Mahindra & Mahindra Limited ("we" "us" "our" "M&M") is committed to protecting the
privacy
and security of your Personal Information. Your privacy is important to us. This Privacy
Policy ("Policy") applies to the services offered by us to individuals ("you",
"your" or
"user") who access or use our Mahindra For You ("App"). You may use this App
to discover
more information about us or our products and/or services, except for the services provided
on our websites that may have separate privacy policies that do not incorporate this Policy.
This Policy shall be referred to and read as an integral part of the Terms and Conditions
and Terms of Use of this App. Before using our App, the user(s) is/are advised to carefully
review this Privacy Policy including the Terms and Conditions and Terms of Use of our App.
If the user(s) do / does not agree to be bound by this Privacy Policy or do not agree with
any of the Terms and Conditions and Terms of Use, the user(s) is/are asked to not access or
use the App. By using the App, you are consenting to the processing of your Personal
Information in the manner as set forth in this Privacy Policy.
This Policy explains how we collect, store, disclose, transfer, and use information that
personally identifies you when you use our App. We want you to be confident that we are
looking after your interests and that is why we have set out our information practices in
this Policy. The text and graphic links on the App may have a link to third party social
media sites and information and service providers that may also collect information from
you. In addition, some of the pages on the App may lead to co-branded web pages that are
hosted and served by third parties. In each of the aforesaid cases, we have no control over
the privacy policy of any third-party and advise you to please examine their privacy policy
prior to submitting your Personal Information.
You can visit the App without telling us who you are or providing Personal Information. Such
use does not result in any personally identifiable data being collected or stored. We may
however collect information about you when you visit the App, use our services, or view our
online advertisements. Having said that, unless you submit Personal Information about
yourself by filing in any form on the App or by sending us an e-mail, we are not obliged to
maintain any other Personal Information as a result of your access and usage of this App.
1. COLLECTION AND USE OF PERSONAL INFORMATION
"Personal Information" or "Personally Identifiable Information (PII)" or "Personal Data" is
defined as any information that identifies (whether directly or indirectly) a particular
individual or natural person. When anonymous information is directly or indirectly
associated with Personal Information, the resulting information also is treated as Personal
Information.
Any Personally Identifiable Information provided by you will not be considered as
private/confidential if it is freely available and / or accessible in the public domain like
any comments, messages, blogs, available on social media platforms like Facebook, Twitter,
etc.
PERSONAL INFORMATION WE COLLECT
(a) INFORMATION WE COLLECT FROM
USERS
Usage information may consist inter alia of the following information about your visit to
the App:
- Your navigation path on the App
- Date and the time of your visit to the App
- The length of time you spent on the App or subpage
- The subpage from which you left the App
- The number of pages viewed
- The number of users who visited the App
- The country, region or city from which the App is accessed
- The device information
- You GPS location, if allowed by you
- The selected page on the App (URL)
- Your IP address from your device
- The search queries used
- The transmission protocol used
- Certain cookies (see point c below)
Usage information is generally non-identifying in nature, but to process such usage information
and to make it feasible for our legitimate business interests like promoting system security and
stability, allowing for error and performance analysis, and serving internal statistical needs,
we may associate the usage information with other information collected from you and such
combination may be treated as Personal Information. This also enables us to optimize our online
services.
(b)
INFORMATION USERS PROVIDE TO US
VOLUNTARILY
- We collect Personal Data from you directly (viz. your name, email address, phone number,
mailing address, login id and password, location data, copy of your KYC documents such
as Aadhaar, PAN, passport, Voters ID, driving license), when you provide us with it by
uploading the same via the App. There is no obligation to provide the Personal Data that
we ask you for. However, if you do not provide your Personal Data, you will not be able
to make use of all the functions/services available on the App.
- If you send us personal correspondence, such as emails or letters, or if other users or
third parties send us correspondence about your activities or postings on the App, we
may collect and store such information, including but not limited to name, email
address, phone number and location.
- If you send us a business query, media request or investor contact request via the App,
we may collect and store such information, including but not limited to name, email
address, phone number and location data.
- We process Personal Information only that is required by us to fulfill your query/or to
provide a service requested by you. In the event we wish to process any other
information that you have submitted to us voluntarily, we will reach out to you to
notify the additional purposes of processing and seek your consent wherever applicable.
