Privacy policy

This notice explains what personal data KashmirRide collects, why, who we share it with, and the choices and rights you have under India's Digital Personal Data Protection Act, 2023.

What we collect, and why

Data	Purpose
Name, email, phone	To make and manage your booking, send confirmations and updates, and let your provider contact you once confirmed.
Trip details (dates, pickup points, notes, number of travellers)	So the provider can deliver the service you booked.
Payment references	To confirm payments, issue invoices and process refunds. Card and UPI details stay with our payment partner.
Messages with providers and support	To answer your questions and resolve problems.
Reviews you write	Published with your first name and last initial.
Usage events (searches, pages viewed, checkout steps)	To understand what works and fix what doesn't. Stored against a scrambled session code, not your IP address.
Provider business and identity documents	To verify providers. Stored privately and seen only by our verification team.

We don't use third-party advertising trackers. The site uses only the cookies it needs to work: a session cookie, a security (CSRF) cookie, and a cookie that remembers your trip.

Who we share it with

• The provider you book - your name, phone and booking details. Phone numbers are shared only once a booking is confirmed.
• Our payment partner - to process payments and refunds.
• Messaging and email services - to deliver confirmations and updates.
• Authorities - only when the law requires it.

We don't sell personal data.

How long we keep it

Booking and invoice records are kept as long as tax and accounting law requires. Usage events are deleted after about 13 months. Support conversations are kept for two years. If you delete your account, we remove or anonymise everything we're not legally required to keep.

Your rights

• Get a copy of your data (Account → Privacy → Download my data).
• Correct or update it (Account → Profile).
• Withdraw consent for marketing at any time.
• Erase your account and data (Account → Privacy).
• Nominate someone to exercise these rights for you, and raise a grievance.

Without an account, email support@kashmirride.com from the address you booked with.

Grievances

Contact our Grievance Officer, Grievance Officer, at grievance@kashmirride.com. If you're not satisfied with our response, you may complain to the Data Protection Board of India.

Security

Data is encrypted in transit. Bank details and identity numbers are encrypted at rest. Staff access is limited by role, protected by two-factor sign-in, and logged.