Privacy Policy

Mahindra & Mahindra Limited ("we" "us" "our" "M&M") is committed to protecting the privacy and security of your Personal Information. Your privacy is important to us. This Privacy Policy ("Policy") applies to the services offered by us to individuals ("you", "your" or "user") who access or use our Mahindra For You ("App"). You may use this App to discover more information about us or our products and/or services, except for the services provided on our websites that may have separate privacy policies that do not incorporate this Policy.

This Policy shall be referred to and read as an integral part of the Terms and Conditions and Terms of Use of this App. Before using our App, the user(s) is/are advised to carefully review this Privacy Policy including the Terms and Conditions and Terms of Use of our App. If the user(s) do / does not agree to be bound by this Privacy Policy or do not agree with any of the Terms and Conditions and Terms of Use, the user(s) is/are asked to not access or use the App. By using the App, you are consenting to the processing of your Personal Information in the manner as set forth in this Privacy Policy.

This Policy explains how we collect, store, disclose, transfer, and use information that personally identifies you when you use our App. We want you to be confident that we are looking after your interests and that is why we have set out our information practices in this Policy. The text and graphic links on the App may have a link to third party social media sites and information and service providers that may also collect information from you. In addition, some of the pages on the App may lead to co-branded web pages that are hosted and served by third parties. In each of the aforesaid cases, we have no control over the privacy policy of any third-party and advise you to please examine their privacy policy prior to submitting your Personal Information.

You can visit the App without telling us who you are or providing Personal Information. Such use does not result in any personally identifiable data being collected or stored. We may however collect information about you when you visit the App, use our services, or view our online advertisements. Having said that, unless you submit Personal Information about yourself by filing in any form on the App or by sending us an e-mail, we are not obliged to maintain any other Personal Information as a result of your access and usage of this App.

1.  COLLECTION AND USE OF PERSONAL INFORMATION

"Personal Information" or "Personally Identifiable Information (PII)" or "Personal Data" is defined as any information that identifies (whether directly or indirectly) a particular individual or natural person. When anonymous information is directly or indirectly associated with Personal Information, the resulting information also is treated as Personal Information.

Any Personally Identifiable Information provided by you will not be considered as private/confidential if it is freely available and / or accessible in the public domain like any comments, messages, blogs, available on social media platforms like Facebook, Twitter, etc.

PERSONAL INFORMATION WE COLLECT

(a)  INFORMATION WE COLLECT FROM USERS

Usage information may consist inter alia of the following information about your visit to the App:

  • Your navigation path on the App
  • Date and the time of your visit to the App
  • The length of time you spent on the App or subpage
  • The subpage from which you left the App
  • The number of pages viewed
  • The number of users who visited the App
  • The country, region or city from which the App is accessed
  • The device information
  • You GPS location, if allowed by you
  • The selected page on the App (URL)
  • Your IP address from your device
  • The search queries used
  • The transmission protocol used
  • Certain cookies (see point c below)
Usage information is generally non-identifying in nature, but to process such usage information and to make it feasible for our legitimate business interests like promoting system security and stability, allowing for error and performance analysis, and serving internal statistical needs, we may associate the usage information with other information collected from you and such combination may be treated as Personal Information. This also enables us to optimize our online services.

(b)  INFORMATION USERS PROVIDE TO US VOLUNTARILY

  • We collect Personal Data from you directly (viz. your name, email address, phone number, mailing address, login id and password, location data, copy of your KYC documents such as Aadhaar, PAN, passport, Voters ID, driving license), when you provide us with it by uploading the same via the App. There is no obligation to provide the Personal Data that we ask you for. However, if you do not provide your Personal Data, you will not be able to make use of all the functions/services available on the App.
  • If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the App, we may collect and store such information, including but not limited to name, email address, phone number and location.
  • If you send us a business query, media request or investor contact request via the App, we may collect and store such information, including but not limited to name, email address, phone number and location data.
  • We process Personal Information only that is required by us to fulfill your query/or to provide a service requested by you. In the event we wish to process any other information that you have submitted to us voluntarily, we will reach out to you to notify the additional purposes of processing and seek your consent wherever applicable.
(c)  INFORMATION AUTOMATICALLY COLLECTED/ TRACKED WHILE NAVIGATION

Cookies

To improve your experience on our App, we collect, use and store cookies. A cookie is a small text file that is placed on a device and is used to identify the user or device and to collect information. Cookies are generally used to provide site visitors with additional functionality within the App. They may for example be created to keep track of your visit and support your navigation on the App, help you resume where you left off and/or remember your preferences and settings when you visit the App again.

