPI PINs, or any sensitive payment credentials โ€” all payments are processed by Razorpay, a PCI-DSS compliant gateway.

Why we need it

To track payment status, issue refunds, and resolve payment disputes.

Legal basis

Contract performance & legal obligation (financial record-keeping).

๐Ÿ“

Location (Pickup City)

What we collect

The city/location you choose for bike pickup (e.g. Chikkamagaluru). We do NOT collect real-time GPS location.

Why we need it

To show you available bikes in your selected location and to fulfil the booking.

Legal basis

Contract performance.

2. How We Use Your Information

โœ“

Create and manage your user account

โœ“

Process bike and hostel bookings and send confirmations

โœ“

Verify your identity (Aadhaar) and driving eligibility (DL) as required by law

โœ“

Send OTPs, booking updates, payment receipts, and service alerts

โœ“

Enable customer support to assist with your bookings

โœ“

Comply with applicable laws and government regulations

โœ“

Prevent fraud and ensure the safety of our rental fleet

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data with the following third parties only to the extent necessary to deliver our services:

ServiceProviderPurpose
Identity verificationCashfree (DigiLocker API)Aadhaar-based KYC
Payment processingRazorpaySecure payment gateway
File storageAmazon S3 (AWS)DL image & Aadhaar photo storage
SMS / OTP deliveryMessageCentral / Fast2SMSOTP for login
Email deliveryGmail SMTPBooking confirmations & alerts

4. Data Retention

We retain your data only for as long as necessary:

  • Account data (name, email, phone) โ€” retained while your account is active, or up to 3 years after last activity for legal/accounting compliance.
  • Driving license image โ€” retained for the duration of your account and for 1 year after account deletion for dispute resolution, as required under applicable transport regulations.
  • Aadhaar masked number & details โ€” retained for the duration of your account. The full encrypted number is purged within 30 days of account deletion.
  • Booking records โ€” retained for 7 years to comply with Indian financial and tax regulations (GST Act).
  • Previous DL images โ€” when you upload a new DL image, the old file is deleted from cloud storage. A reference (key + timestamp) is retained in our database for audit purposes only; the actual image is not accessible.

5. Data Security

๐Ÿ”’

Encryption at Rest

All sensitive fields (full Aadhaar number) are encrypted using AES-256 before being stored in our database.

๐ŸŒ

Encrypted in Transit

All communication between your device and our servers uses TLS 1.2+ (HTTPS). Credentials are never sent over plain HTTP.

๐Ÿ—„๏ธ

Secure Cloud Storage

DL images and Aadhaar photos are stored on Amazon S3 with server-side encryption. Direct public access is restricted.

๐Ÿ‘ฅ

Access Controls

Only authorised Happy Go staff involved in processing your booking have access to your verification documents.

6. Your Rights

You have the following rights regarding your personal data:

  • โ†’Access: Request a copy of the personal data we hold about you.
  • โ†’Correction: Ask us to correct inaccurate or incomplete information.
  • โ†’Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • โ†’Restriction: Ask us to restrict processing of your data in certain circumstances.
  • โ†’Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

7. Account & Data Deletion

You have the right to request complete deletion of your account and all associated personal data. To submit a deletion request, please email us from the address registered with your account:

Send your deletion request to

happygobikerentals@gmail.com

Subject: Data Deletion Request ย ยทย  We will respond within 7 business days.

Note: Booking records may be retained for up to 7 years to comply with Indian GST and financial regulations, even after account deletion. Driving license images and Aadhaar details will be deleted in accordance with Section 4 above.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. A valid driving license is required to rent a vehicle, which in India requires the rider to be at least 16โ€“18 years of age depending on the vehicle class. If you believe a minor has provided us with personal data, please contact us immediately.

9. Important Disclaimer

While we take every precaution to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data, but we employ industry best practices to minimise risk.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are significant, notify you via email or an in-app notification. Continued use of our services after any changes constitutes your acceptance of the updated policy.

Questions or Requests?

For privacy questions, data access requests, or data deletion requests:

happygobikerentals@gmail.com