Privacy Policy

1. Company Information

This Privacy Policy is issued by:

• Company Name: Baste Travels
• Proprietor: Somnath Baste (Sole Owner)
• Registered Address: Hadapsar, Pune, Maharashtra, India
• Contact Email: bastetravels@gmail.com
• Contact Phone: +91 7507958364

2. Legal Framework

This Privacy Policy is governed by and complies with the following Indian laws and regulations:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) — India's primary data protection legislation
• The Information Technology Act, 2000 — governing electronic data and cyber security
• IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Indian Contract Act, 1872 — governing contractual obligations
• The Consumer Protection Act, 2019
• Maharashtra State Transport Regulations and applicable RTO rules

3. Information We Collect

3.1 Personal Information (Provided by You)

• Identity Data: Full name, gender, photograph (if provided)
• Contact Data: Phone number, WhatsApp number, email address
• Corporate Data: Company name, designation, employee ID (for corporate contracts)
• Ride Data: Pickup and drop locations, ride schedules, preferred routes
• Payment Data: Billing address, GST number (for corporate invoicing only — we do not store card/UPI details)

3.2 Automatically Collected Data

• GPS/Location Data: Real-time location during rides for safety tracking via the Baste Travels App app (when launched)
• Device Data: Device type, OS version, app version (Baste Travels App app only)
• Usage Data: Ride history, frequency, feedback, and ratings

3.3 Sensitive Personal Data

We do not collect any sensitive personal data such as passwords, financial information (bank account/card details), biometric data, medical records, sexual orientation, political opinions, or religious beliefs.

4. How We Use Your Information

We use your personal data strictly for the following legitimate purposes:

• Service Delivery: To schedule, assign, and manage cab rides as per your contract
• Safety & Security: GPS tracking, SOS alerts, ride sharing with emergency contacts, route monitoring
• Communication: Ride confirmations, driver details, schedule changes, service updates via SMS/WhatsApp/email
• Corporate Billing: Monthly invoicing, trip reports, GST documentation for corporate clients
• Service Improvement: Analyzing ride patterns to improve routes, scheduling, and fleet management
• Safety Compliance: Sharing ride data with law enforcement when legally required or in emergency situations
• Complaint Resolution: Investigating and resolving service complaints or safety incidents

5. Data Sharing

We may share your data only in the following circumstances:

• With Assigned Drivers: Name, pickup location, and contact number (limited to ride fulfillment)
• With Your Employer (Corporate Contracts): Ride logs, attendance data, billing as agreed in the corporate contract
• Emergency Contacts: Ride details shared with your registered family/emergency contacts for safety
• Law Enforcement: When required by court order, legal process, or to comply with applicable Indian law
• Safety Emergencies: Location data shared with police/emergency services during SOS activation

6. Data Storage & Security

• All personal data is stored on secure servers within India
• We implement reasonable security practices as prescribed under the IT Act, 2000 and DPDP Act, 2023
• Access to personal data is restricted to authorized personnel only
• Ride data and GPS logs are retained for a period of 90 days after the ride, after which they are automatically deleted
• Corporate billing records are retained as per Indian tax laws (minimum 8 years as per Income Tax Act)
• WhatsApp/email inquiries are retained for 12 months for service quality purposes

7. Your Rights Under DPDP Act, 2023

As a data principal (user), you have the following rights:

• Right to Access: You can request a summary of your personal data we hold
• Right to Correction: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data (subject to legal retention requirements)
• Right to Grievance Redressal: You can raise complaints about data handling to our Grievance Officer
• Right to Nominate: You can nominate another person to exercise your rights in case of death or incapacity

8. Grievance Officer

In compliance with the DPDP Act, 2023 and IT Act, 2000, we have appointed a Grievance Officer:

• Name: Somnath Baste
• Designation: Proprietor & Grievance Officer
• Email: bastetravels@gmail.com
• Phone: +91 7507958364
• Response Time: Within 30 days of receiving your complaint

9. Cookies & Website Data

Our website (landing page) does not use cookies, tracking pixels, or any third-party analytics. No data is collected from website visitors unless they voluntarily submit the inquiry form.

10. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor's data has been collected, we will promptly delete it.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Pune, Maharashtra, India.

Ref: Digital Personal Data Protection Act, 2023 | Information Technology Act, 2000 | IT Rules, 2011 | Consumer Protection Act, 2019