PRIVACY POLICY

CarAndCab — Self Drive Car Rental

CarAndCab ("CarAndCab", "we", "us", or "our") respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how CarAndCab collects, uses, stores, processes and shares personal information when you visit our website, make a booking, use our services, communicate with us, or otherwise interact with CarAndCab.

This policy is intended to provide clear information about our privacy practices and should be read together with our Terms & Conditions, Rental Agreement, Fee/Cancellation/Refund Policy and other applicable policies.

1. INFORMATION WE COLLECT

Depending on how you use CarAndCab, we may collect the following categories of information.

A. Personal and Contact Information

This may include:

• Full name

• Mobile number

• Email address

• Residential/address information

• City/state

• Date of birth or age-related eligibility information where required

• Emergency contact information, where provided

• Communication preferences

B. Identity & Driving Information

For self-drive vehicle rental, we may need to verify eligibility and identity.

This may include:

• Driving Licence details

• Driving Licence number and validity

• Government-issued identity information

• Address verification information

• KYC/verification information

• Photographs or copies/images of documents where required for verification

• Information relating to additional/authorised drivers

Customers should provide only documents and information requested through authorised CarAndCab channels.

C. Booking & Rental Information

We may collect information relating to your use of our services, including:

• Booking details

• Vehicle selected

• Pickup and return location

• Rental date and time

• Rental duration

• Trip type

• Kilometre plan

• Extra kilometres

• Rental charges

• Security deposit

• Cancellation/modification history

• Payment/refund records

• Rental history

• Vehicle handover and return records

D. Vehicle, Trip & Telematics Information

Where supported by the vehicle or rental system, CarAndCab may collect or receive information relating to the vehicle during a rental, including:

• Vehicle location/geolocation

• Trip routes or journey information

• Odometer readings

• Vehicle usage information

• Speed-related information

• Vehicle status or diagnostic information

• GPS/telematics information

• Start/stop or trip timing information

Such information may be used for vehicle security, safety, fleet management, customer support, billing, dispute resolution, recovery and compliance with the rental agreement.

E. Payment Information

We may collect payment-related information necessary to process bookings and refunds.

Payments may be processed through third-party payment gateways or financial service providers.

CarAndCab does not ordinarily store complete credit/debit card numbers, CVV numbers or banking credentials on its own systems where payment processing is handled by an authorised third-party payment provider.

Payment providers may process payment information according to their own privacy policies and security practices.

F. Communication Information

When you contact CarAndCab, we may retain information contained in:

• Phone calls

• Emails

• WhatsApp or other authorised communication channels

• Support requests

• Booking-related messages

• Complaints or disputes

• Feedback and reviews

Where legally permitted and operationally appropriate, communications may be recorded or retained for quality, training, security, dispute-resolution or compliance purposes.

G. Website & Technical Information

When you use our website, we may automatically receive certain technical information, such as:

• IP address

• Browser type

• Device type

• Operating system

• Approximate location derived from technical information

• Pages visited

• Referring/exit pages

• Date and time of access

• Website interaction information

• Error and diagnostic information

We may use cookies and similar technologies for website functionality, security, analytics and, where applicable, marketing.

2. HOW WE USE YOUR INFORMATION

CarAndCab may process personal information for the following purposes:

A. Providing Rental Services

To:

• create and manage your account;

• process bookings;

• verify customer eligibility;

• verify identity and driving credentials;

• arrange vehicle delivery and pickup;

• manage vehicle rentals;

• process extensions and modifications;

• manage returns;

• provide customer support.

B. Payments & Financial Administration

To:

• process rental payments;

• process security deposits;

• calculate additional charges;

• process refunds;

• reconcile outstanding amounts;

• manage invoices and receipts;

• recover legitimate outstanding dues.

C. Safety, Security & Fraud Prevention

To:

• protect vehicles and customers;

• prevent fraud;

• detect misuse;

• investigate suspicious activity;

• monitor vehicle security;

• investigate accidents or incidents;

• recover vehicles where necessary;

• protect CarAndCab's property, systems and customers.

D. Vehicle Management

To:

• monitor vehicle condition;

• record odometer information;

• calculate applicable rental/extra-KM charges;

• manage maintenance;

• investigate breakdowns;

• manage roadside assistance;

• analyse vehicle usage;

• maintain fleet records.

E. Legal & Regulatory Compliance

We may process information to:

• comply with applicable laws;

• respond to lawful government requests;

• respond to police or law-enforcement requests;

• process traffic challans;

• deal with toll/FASTag records;

• comply with court orders;

• enforce contractual rights;

• establish, exercise or defend legal claims.

F. Communication

We may contact you regarding:

• booking confirmation;

• OTP verification;

• pickup and return;

• payment status;

• booking modifications;

• cancellations;

• refunds;

• vehicle-related alerts;

• important service notifications;

• customer support.

