BBM EV Rentals — Privacy Policy

Last updated: 24 July 2026

BBM PVT LTD ("BBM", "BBM EV Rentals", "we", "our", or "us") operates the BBM EV Rentals platform, including the BBM Rider mobile application, BBM Admin application and associated website and services.

This Privacy Policy explains how we collect, use, process, store and share personal information when you use BBM services. By using BBM EV Rentals, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Account Information

We may collect: full name, mobile number, email address, address, account/profile information, and device and application information.

Identity and KYC Information

Identity verification may be required before a vehicle can be rented. Depending on the verification process, we may process information obtained through DigiLocker or authorised verification providers, including: name, date of birth, gender, address, photograph, and Aadhaar-related verification information.

We use date-of-birth information to verify that the rider satisfies applicable age requirements. BBM does not intentionally store a full Aadhaar number in plain-text form. Additional documents such as a driving licence or PAN may be collected where required for the relevant vehicle, transaction, verification or legal requirement.

Selfie and Identity Verification

We may require a selfie for: liveness verification, identity verification, face matching against the photograph obtained through an authorised identity-verification process, and fraud prevention. Verification may be performed using authorised third-party verification providers.

Booking and Rental Information

We collect information relating to: vehicle booked, rental plan, rental start and end time, vehicle pickup and return, rental extensions, security deposit, additional charges, booking status, and rental history.

Payment Information

Payments may be processed through Razorpay or another authorised payment provider. BBM may receive: transaction ID, payment status, amount, refund status, and payment reference information. BBM does not directly store your complete debit-card, credit-card or online-banking credentials.

Vehicle Location Information

BBM rental vehicles may contain GPS/telematics devices. During an active rental, vehicle location may be processed for: vehicle tracking, rider and vehicle safety, theft prevention and recovery, geofence enforcement, fleet management, and investigation of misuse or non-return. Authorised BBM personnel may access fleet-location information through administrative systems.

Device and Application Information

We may process information including: device identifiers, operating-system information, application version, push-notification tokens, IP address, application logs, crash/error information, and security and authentication logs.

2. How We Use Information

Information may be used to: create and manage your account; authenticate your mobile number; perform identity/KYC verification; confirm eligibility to rent vehicles; process bookings; manage rentals and returns; process payments and security deposits; issue applicable refunds; track and secure rented vehicles; detect geofence violations; prevent fraud, theft and misuse; recover vehicles; provide customer support; send booking and transactional notifications; send security alerts; maintain application security; resolve disputes; meet applicable legal and regulatory requirements; and improve BBM services.

3. Consent

Where consent is required, BBM will request it before processing the relevant information. Identity/KYC information is processed with appropriate consent and/or another applicable lawful basis. If you withdraw consent for processing that is necessary to provide a rental service, BBM may be unable to continue providing that service. Withdrawal of consent does not necessarily require deletion of information that BBM is legally required or otherwise permitted to retain.

4. Sharing of Information

BBM may use third-party service providers to operate its services. These may include:

Only information reasonably necessary for the relevant service should be shared with service providers. BBM does not sell users' personal information. Information may also be disclosed where required by applicable law, court order, regulatory authority or lawful request from law-enforcement authorities.

5. GPS Tracking and Vehicle Security

BBM rental vehicles may be equipped with GPS/telematics technology. Vehicle location may be monitored during active rentals for safety, theft prevention, recovery, geofence management and fleet operations. Where technically supported, BBM may remotely restrict or immobilise a vehicle in circumstances permitted by the Rental Terms, such as theft, unauthorised retention, serious geofence violations or applicable payment/default situations. Vehicle immobilisation must not intentionally be initiated while the vehicle is moving where doing so could create a safety risk.

6. Storage and Security

BBM uses reasonable technical and organisational measures designed to protect personal information. Measures may include: encryption in transit, authentication controls, restricted administrative access, role-based access, logging, secure cloud infrastructure, and security monitoring. No electronic storage or transmission system can be guaranteed to be completely secure.

7. Data Retention

BBM retains personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, tax, accounting, regulatory, fraud-prevention and dispute-resolution requirements. Different categories of information may have different retention periods. Information that is no longer required will be deleted, anonymised or otherwise handled in accordance with applicable requirements.

Final operational retention schedule: [TO FILL after legal/accounting review]

8. Your Rights

Subject to applicable Indian law, users may have rights relating to their personal information, including the ability to: request information about personal data being processed; request correction of inaccurate information; request completion or updating of information; request erasure where applicable; withdraw consent where processing depends on consent; raise a grievance; and exercise other rights available under applicable data-protection law. Requests may be subject to identity verification.

9. Account and Data Deletion

BBM Rider users may request deletion of their account. Where available, users can initiate the request through: BBM Rider → Profile → Settings → Delete Account. Users who cannot access the application may submit a deletion request through BBM's account-deletion page or contact BBM support. Some records may need to be retained where required or permitted by applicable law.

10. Children's Privacy

BBM rental services are intended only for persons who meet the minimum eligibility requirements for the relevant rental service. BBM's standard Rider service is intended for users aged 18 years and above. BBM does not knowingly provide Rider accounts to children.

11. Changes to This Privacy Policy

BBM may update this Privacy Policy to reflect changes in its services, technology, legal requirements or business practices. The updated policy will display a revised "Last Updated" date. Material changes may also be communicated through the BBM Rider application or other appropriate channels.

12. Grievance and Contact Information

For privacy questions, grievances or data-related requests, contact:

BBM PVT LTD
Registered Address: [TO FILL]
Grievance Officer: [TO FILL]
Privacy/Support Email: [TO FILL]
Phone: [TO FILL]
Website: [TO FILL]