Privacy policy

RBA Bike Rentals (Bengaluru, Karnataka, India) is the Data Fiduciary for personal data processed through https://www.rbabikerentals.com and our rental operations. For privacy questions or to exercise your rights, contact us at support@rbabikerentals.com.

• Identity and contact: name, email address, mobile number, and pickup or delivery notes you provide.
• Booking and account: rental dates, vehicle choice, booking status, profile details, and support communications.
• Payment-related data: transaction references, amounts, and payment status from our payment partner. We do not store full card or UPI credentials on our servers.
• Technical data: IP address, browser type, device information, and cookies required for sign-in, security, and site functionality (see our Cookie notice).
• Verification data (when applicable): identity or licence-related information if you choose to submit it for booking review. We collect only what is necessary for the stated purpose.

We process personal data for specific, lawful purposes, including:

• Creating and managing your account and bookings.
• Reviewing availability, confirming rentals, and providing customer support.
• Processing payments, refunds, deposits, and extension charges.
• Sending service messages such as booking updates, OTPs, and password resets.
• Preventing fraud, securing our platform, and meeting legal obligations.
• Improving our website and rental operations with aggregated, non-identifying analytics where used.

Where the DPDP Act requires consent, we seek clear consent before processing your data for that purpose. Processing necessary to perform your rental contract or comply with law may not require separate consent.

By creating an account, submitting a booking, or signing in, you consent to processing as described in this policy. You may withdraw consent for optional processing (such as non-essential marketing) at any time by emailing support@rbabikerentals.com. Withdrawal does not affect processing already completed lawfully, or processing required to fulfil an active booking or legal duty.

Under the DPDP Act, you may have the right to:

• Obtain a summary of personal data we process and the processing activities involved.
• Access and obtain a copy of your personal data, subject to applicable exceptions.
• Correct inaccurate or incomplete personal data.
• Request erasure when retention is no longer necessary and law permits deletion.
• Withdraw consent and raise a grievance with us.
• Nominate another individual to exercise your rights in the event of death or incapacity, as permitted by law.

Submit requests to support@rbabikerentals.com. We will respond within timelines prescribed under applicable law. If you are unsatisfied with our response, you may escalate to the Data Protection Board of India when that mechanism is available under the DPDP framework.

Our services are not directed at individuals under 18. We do not knowingly collect personal data from children without verifiable parental or guardian consent. Contact us if you believe a child has provided data without appropriate consent.

We share personal data only as needed with trusted processors who act on our instructions, such as:

• Cloud hosting and database providers.
• Payment gateway partners (e.g. Razorpay) for secure transactions.
• Email and notification delivery providers for account and booking messages.

We require appropriate contractual safeguards. We do not sell your personal data. We may disclose data when required by law, court order, or to protect rights, safety, and property.

Some processors may store or process data outside India. Where personal data is transferred internationally, we take reasonable steps to ensure protections consistent with the DPDP Act and applicable contractual safeguards.

We retain personal data only as long as needed for the purposes above, including active bookings, tax and accounting records, dispute resolution, and legal compliance. When data is no longer required, we delete or anonymise it in line with our retention practices.

We use administrative, technical, and organisational measures such as access controls, encrypted connections (HTTPS), and restricted staff access. No method of transmission or storage is completely secure; please use a strong password and keep your login details confidential.

For complaints about how we handle personal data, email support@rbabikerentals.com with the subject line "Privacy grievance". Include your name, contact details, and a description of your concern. We aim to acknowledge grievances promptly and resolve them within reasonable timelines under the DPDP Act.

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of our services after changes constitutes notice of the updated policy where permitted by law.