(c)
INFORMATION AUTOMATICALLY COLLECTED/
TRACKED WHILE NAVIGATION
Cookies
To improve your experience on our App, we collect, use and store cookies. A cookie is a small
text file that is placed on a device and is used to identify the user or device and to collect
information. Cookies are generally used to provide site visitors with additional functionality
within the App. They may for example be created to keep track of your visit and support your
navigation on the App, help you resume where you left off and/or remember your preferences and
settings when you visit the App again.
Cookies cannot access, read or modify any other data on your device. A cookie cannot retrieve
any other data from your hard drive, pass on computer viruses, or capture your e-mail address.
Currently, applications use cookies to enhance the user's visit; in general, cookies can
personalize home pages, and identify which parts of the App have been visited. It is possible to
set your browser to inform you when a cookie is being placed. This way you can decide whether to
accept the cookie. Some of the cookies we use are automatically deleted once you leave the App.
Persistent cookies, however, remain on your device until you delete them in your browser. We use
persistent cookies to recognize you when you visit the App the next time.
If you want to control the cookies installed on your device, you can modify your browser
settings so that it notifies you when the App wants to install a cookie, or you can block
cookies altogether. You can also delete cookies that have already been installed on your device.
Refer to the 'Help' function within your browser for more information on how to do these things.
By showing how and when our visitors use this App, this information can help us to improve our
App on a continual basis.
Please note, however, that disabling cookies might affect your online experience and/or prevent
you from taking full advantage of the App.
Flash cookies
Certain features of our App may use local stored objects (or flash cookies) to collect and store
information about your preferences and navigation to, from, and on our App. Flash cookies are
not managed by the same browser settings as are used for browser cookies and we advise you to
keep yourself updated on how to manage your privacy and security settings for flash cookies on
your device.
Web Beacons
Pages of our App and our e-mails may contain small electronic files known as web beacons (also
referred to as clear gifs, pixel tags, and single-pixel gifs) that permit M&M, for example, to
count users who have visited those pages or opened an email and for other related App statistics
(for example, recording the popularity of certain online content and verifying system and server
integrity)
(d)
INFERRED INFORMATION THROUGH USAGE AND
LOG DATA
We may track information about you, in an anonymized manner, based upon your behaviour while
using the App for below mentioned purposes of analytics and statistical insights:
- To perform analytics and conduct customer research, to determine your interest, for
identifying content that generate sales and to analyse traffic patterns
- To study traffic patterns to improve performance of the App, to customize user
experience, and to better match users' interests and preferences
- Keep track of preferences you specify while you are using the content or services of the
App
- Capturing user behaviour for measuring quality specifications of the App
2. LINKS TO THIRD-PARTY SOFTWARE OR SERVICES OR THIRD-PARTY SOCIAL
MEDIA
The App may contain links to other Third-Party Software/Services including third-party social
media sites that may collect information from you. M&M is not responsible for the privacy
policies/notices/statements or the content of such Third-Party Software/Services or third-party
social media sites even if:
- You accessed the third-party site using links from our App; or
- You accessed our App using links from a Third-Party Software Application.
- We encourage you to be aware when you leave our App and to read the privacy policies of
other Third-Party Software Applications that may collect your Personal Information.
3. BASIS FOR PROCESSING YOUR PERSONAL INFORMATION
We process your Personal Information provided by you only if we have the following legal basis
for doing so:
- To fulfil a contract, we have concluded with you or to take steps at your request prior
to entering into such an agreement with you; or
- To pursue our prevailing legitimate interests to achieve the purposes set out in the
following paragraph just below.
- On the basis of the necessity to comply with legal obligations to which we are subject.
If we process your Personal Data based on your consent, we will ask for your consent in a
separate process. By submitting your Personal Data including your KYC documents, you are
explicitly consenting to the collection, use, and processing of your Personal Data for the
purpose of completing the intended transaction formalities with respect to the purchase of your
vehicle and for complying with related legal or regulatory requirements.