Cookies cannot access, read or modify any other data on your device. A cookie cannot retrieve any other data from your hard drive, pass on computer viruses, or capture your e-mail address. Currently, applications use cookies to enhance the user's visit; in general, cookies can personalize home pages, and identify which parts of the App have been visited. It is possible to set your browser to inform you when a cookie is being placed. This way you can decide whether to accept the cookie. Some of the cookies we use are automatically deleted once you leave the App. Persistent cookies, however, remain on your device until you delete them in your browser. We use persistent cookies to recognize you when you visit the App the next time.

If you want to control the cookies installed on your device, you can modify your browser settings so that it notifies you when the App wants to install a cookie, or you can block cookies altogether. You can also delete cookies that have already been installed on your device. Refer to the 'Help' function within your browser for more information on how to do these things. By showing how and when our visitors use this App, this information can help us to improve our App on a continual basis.

Please note, however, that disabling cookies might affect your online experience and/or prevent you from taking full advantage of the App.

Flash cookies

Certain features of our App may use local stored objects (or flash cookies) to collect and store information about your preferences and navigation to, from, and on our App. Flash cookies are not managed by the same browser settings as are used for browser cookies and we advise you to keep yourself updated on how to manage your privacy and security settings for flash cookies on your device.

Web Beacons

Pages of our App and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit M&M, for example, to count users who have visited those pages or opened an email and for other related App statistics (for example, recording the popularity of certain online content and verifying system and server integrity)

(d)  INFERRED INFORMATION THROUGH USAGE AND LOG DATA

We may track information about you, in an anonymized manner, based upon your behaviour while using the App for below mentioned purposes of analytics and statistical insights:
  • To perform analytics and conduct customer research, to determine your interest, for identifying content that generate sales and to analyse traffic patterns
  • To study traffic patterns to improve performance of the App, to customize user experience, and to better match users' interests and preferences
  • Keep track of preferences you specify while you are using the content or services of the App
  • Capturing user behaviour for measuring quality specifications of the App
2.  LINKS TO THIRD-PARTY SOFTWARE OR SERVICES OR THIRD-PARTY SOCIAL MEDIA

The App may contain links to other Third-Party Software/Services including third-party social media sites that may collect information from you. M&M is not responsible for the privacy policies/notices/statements or the content of such Third-Party Software/Services or third-party social media sites even if:
  • You accessed the third-party site using links from our App; or
  • You accessed our App using links from a Third-Party Software Application.
  • We encourage you to be aware when you leave our App and to read the privacy policies of other Third-Party Software Applications that may collect your Personal Information.
3.  BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

We process your Personal Information provided by you only if we have the following legal basis for doing so:
  • To fulfil a contract, we have concluded with you or to take steps at your request prior to entering into such an agreement with you; or
  • To pursue our prevailing legitimate interests to achieve the purposes set out in the following paragraph just below.
  • On the basis of the necessity to comply with legal obligations to which we are subject.
If we process your Personal Data based on your consent, we will ask for your consent in a separate process. By submitting your Personal Data including your KYC documents, you are explicitly consenting to the collection, use, and processing of your Personal Data for the purpose of completing the intended transaction formalities with respect to the purchase of your vehicle and for complying with related legal or regulatory requirements.

