Your data stays in your lane.

1. Scope and data fiduciary

This Notice applies to blinqcar.com and services that link to it. BlinqCar Mobility Technologies Pvt. Ltd. determines why and how personal data is processed for the marketplace, subject to the final registered address and contact details being completed before public transactions.

A third-party seller, host, inspector, restoration provider, payment gateway, insurer, lender or authority may separately determine processing for its own service and must provide its own notice where required.

2. Data we collect

Depending on your journey, we may collect the following categories.

• Account and contact data: name, email, phone, WhatsApp preference, address and verification status.
• Vehicle and listing data: registration details, ownership, finance, location, kilometres, condition, service history, price, media and uploaded documents.
• Transaction data: enquiries, offers, rental requests, package orders, gateway references, refunds and support cases.
• Technical and security data: IP address, device and browser signals, session identifiers, timestamps, logs, rate-limit and abuse indicators.
• Preference and DriveSense data: city, budget, body, fuel, daily distance, passenger needs, wishlist and interaction choices.
• Operational data: moderation, inspection, restoration, audit and administrator records.

3. Where data comes from

We receive data directly from you, from another party to a listing or transaction, from service providers that confirm a request, and from lawful public or authority records used for vehicle or fraud checks. Do not provide another person’s data unless you have authority and have given required notice.

4. Why we use data

We use data to create and secure accounts; send OTPs and service communications; save preferences; moderate and publish listings; enable enquiries, rentals and packages; process and reconcile payments; support inspection or restoration requests; prevent fraud; keep audit records; respond to rights and grievances; comply with legal duties; and improve reliability.

Where processing requires consent, the request should be clear, specific and capable of withdrawal. Other processing may be necessary to provide a requested service, comply with law, protect systems or establish and defend legal claims, as applicable.

5. DriveSense and assisted processing

DriveSense uses editable preferences and approved listing fields to organise relevant inventory. It displays reasons rather than a fabricated confidence percentage. It is not intended to make a legal, credit, insurance or safety decision about you.

We will not silently expand DriveSense into high-impact automated decision-making. Material changes to data sources, purposes or user consequences require assessment, notice and additional controls.

6. When data is shared

We share only what is reasonably needed with the other party to a requested transaction and with contracted hosting, database, email, payment, media-storage, security, inspection, restoration, support and professional service providers.

We may disclose information where required by lawful authority, to address fraud or immediate safety, to enforce rights, or as part of a properly structured corporate transaction. We do not sell personal data. Public listing information is visible by design; sensitive documents should never be published as gallery media.

7. Data location and transfers

Service providers may process data in India or another permitted location. Before cross-border processing is enabled, BlinqCar must assess the provider, contractual safeguards, access controls and any restriction notified under applicable Indian law. Operational and security logs required to be kept in India will be configured accordingly.

8. Retention

We keep data only as long as reasonably necessary for the stated purpose, active account or transaction, mandatory record period, security, fraud prevention, tax, audit, grievance or legal claim. Retention differs by category.

Expired OTPs are short-lived; sessions expire under configured policy; public listings are removed from search after the relevant status changes; transaction and audit records may remain longer. A production retention schedule must be approved before launch and applied through deletion or irreversible anonymisation jobs.

9. Security and incident response

Controls include encrypted transport, restricted administrator roles, server-side session validation, expiring OTPs, rate controls, database permissions, audit trails and protected secret storage. No system is perfectly secure; never send an OTP or password to anyone.

Suspected personal-data or cyber incidents are investigated, contained, preserved and notified to affected people and authorities where legally required.

10. Your choices and rights

Subject to applicable law and verification, you may request a summary of processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal and nomination. You may also sign out, clear local wishlist data and change communication preferences.

Withdrawing consent does not make prior lawful processing invalid and may prevent a requested feature. Some records cannot be deleted immediately where retention is lawfully required. We will not retaliate for a good-faith privacy request.

11. Children

BlinqCar accounts and transactions are intended for adults aged 18 or over. We do not knowingly offer marketplace accounts to children. If you believe a child’s data has been provided, contact us so it can be reviewed and removed where appropriate.

12. Cookies and browser storage

Essential storage maintains the secure session and workflow. Browser storage may remember wishlists and preferences. Optional analytics or advertising tools must be disclosed and activated only with the required choice. See the Cookie Policy for details.

13. Email and service communications

OTP, security, transaction, moderation and requested support messages are service communications. Marketing, if introduced, will use a lawful choice and include a practical opt-out. Email delivery records may be retained to diagnose failures and prevent abuse.

14. Privacy requests and grievance

Email info@blinqcar.com with “Privacy request” or “Grievance” in the subject. Send it from the account email where possible and identify the data or record involved. We may verify identity before disclosing or changing account data.

The final named Grievance Officer, contact number and registered office must be entered in the production environment and displayed here before paid launch. You may also use remedies available under applicable data-protection and consumer law.

15. Changes to this Notice

We may update this Notice when the product, provider or law changes. Material changes will be highlighted and, where required, presented for notice or consent before the new processing begins.