Fiesta Smart Mobility Private Limited (“Company,” “we,” “our,” or “us”) is committed to protecting the privacy and personal data of users, clients, drivers, employees, and partners.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when providing our services, including:

• Employee Transportation Services (B2B)
• Rent-a-Car Services (B2C and B2B)
• Website and digital platform usage

This policy is governed by applicable laws of India, including:

• The Digital Personal Data Protection Act, 2023
• The Information Technology Act, 2000 and applicable rules

By using our website or services, you agree to this Privacy Policy.

This Privacy Policy applies to:

• Corporate clients and their employees are using transport services.
• Individual customers using the rent-a-car services
• Drivers, fleet partners, and vendors
• Website visitors and platform users

We collect personal data needed to provide safe, efficient, and compliant transport services.

We process personal data for the following purposes:

• To provide and manage transportation services
• To ensure passenger and driver safety.
• To enable GPS tracking and route optimisation
• To comply with corporate transport policies and SLAs
• To verify driver credentials and regulatory compliance
• To process payments and generate invoices.
• To improve service quality and customer experience
• To comply with legal and regulatory obligations

We process personal data under the Digital Personal Data Protection Act, 2023, based on:

• Consent provided by the data principal
• Legitimate use for service delivery and safety
• Compliance with legal obligations
• Performance of contracts with clients and users

We may share personal data with:

We require all third parties to follow appropriate data protection standards.

We retain personal data only as long as necessary:

• Trip and location data: As required for operational and compliance purposes
• Driver and compliance records: As per applicable transport and labour laws
• Financial data: As per statutory requirements

After the retention period, we securely delete or anonymise data.

We implement reasonable security practices, including:

• Encryption and secure storage
• Access control and authentication
• Monitoring and audit mechanisms

While we implement reasonable security practices, no system can be guaranteed completely secure. Users should be aware that sharing data online carries some risk, and we cannot provide absolute assurance against unauthorised access or data breaches.

Our website may use cookies and analytics tools to:

• Improve user experience
• Analyse website traffic
• Enhance platform performance

You can manage cookie settings in your browser.

Under applicable Indian laws, users have the right to:

• Access their personal data.
• Request correction or updates.
• Withdraw consent
• Request deletion of personal data

To make a request, please contact us using the details below.

Personal data may be stored or processed outside India with secure cloud providers.

We ensure such transfers comply with applicable Indian data protection laws.

Our services are not intended for individuals below 18 years of age.

We do not knowingly collect data from minors.

In accordance with Indian law, the Company has appointed a Grievance Officer:

We will address grievances within the timeframe required by law.

We may update this Privacy Policy from time to time. We will publish updates on our website with the revised date.

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

All disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Chennai, Tamil Nadu.