About this policy
This policy applies when you use croscar.com, contact us by phone, WhatsApp or email, request a quotation, make or manage a booking, travel with us, or otherwise interact with our chauffeur-driven mobility services.
Personal data we collect
We collect only the personal data reasonably required to respond to enquiries, prepare quotations, confirm bookings, coordinate travel and meet legal or operational obligations.
- Contact and identity information, such as your name, phone number, email address, billing address, GST details and government-issued identification where required for a booking or by law.
- Travel and booking information, such as pickup and drop locations, travel dates and times, itinerary, passenger count, vehicle preference, flight or train details, luggage information and special assistance requirements.
- Communication information, including enquiries, messages, call details, feedback, complaints and other correspondence with CROSCAR.
- Payment and transaction information, including the amount, payment status, transaction reference, refund details and billing information. Full card, bank or UPI credentials may be processed directly by the relevant payment provider rather than stored by CROSCAR.
- Website and device information, such as IP address, browser type, device type, referring page, pages visited, timestamps and technical or security logs.
- Information about another passenger or traveller when you make an enquiry or booking on their behalf.
How we collect personal data
We collect personal data directly from you through website forms, phone calls, WhatsApp, email, quotations, booking confirmations, payments and customer-support interactions.
We may also receive relevant information from a corporate account, travel arranger, passenger, fleet partner, chauffeur, payment provider, technology provider or another person acting on your behalf. If you provide another person's information, you confirm that you are authorised to share it for the booking or enquiry.
How we use personal data
- To respond to enquiries and prepare, revise or follow up on quotations.
- To confirm, administer and fulfil chauffeur-driven travel bookings.
- To coordinate vehicles, chauffeurs, routes, pickup instructions, flight or train timing and customer support.
- To process payments, issue invoices, manage cancellations and provide eligible refunds.
- To verify information, prevent fraud, protect passengers, chauffeurs and vehicles, and resolve complaints or disputes.
- To maintain business, tax, accounting, audit and compliance records.
- To improve our website, services, operational processes and customer experience.
- To send service-related messages and, where permitted, relevant marketing communications. You may opt out of marketing messages at any time.
Lawful processing
We process personal data for lawful purposes connected with your request, consent, booking, payment, safety, compliance obligations and other uses permitted under applicable Indian law. Where processing depends on consent, you may withdraw that consent, subject to legal and contractual consequences and any processing already completed.
How we share personal data
We do not sell personal data. We may share only the information reasonably required for the relevant purpose with the following recipients:
- Chauffeurs, fleet owners, vehicle operators and other operational partners involved in fulfilling the requested service.
- Payment, invoicing, accounting, communications, hosting, security and other technology service providers.
- Corporate customers, travel arrangers or authorised representatives responsible for the booking.
- Professional advisers, auditors, insurers, banks and dispute-resolution providers where necessary.
- Government authorities, regulators, courts or law-enforcement agencies where disclosure is required or permitted by law.
- A successor or purchaser in connection with a lawful merger, restructuring, financing or transfer of the relevant business.
Cookies and website technologies
Our website may use essential cookies, browser storage and similar technologies required for security, navigation and core functionality. We may also use limited analytics tools to understand website performance and usage. You can control cookies through your browser settings, although disabling essential technologies may affect website functionality.
Data retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including enquiry follow-up, booking fulfilment, customer service, accounting, tax, audit, fraud prevention, legal compliance and dispute resolution.
Retention periods may differ by record type. When information is no longer required, we take reasonable steps to delete, anonymise or securely restrict it, unless continued retention is required or permitted by law.
Data security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, misuse, alteration, loss or disclosure. No website, communication channel or storage system can be guaranteed to be completely secure.
CROSCAR will not ask you to disclose your UPI PIN, card PIN, banking password or one-time password. Do not share such credentials with any person claiming to represent CROSCAR.
Your rights and choices
Subject to applicable law, you may request information about your personal data, correction or completion of inaccurate data, erasure of data that is no longer required, withdrawal of consent, grievance redressal, or nomination of another person to exercise eligible rights. Send requests to hello@croscar.com.
We may need to verify your identity and request before acting on it. Some information may be retained where required for legal, tax, accounting, safety, fraud-prevention or dispute-resolution purposes.
Children's data
CROSCAR bookings must be made by an adult. Our website and booking services are not directed to children. Where information about a child passenger is necessary to fulfil a booking, it must be provided by a parent, lawful guardian or authorised adult and will be used only for the relevant travel and safety requirements.
International processing
Some service providers may process or store information outside India. Where this occurs, we require handling consistent with applicable contractual and legal safeguards and any restrictions imposed under Indian law.
Third-party services and links
Our website or communications may link to payment providers, maps, messaging services, social platforms or other third-party services. Their privacy practices are governed by their own policies, and CROSCAR is not responsible for how an independent third party handles your information.
Policy updates
We may update this policy to reflect changes in our services, operational practices or applicable law. The revised version will be published on this page with an updated date. Material changes may also be communicated through an appropriate channel where required.
Privacy and grievance contact
For privacy questions, rights requests or grievances, email hello@croscar.com with the subject “Privacy Request”. Please include enough information for us to identify the relevant enquiry or booking and understand your request.