4. PURPOSE OF COLLECTION OF YOUR PERSONAL INFORMATION
The use of your Personal Information is subject to the Privacy Policy in effect at the time of
our use. We will process your Personal Information for the following purposes:
- to make this App and its services available to you and to further optimize and develop
it;
- to complete your vehicle registration
- to monitor the use of the App and to help further development of our products and
services;
- to manage your account, services and other personalised features;
- to identify your geographic location in connection with the required services
- to create App usage statistics;
- to assess and improve your user experience on the App;
- to be able to recognize, prevent and investigate attacks on this App;
- to communicate with you;
- to enforce our terms and conditions;
- to comply with legal obligations;
- to comply with obligations to public authorities
- to provide chat services including customer services to you via the App;
- to send newsletters/communications opted by you about our or our affiliates' current
services, new services, or promotions that we are developing, and opportunities that may
be available to you;
- to alerting you of new features or enhancements to our services;
- to deliver marketing and event communications opted by you across various platforms,
such as email, telephone, text messaging, WhatsApp and direct mail. If, based on your
consent, we send you a marketing email, it will include instructions on how to opt out
of receiving these emails in the future. Please remember that even if you opt out of
receiving marketing emails, we may still send you important service information related
to your accounts and subscriptions, unless you delete your account;
- for legal and compliance reasons, such as the prevention, detection, or investigation of
a crime, loss prevention or prevention of fraud. We may also use Personal Information to
meet our internal and external audit requirements and for information security purposes;
- as otherwise described to you at the time of collection of your Personal Data.
We endeavour to collect only such information that is reasonably necessary for us to perform the
desired function.
If M&M wishes to collect and process your Personal Information for purposes other than those
mentioned above, we shall seek a specific consent from you prior to collecting and processing
your Personal Information for such additional purposes unless this falls within our legitimate
business interest for processing as explained above.
5. SHARING/DISCLOSURE OF PERSONAL INFORMATION
M&M may disclose information about you to the following recipients:
We may share your personal information with our channel partners/service partners/third-party
entities for the purpose of completing the transaction or establishing the relationship. By
providing your documents, you explicitly consent to such sharing.
5.1 M&M companies and potential partnerships: Our businesses around the world
are supported by
different teams and functions, and Personal Information will be made available to them, if
necessary, for the provision of services, account administration, sales and marketing, customer
and technical support, and business and product development. Whilst a request for a service or
enquiry you make, may be passed on or made available to our affiliates or subsidiaries
("Mahindra Group Affiliates") some of which are based in countries that do not have adequate
data protection laws, all Mahindra Group Affiliates are required to comply with appliable data
protection laws which require that appropriate information security measures are taken to
protect your Personal Information and use it only for the limited purposes for which it was
given. All our employees and those of our affiliates or subsidiaries are required to follow our
data protection and security policies when handling Personal Information. Your Personal
Information might also have to be shared in the event of a merger, sale, restructure,
acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of
our business, assets, or stock (including in connection with any bankruptcy or similar
proceedings).
5.2 External service providers: Occasionally, to provide our services, it is
necessary to collaborate with external service providers. These external service providers
process your information on our behalf only insofar as it is necessary for them to provide their
services to us. They are contractually obliged to comply fully with the applicable law on Data
Protection. We make sure that such external service providers are capable of safeguarding data.
Our prior consent is required before they are permitted to transfer responsibility for
processing Personal Data to a third party. We may share your personal information with our
channel partners/service partners/third-party entities for the purpose of completing the
transaction or establishing the relationship.
5.3 Courts and authorities:We will share your Personal Information when it is
required:
- To comply with legal obligations and respond to requests from government agencies,
including law enforcement and other public authorities, which may include such
authorities outside your country of residence.
- To raise or defend against legal claims.
- To protect our users, systems, and services.
6. PERSONAL INFORMATION TRANSFER, STORAGE AND PROCESSING
GLOBALLY
We operate globally and may transfer your Personal Information to Mahindra Group affiliates or
third parties in locations around the world for the purposes described in this Policy. Wherever
your Personal Information is transferred, stored, or processed by us outside your jurisdiction,
we will take reasonable steps to safeguard the privacy of your Personal Information by
implementing appropriate contractual and legal requirements in the concerned jurisdictions.
