Privacy Policy
Ezy Fleet (“Ezy Fleet”, “we”, “us”, or “our”) owns and operates a fleet of vehicles that is deployed, under the Ezy Fleet brand, to business clients (such as e-commerce and logistics companies) and individual clients for use in their own operations, together with our website ezyfleet.com and related applications (collectively, the “Services”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you. It is issued in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), together with applicable rules made thereunder.
This Policy applies to: (a) business clients who lease vehicles from us for deployment in their operations (“Business Clients”); (b) individual clients who lease a vehicle from us (“Individual Clients”); and (c) the individual drivers authorised by a Business or Individual Client to operate a deployed vehicle (“Authorised Drivers”). By engaging our Services, submitting an application, or driving a vehicle deployed by Ezy Fleet, you agree to the collection, use, and disclosure of your information as described in this Policy. If you do not agree with this Policy, please do not use our Services.
1. Information We Collect
1.1 Business Client Information
- Corporate details: legal entity name, certificate of incorporation, GST registration, PAN, registered address, and authorised signatory details.
- Point-of-contact details: name, designation, email, and phone number of personnel coordinating the fleet deployment.
- Commercial information: deployment site(s), vehicle requirements, lease terms, billing, and payment history.
1.2 Individual Client and Authorised Driver Information
- Identity and contact details: full name, date of birth, gender, email address, phone number, and residential address.
- Government-issued identification: driving licence details, Aadhaar/passport/voter ID or other proof of identity, photographs, and employment/engagement proof, collected for KYC and verification purposes.
- Payment information: card details, UPI ID, bank account details, and billing history, processed through our secure payment gateway partners.
1.3 Vehicle and Telematics Data
- Vehicles deployed under a lease may be fitted with GPS or telematics devices that collect location, route, distance travelled, speed, fuel level, odometer readings, and vehicle-health diagnostics, for fleet-management, billing, safety, and recovery purposes.
- Where an Authorised Driver operates a deployed vehicle, driving-behaviour data (such as speed patterns, harsh braking, and idle time) may be collected for safety and maintenance purposes.
1.4 Information Collected Automatically
- Device and usage data: IP address, browser type, device identifiers, operating system, pages visited, and interaction timestamps when using our website or application.
- Cookies and similar technologies: as described in Section 7 below.
1.5 Information from Third Parties
- Verification partners who assist with identity, driving-licence, and corporate KYC validation.
- Payment processors and financial institutions that confirm transaction status.
- Insurance partners in connection with vehicle insurance or claims.
2. How We Use Your Information
We process personal data for the following purposes, consistent with the DPDP Act’s requirement that data be used only for the purpose for which consent was given or as otherwise permitted by law:
- To onboard Business and Individual Clients, complete KYC and credit checks, and verify Authorised Drivers before vehicle deployment.
- To create and manage client accounts, prepare Vehicle Deployment Orders, and administer the lease relationship.
- To process lease rentals, security deposits, invoices, refunds, and other payments.
- To monitor deployed vehicles via telematics/GPS for fleet management, safety, billing accuracy, maintenance scheduling, and vehicle recovery.
- To communicate deployment confirmations, maintenance schedules, invoices, and service updates.
- To respond to accidents, breakdowns, theft, or insurance claims involving a deployed vehicle.
- To detect, investigate, and prevent fraud, unauthorised use, or violation of our Terms and Conditions.
- To comply with legal obligations, including responding to law-enforcement or regulatory requests, traffic-violation reporting, and tax record-keeping.
- To improve our Services and, where you have opted in, to send marketing communications; you may withdraw this consent at any time.
3. Legal Basis and Consent
We collect and process personal data on the basis of your consent, for the performance of the lease/deployment agreement with you or your employer/principal, or as required to comply with our legal obligations. Where consent is the basis for processing, you may withdraw it at any time by contacting us at the details in Section 10; withdrawal will not affect processing carried out before withdrawal and may affect our ability to continue providing Services, including an active vehicle deployment.
4. Sharing and Disclosure of Information
We do not sell your personal data. We may share information with:
- The Business Client to whom an Authorised Driver is engaged, to the extent necessary for fleet coordination, safety, and performance of the lease (for example, sharing telematics data relevant to a driver’s assigned vehicle).
- Payment gateways and financial institutions to process transactions.
- Insurance providers in connection with vehicle insurance, claims, or accident reporting.
- Verification and background-check partners for KYC purposes.
- Vendors and service providers who support our operations, such as cloud hosting, telematics platforms, SMS/email delivery, and customer support tools, under contractual confidentiality obligations.
- Law enforcement, courts, or government authorities where required by applicable law, including in connection with traffic offences, accidents, or lost/stolen vehicles.
- A successor entity in the event of a merger, acquisition, or sale of business assets, subject to equivalent confidentiality protections.
5. Data Storage, Security, and Retention
We implement reasonable security practices and procedures, including encryption in transit, access controls, and secure storage, to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in line with the IT Act and applicable rules. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying legal, accounting, dispute-resolution, or reporting requirements (for example, KYC records and telematics logs may be retained for the period mandated under applicable law or the lease agreement). Once retention is no longer necessary, we securely delete or anonymise the data.
6. Your Rights
Subject to applicable law, including the DPDP Act, you have the right to:
- Access a summary of the personal data we hold about you and the processing activities undertaken.
- Request correction or completion of inaccurate or incomplete personal data.
- Request erasure of personal data that is no longer necessary for the purpose it was collected, subject to our legal and contractual retention obligations.
- Withdraw consent for processing that is based on consent.
- Nominate another individual to exercise your rights in the event of your death or incapacity.
- Register a grievance regarding the processing of your personal data (see Section 9).
To exercise any of these rights, please contact us using the details in Section 10. We may need to verify your identity before actioning a request.
7. Cookies and Tracking Technologies
Our website and app use cookies, SDKs, and similar technologies to remember your preferences, keep you signed in, understand how our Services are used, and, where you have consented, to show relevant offers. You can control cookies through your browser or device settings; disabling certain cookies may limit some features of our Services.
8. Third-Party Links
Our website or app may contain links to third-party sites (for example, payment gateways or map services). We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any personal data.
9. Children’s Privacy
Our Services are intended for businesses and individuals who are at least 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.
10. Grievance Officer and Contact Details
In accordance with the Information Technology Act, 2000, and the rules made thereunder, the Grievance Officer for Ezy Fleet is:
- Name: [Grievance Officer Name]
- Designation: Grievance Officer, Ezy Fleet
- Email: privacy@ezyfleet.com
- Phone: [Contact Phone Number]
- Address: [Registered Office Address]
For general privacy queries, you may also write to privacy@ezyfleet.com. We aim to acknowledge grievances within 48 hours and resolve them within 30 days, or such shorter period as may be prescribed by applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically. Continued use of our Services after changes take effect constitutes acceptance of the revised Policy.