4.  PURPOSE OF COLLECTION OF YOUR PERSONAL INFORMATION

The use of your Personal Information is subject to the Privacy Policy in effect at the time of our use. We will process your Personal Information for the following purposes:
  • to make this App and its services available to you and to further optimize and develop it;
  • to complete your vehicle registration
  • to monitor the use of the App and to help further development of our products and services;
  • to manage your account, services and other personalised features;
  • to identify your geographic location in connection with the required services
  • to create App usage statistics;
  • to assess and improve your user experience on the App;
  • to be able to recognize, prevent and investigate attacks on this App;
  • to communicate with you;
  • to enforce our terms and conditions;
  • to comply with legal obligations;
  • to comply with obligations to public authorities
  • to provide chat services including customer services to you via the App;
  • to send newsletters/communications opted by you about our or our affiliates' current services, new services, or promotions that we are developing, and opportunities that may be available to you;
  • to alerting you of new features or enhancements to our services;
  • to deliver marketing and event communications opted by you across various platforms, such as email, telephone, text messaging, WhatsApp and direct mail. If, based on your consent, we send you a marketing email, it will include instructions on how to opt out of receiving these emails in the future. Please remember that even if you opt out of receiving marketing emails, we may still send you important service information related to your accounts and subscriptions, unless you delete your account;
  • for legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention or prevention of fraud. We may also use Personal Information to meet our internal and external audit requirements and for information security purposes;
  • as otherwise described to you at the time of collection of your Personal Data.
We endeavour to collect only such information that is reasonably necessary for us to perform the desired function.

If M&M wishes to collect and process your Personal Information for purposes other than those mentioned above, we shall seek a specific consent from you prior to collecting and processing your Personal Information for such additional purposes unless this falls within our legitimate business interest for processing as explained above.

5.  SHARING/DISCLOSURE OF PERSONAL INFORMATION

M&M may disclose information about you to the following recipients:

We may share your personal information with our channel partners/service partners/third-party entities for the purpose of completing the transaction or establishing the relationship. By providing your documents, you explicitly consent to such sharing.

5.1 M&M companies and potential partnerships: Our businesses around the world are supported by different teams and functions, and Personal Information will be made available to them, if necessary, for the provision of services, account administration, sales and marketing, customer and technical support, and business and product development. Whilst a request for a service or enquiry you make, may be passed on or made available to our affiliates or subsidiaries ("Mahindra Group Affiliates") some of which are based in countries that do not have adequate data protection laws, all Mahindra Group Affiliates are required to comply with appliable data protection laws which require that appropriate information security measures are taken to protect your Personal Information and use it only for the limited purposes for which it was given. All our employees and those of our affiliates or subsidiaries are required to follow our data protection and security policies when handling Personal Information. Your Personal Information might also have to be shared in the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

5.2 External service providers: Occasionally, to provide our services, it is necessary to collaborate with external service providers. These external service providers process your information on our behalf only insofar as it is necessary for them to provide their services to us. They are contractually obliged to comply fully with the applicable law on Data Protection. We make sure that such external service providers are capable of safeguarding data. Our prior consent is required before they are permitted to transfer responsibility for processing Personal Data to a third party. We may share your personal information with our channel partners/service partners/third-party entities for the purpose of completing the transaction or establishing the relationship.

5.3 Courts and authorities:We will share your Personal Information when it is required:
  • To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence.
  • To raise or defend against legal claims.
  • To protect our users, systems, and services.
6.  PERSONAL INFORMATION TRANSFER, STORAGE AND PROCESSING GLOBALLY

We operate globally and may transfer your Personal Information to Mahindra Group affiliates or third parties in locations around the world for the purposes described in this Policy. Wherever your Personal Information is transferred, stored, or processed by us outside your jurisdiction, we will take reasonable steps to safeguard the privacy of your Personal Information by implementing appropriate contractual and legal requirements in the concerned jurisdictions.

7.  ACCURACY OF YOUR PERSONAL INFORMATION

Notwithstanding the obligation for M&M to put in place all necessary means to maintain the accuracy of your Personal Information, you agree to provide us with accurate Personal Information at all times and you will notify us promptly upon any changes to your Personal Information.