G. Service Improvement

We may analyse information to:

• improve website functionality;

• improve booking experience;

• improve vehicle availability;

• understand service usage;

• identify technical problems;

• improve customer support;

• develop and improve CarAndCab services.

H. Marketing & Promotions

Where permitted and where applicable consent or another lawful basis is required, we may send information about:

• offers;

• discounts;

• new services;

• promotions;

• CarAndCab updates.

You may opt out of promotional communications at any time through the available unsubscribe mechanism or by contacting us.

Withdrawal from marketing communications does not necessarily stop essential service communications relating to an existing booking or account.

3. LEGAL BASIS / CONSENT

Where applicable under Indian data-protection law, CarAndCab may process personal information based on:

• your consent;

• the provision or use of requested goods or services;

• compliance with legal obligations;

• legitimate operational, safety or security requirements where permitted by law;

• other lawful grounds available under applicable law.

Where processing is based on consent, you may withdraw consent subject to applicable law and the consequences of such withdrawal.

The Digital Personal Data Protection Act, 2023 requires consent to be free, specific, informed and unambiguous, and provides for withdrawal of consent with ease comparable to giving consent.

Certain information may nevertheless need to be retained or processed where required or permitted by law, for contractual purposes, fraud prevention, security, dispute resolution or establishment/exercise/defence of legal claims.

4. COOKIES & SIMILAR TECHNOLOGIES

CarAndCab may use cookies and similar technologies to operate and improve its website.

These technologies may be used for:

• essential website functionality;

• login/session management;

• security;

• remembering preferences;

• analytics;

• performance monitoring;

• understanding website usage;

• marketing or advertising, where applicable.

You may be able to control cookies through your browser settings.

Disabling certain cookies may affect some website functionality.

Where third-party analytics, advertising or similar technologies are used, those providers may process information according to their respective policies and the controls made available by them.

5. LOCATION & VEHICLE TRACKING

Because CarAndCab provides self-drive vehicle rental services, certain vehicles may use GPS or telematics technology.

Where applicable, vehicle location and usage information may be processed for:

• vehicle security;

• theft prevention/recovery;

• customer and road safety;

• fleet management;

• trip verification;

• rental-duration verification;

• odometer/KM verification;

• investigation of accidents or misuse;

• recovery of vehicles;

• customer support;

• legal or regulatory requirements.

Vehicle tracking should not be understood as continuous monitoring of a customer's personal activities beyond information reasonably associated with the rented vehicle and its operation.

6. HOW WE SHARE PERSONAL INFORMATION

CarAndCab does not sell your personal information as a business practice.

We may share personal information where reasonably necessary with the following categories of recipients:

A. Service Providers

Trusted providers assisting with:

• payment processing;

• SMS/OTP delivery;

• email services;

• cloud hosting;

• website technology;

• customer support;

• vehicle tracking/telematics;

• roadside assistance;

• insurance-related services;

• accounting;

• fraud prevention;

• technical maintenance.

These providers may process information only to provide services to CarAndCab or as otherwise permitted by law.

B. Government & Law-Enforcement Authorities

We may disclose information where required or permitted by law, including in response to:

• police requests;

• traffic authorities;

• court orders;

• government authorities;

• statutory bodies;

• lawful investigations.

This may include information relating to vehicle usage, customer identity, rental period, location, challans or incidents where legally required.

C. Insurance & Incident-Related Parties

Where necessary for an accident, claim or vehicle incident, relevant information may be shared with:

• insurers;

• surveyors;

• authorised repair/service providers;

• roadside assistance providers;

• legal representatives;

• other parties reasonably involved in processing the incident.

D. Corporate Transactions

If CarAndCab undergoes a merger, acquisition, restructuring, financing, sale of assets or similar transaction, personal information may be transferred as part of the relevant business transaction, subject to applicable law.

7. DATA SECURITY

CarAndCab takes reasonable technical, organisational and administrative measures designed to protect personal information from:

• unauthorised access;

• unauthorised disclosure;

• alteration;

• misuse;

• loss;

• destruction.

Security measures may include access controls, authentication, restricted employee access, secure service providers, monitoring and other safeguards appropriate to the nature of the information.

However, no internet transmission, electronic storage system or digital service can be guaranteed to be completely secure.

Customers are responsible for maintaining the confidentiality of passwords, OTPs and account credentials and should never share OTPs or account credentials with unauthorised persons.

If you believe your CarAndCab account or personal information has been compromised, please contact us promptly.

8. DATA RETENTION

CarAndCab retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, or for the period required or permitted by applicable law.

Retention periods may vary depending on the type of information and purpose.

For example, information may need to be retained for:

• booking and rental records;

• accounting and taxation;

• security-deposit reconciliation;

• insurance claims;

• accident records;

• traffic challans and toll disputes;

• fraud prevention;

• customer complaints;

• legal proceedings;

• regulatory compliance;

• enforcement of contractual rights.

When information is no longer required, CarAndCab will take reasonable steps to delete, anonymise or otherwise securely dispose of it, subject to applicable legal and operational requirements.

