Privacy Policy

1. Introduction

Welcome to DriveIT. In this document, DriveIT is the Data Fiduciary, and you, the user, are the Data Principal. As the Data Fiduciary, we are responsible for processing your personal data in a lawful, fair, and transparent manner. This Notice is provided to you at or before the time we collect your personal data, as required by the Digital Personal Data Protection Act, 2023 (DPDP Act). It outlines the personal data we collect, the specific purposes for which we process it, and the rights you have concerning your data.

By using our services and providing your consent, you agree to the processing of your personal data as described in this Notice.

2. The Personal Data We Collect and the Purpose of Processing

We collect and process your personal data only for specific, explicit, and lawful purposes. We practice data minimisation, meaning we only collect the personal data that is necessary for the stated purpose.

• To Create and Manage Your Account: Name, email, mobile number, and password — used for authentication and core service access.
• To Process Your Orders/Requests: Shipping/billing addresses and transaction details (payment data processed securely by our gateway partners).
• To Communicate With You: Email or mobile number — for service updates, confirmations, and support.
• For Marketing and Promotional Communications (with consent): Name and email — for newsletters and offers (you can withdraw consent anytime).
• To Improve Our Website and Services: Usage data like IP, browser type, and visited pages (collected anonymously for analytics).

3. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights:

• Right to Access Information: Request a summary of the data we process about you.
• Right to Correction and Erasure: Correct inaccurate data or request deletion when no longer necessary.
• Right to Grievance Redressal: Contact our Grievance Officer for resolution.
• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, please contact us at privacy@driveittech.in.

4. Consent

We will process your personal data only after obtaining your free, specific, informed, unconditional, and unambiguous consent. You may withdraw your consent at any time. Withdrawal will not affect prior lawful processing. Upon withdrawal, we will cease processing unless required by law.

5. Data Sharing and Disclosure (Data Processors)

We may share your personal data with third-party service providers (Data Processors) for purposes such as payments, hosting, or logistics. All processors are bound by contractual obligations to ensure your data is secure and processed only for the intended purpose.

• Payment Gateways (e.g., [Name of Payment Processor])
• Cloud Hosting Providers (e.g., [Name of Hosting Provider])
• Logistics and Delivery Partners (e.g., [Name of Delivery Partner])

6. Data Retention Period

We store personal data only as long as necessary to fulfill its purpose and comply with legal obligations. Once fulfilled, the data will be securely erased.

7. Data Security and Breach Notification

We implement reasonable technical and organizational measures to protect your data from unauthorized access or disclosure. In the event of a breach, we will notify the Data Protection Board of India and affected individuals as required by the DPDP Act.

8. Processing of Children's Personal Data

We do not knowingly collect data from individuals under 18 without parental consent. If you believe we have inadvertently collected such data, contact us immediately for prompt action.

9. Contact Information for Grievance Redressal