8.  SECURITY MEASURES

We are strongly committed to protecting your Personal Information and privacy online and accordingly, we have implemented technical and organizational security measures in relation to all the data or information including Personal Information that is processed by us. However, we cannot guarantee the security of any Personal Information or data that you disclose online having regard to the nature of the internet. In any event, you accept the inherent security implications of disclosing information over the internet and agree not to hold us responsible for any breach of information security unless we have been negligent or wilfully in default of our obligations under the relevant legislation. M&M endeavours to detect and investigate every breach of security by having relevant controls in place which should alert us to a breach of security. Among other things, we ensure that there is restricted access to Personal Data to staff and service providers on a need-to-know basis. We may also use encryption technology from time to time to assist in protecting any information or data which you submit.

9.  YOUR RIGHTS IN CONNECTION WITH YOUR PERSONAL INFORMATION

9.1 We respect your right to access and control your Personal Information, and we will respond to requests for information and, where applicable, will correct, amend, or delete your Personal Information. These rights can be exercised by you, as per the Data Protection Law that is applicable to your region.

Please note that applicable law might require that we cannot comply with every request. For example, we will be required to retain your Personal Information due to statutory retention requirements despite your request for erasure.

You have the following rights:
  • Right to access: You have the right to confirm if we hold any Personal Information about you and obtain a copy of the Personal Information about you that is held with us.
  • Right to withdraw consent: If you have consented to our processing of your Personal Information, you may revoke that consent at any time, effective going forward, by contacting us. This includes cases where you wish to opt out from marketing messages that you receive from us via the App. However, opting out will result in immediate cessation of services and no further collection of data will be done on a going forward basis.
  • Right to rectification: You have the right to have information held about you corrected if it is not accurate or complete.
  • Right to erasure: You can also request to erase the Personal Information that is no longer necessary for the purpose for which it was processed unless retention is necessary for a legal purpose.
  • Right to restriction of processing: You have the right to restrict processing of your information, however exercising this right may not enable M&M to fulfil your service requests and ensure service performance.
  • Right to object: You have the right to object to receive marketing communications from M&M by choosing to opt out of all marketing communications.
  • Right to lodge a complaint: You have the right to complain about the processing activities carried out by us before the competent data protection authorities, as applicable under your region-specific Data Protection Law.
9.2 For exercising any of your rights mentioned above, you can write to us at [email protected]. We will need you to respond with proof of your identity before you can exercise these rights. M&M may not be able to process any requests made in the event the user fails to identify themselves or if M&M is unable to authenticate such a user. M&M may also decline to process requests that are unreasonably repetitive, requiring disproportionate effort, jeopardizing the privacy of others, or would be extremely impractical.

9.3 M&M shall not charge you for fulfilling any of the above requests. However, if the fulfilment of any such request leads to certain costs being incurred by M&M, then M&M will notify you prior to processing such request.

10.  RETENTION PERIODS

We will retain your Personal Information which we have collected for as long as we reasonably consider it necessary for achieving the abovementioned purposes and as is permissible under applicable law. This is determined on a case-to-case basis. We will securely delete your Personal Information whenever you request us to do so and/or after the retention period has ended. However, we may archive and/or retain your Personal Information for as long as there are statutory retention obligations or potential legal claims are not yet time barred.

11.  OUR CONTACT DETAILS

Please address your requests or questions concerning the processing of your Personal Information to:

Mahindra & Mahindra Limited
Registered office: Mahindra & Mahindra Ltd.
Automotive Division
Mahindra Towers, 3rd Floor
Akurli Road, Kandivali (E)
Mumbai 400 101

Contact: [email protected]

12.  CHANGES TO THIS PRIVACY POLICY

M&M may update this Policy from time to time. Any material changes to the Policy will be posted on this page. The updated Policy will take effect as soon as it has been updated.

This Policy was last updated as of 12th June 2023.

You can request to delete you Mahindra For You app profile/account information by mailing us at [email protected]. Our helpdesk team shall handle your request.