9. YOUR RIGHTS & CHOICES

Subject to applicable law, you may have rights relating to your personal information, including the ability to:

• request access to personal information held by us;

• request correction of inaccurate information;

• request deletion/erasure where legally applicable;

• withdraw consent where consent is the basis for processing;

• manage certain communication preferences;

• raise a privacy-related complaint or grievance.

Requests may be subject to reasonable verification to protect against unauthorised access to personal information.

Certain requests may be restricted where CarAndCab is legally required or permitted to retain or process the relevant information.

The DPDP framework also provides mechanisms for individuals to exercise applicable rights and withdraw consent, and the 2025 Rules require the privacy notice to explain how these mechanisms can be accessed.

10. DATA CORRECTION

If any personal information provided by you is inaccurate, incomplete or outdated, you may request correction through the appropriate CarAndCab support channel.

Customers should promptly update information that may affect:

• booking;

• identity verification;

• Driving Licence validity;

• contact information;

• payment/refund processing.

CarAndCab may require reasonable verification before changing sensitive account or identity information.

11. THIRD-PARTY WEBSITES & SERVICES

Our website or communications may contain links to third-party websites, payment gateways, maps, social-media platforms or other services.

CarAndCab is not responsible for the privacy practices, content, security or policies of third-party services that it does not control.

Customers should review the privacy policies of those third parties before providing information to them.

12. CHILDREN'S PRIVACY

CarAndCab's self-drive rental services are intended for individuals who satisfy the applicable legal and company eligibility requirements for driving and renting a vehicle.

We do not knowingly request or intentionally collect personal information from children for the purpose of providing self-drive rental services.

If you believe that a child has provided personal information to CarAndCab without appropriate authorisation, please contact us so that we can review and take appropriate action.

13. FRAUD, SECURITY & MISUSE

CarAndCab may process and retain information where reasonably necessary to investigate:

• fraudulent bookings;

• payment fraud;

• identity/document misuse;

• account misuse;

• vehicle theft;

• vehicle tampering;

• unauthorised vehicle use;

• false claims;

• abuse of promotional offers;

• attempts to bypass security or verification systems.

Such processing may continue where necessary for security, legal, dispute-resolution or fraud-prevention purposes.

14. COMMUNICATIONS

Even if you opt out of promotional communication, CarAndCab may still contact you where necessary regarding:

• an active booking;

• payment;

• cancellation;

• refund;

• vehicle delivery;

• vehicle return;

• security deposit;

• safety;

• legal or policy matters;

• account/security issues.

These are considered service-related communications and are necessary for operating the rental service.

15. DATA BREACHES & SECURITY INCIDENTS

If CarAndCab becomes aware of a personal-data breach requiring action under applicable law, we will take reasonable steps to investigate, contain and address the incident and make notifications where required by applicable law.

16. INTERNATIONAL / THIRD-PARTY PROCESSING

Some technology or service providers used by CarAndCab may process information through infrastructure located outside India.

Where applicable, such processing will be subject to relevant contractual, security and legal requirements.

CarAndCab will take reasonable steps to ensure that service providers handling personal information maintain appropriate safeguards.

17. GRIEVANCE / PRIVACY CONTACT

If you have a privacy question, wish to exercise an applicable privacy right, or believe your personal information has been handled improperly, you may contact CarAndCab using the details below.

CarAndCab
Self Drive Car Rental — Noida, Ghaziabad & Delhi NCR

Privacy / Support Email: carncabindia@gmail.com
Phone: +91 8851815197
Address: Ambuj City, Akbarpur Baharampur, Ghaziabad, Uttar Pradesh – 201009

Please include sufficient information to help us identify your request, such as your name, registered mobile number/email address and the nature of your request.

We may request reasonable verification before processing requests relating to personal information.

18. POLICY UPDATES

CarAndCab may update this Privacy Policy from time to time to reflect:

• changes in our services;

• changes in technology;

• changes in legal or regulatory requirements;

• changes in data-processing practices;

• improvements to our privacy practices.

The updated version will be published on the CarAndCab website with the revised "Last Updated" date.

Where required by applicable law, CarAndCab may provide additional notice or seek consent for material changes.

Customers are encouraged to periodically review this Privacy Policy.

19. GOVERNING LAW

This Privacy Policy shall be interpreted in accordance with applicable laws of India.

Nothing in this Privacy Policy is intended to limit any mandatory rights or protections available to an individual under applicable law.

20. ACKNOWLEDGEMENT

By using the CarAndCab website or services, you acknowledge that you have had an opportunity to review this Privacy Policy.

Where processing requires consent under applicable law, CarAndCab will seek such consent through an appropriate mechanism.

Use of CarAndCab services may also involve processing that is necessary to provide the requested service, fulfil contractual or legal requirements, maintain security, prevent fraud or otherwise comply with applicable law.

CarAndCab

Effective Date: 01st October 2025
Last Updated: 09th September 2026