7. ACCURACY OF YOUR PERSONAL INFORMATION
Notwithstanding the obligation for M&M to put in place all necessary means to maintain the
accuracy of your Personal Information, you agree to provide us with accurate Personal
Information at all times and you will notify us promptly upon any changes to your Personal
Information.
8. SECURITY MEASURES
We are strongly committed to protecting your Personal Information and privacy online and
accordingly, we have implemented technical and organizational security measures in relation to
all the data or information including Personal Information that is processed by us. However, we
cannot guarantee the security of any Personal Information or data that you disclose online
having regard to the nature of the internet. In any event, you accept the inherent security
implications of disclosing information over the internet and agree not to hold us responsible
for any breach of information security unless we have been negligent or wilfully in default of
our obligations under the relevant legislation. M&M endeavours to detect and investigate every
breach of security by having relevant controls in place which should alert us to a breach of
security. Among other things, we ensure that there is restricted access to Personal Data to
staff and service providers on a need-to-know basis. We may also use encryption technology from
time to time to assist in protecting any information or data which you submit.
9. YOUR RIGHTS IN CONNECTION WITH YOUR PERSONAL INFORMATION
9.1 We respect your right to access and control your Personal Information, and
we will respond to requests for information and, where applicable, will correct, amend, or
delete your Personal Information. These rights can be exercised by you, as per the Data
Protection Law that is applicable to your region.
Please note that applicable law might require that we cannot comply with every request. For
example, we will be required to retain your Personal Information due to statutory retention
requirements despite your request for erasure.
You have the following rights:
- Right to access: You have the right to confirm if we hold any Personal
Information about you and obtain a copy of the Personal Information about you that is
held with us.
- Right to withdraw consent: If you have consented to our processing of
your Personal Information, you may revoke that consent at any time, effective going
forward, by contacting us. This includes cases where you wish to opt out from marketing
messages that you receive from us via the App. However, opting out will result in
immediate cessation of services and no further collection of data will be done on a
going forward basis.
- Right to rectification: You have the right to have information held
about you corrected if it is not accurate or complete.
- Right to erasure: You can also request to erase the Personal
Information that is no longer necessary for the purpose for which it was processed
unless retention is necessary for a legal purpose.
- Right to restriction of processing: You have the right to restrict
processing of your information, however exercising this right may not enable M&M to
fulfil your service requests and ensure service performance.
- Right to object: You have the right to object to receive marketing
communications from M&M by choosing to opt out of all marketing communications.
- Right to lodge a complaint: You have the right to complain about the
processing activities carried out by us before the competent data protection
authorities, as applicable under your region-specific Data Protection Law.
9.2 For exercising any of your rights mentioned above, you can write to us at
[email protected]. We will need you to respond with proof of your identity before you
can exercise these rights. M&M may not be able to process any requests made in the event the
user fails to identify themselves or if M&M is unable to authenticate such a user. M&M may also
decline to process requests that are unreasonably repetitive, requiring disproportionate effort,
jeopardizing the privacy of others, or would be extremely impractical.
9.3 M&M shall not charge you for fulfilling any of the above requests. However,
if the fulfilment of any such request leads to certain costs being incurred by M&M, then M&M
will notify you prior to processing such request.
10. RETENTION PERIODS
We will retain your Personal Information which we have collected for as long as we reasonably
consider it necessary for achieving the abovementioned purposes and as is permissible under
applicable law. This is determined on a case-to-case basis. We will securely delete your
Personal Information whenever you request us to do so and/or after the retention period has
ended. However, we may archive and/or retain your Personal Information for as long as there are
statutory retention obligations or potential legal claims are not yet time barred.
11. OUR CONTACT DETAILS
Please address your requests or questions concerning the processing of your Personal Information
to:
Mahindra & Mahindra Limited
Registered office: Mahindra & Mahindra Ltd.
Automotive Division
Mahindra Towers, 3rd Floor
Akurli Road, Kandivali (E)
Mumbai 400 101
Contact:
[email protected]
12. CHANGES TO THIS PRIVACY POLICY
M&M may update this Policy from time to time. Any material changes to the Policy will be posted
on this page. The updated Policy will take effect as soon as it has been updated.
This Policy was last updated as of 12th June 2023.
You can request to delete you Mahindra For You app profile/account information by mailing us at [email protected].
Our helpdesk team shall handle your request.