Objective

To establish a comprehensive privacy program, TML hereby adopt principles aligned with concepts and requirements from applicable data protection laws including India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Please note that terms used but not defined under this privacy notice shall have the meaning ascribed to such term under the DPDP Act.

 

Purpose

TATA Motors Limited henceforth referred as (“TML”, “we”, “us”, “our / ours”) is providing the Online Sales platform [i] (https://buytrucknbus.tatamotors.com/) and allied websites / digital platforms / applications (“Platform”) wherein Customer[1] , Dealers[2] , and Visitors[3] (Collectively “Users”) avail services provided by TML to track and improve the efficiency of TML Commercial Vehicles (“Vehicles”). TML is committed to protecting the privacy and security of personal data belonging to Users (“you”, “your”, “yours”) and processed in accordance with requirements of the Platform. The protection of your privacy is an important concern to which we pay special attention to when processing your personal data with respect to our business processes. We process personal data collected during visits to our Platform according to the legal provisions of India.

 

Scope

This privacy notice describes the information about you that TML collects through the Platform(s), how that information is used, maintained, shared, protected and how you can update it. It applies to personal data received by TML from India, and personal data processed outside India for the purpose of providing goods and services to data principals in India in digital format (and non-digital format, if digitized subsequently). Please note that we are not obligated to observe compliances in relation to such sets of personal data that are excluded from the scope of applicable law (including personal data that has been made publicly available by the data principal to whom such data belongs or by any person acting under a legal obligation to disclose the personal data). 

This document supersedes any previous policy / communication on this subject

 

Customer[1] shall mean any person that’s visits the platform (s) with and intention to search, browse and Booking Tata Motors commercial vehicle directly from Tata motors authorized dealership.

                          

Dealers[2]shall mean any person engaged as a dealer in TML’s Vehicle sales network, lawfully owning / possessing / operating dealership showrooms, and shall include any assignees.

 

Visitors[3]  shall mean any person that visits the Platform(s)

Privacy Policy

 

Tata Motors Limited (henceforth referred as 'TML') is committed to protecting the privacy and security of your personal data processed in accordance with the requirements of the Online Sales Platform. The protection of your privacy in the processing of your personal data is an important concern to which we pay special attention in our business processes. We process personal data collected according to the applicable legal provisions. This Privacy Policy further sets out your rights pertaining to the protection of your personal data. This privacy policy describes the information about you that TML collects, how that information is used, maintained, shared, protected and how you can update it. It also applies to all personal data received by TML in any format, including electronic or paper. It is effective on the date posted below and applies to our use of your information post effective date. Certain sections of the website may require your personal data in order to cater your needs efficiently and to provide better information for the products, services or information as requested by you during your visit to the website. You are requested to read and understand the terms and condition as stipulated below in connection with the use of our website. The usage of website includes unconditional acceptance of these terms by you. This website should be accessed only if you agree to the terms and conditions of our Privacy Policy and if you voluntarily consent and authorize Tata Motors Limited to use all the information provided by you in accordance with its Privacy Policy. If you do not agree to the terms of our Privacy Policy or are dissatisfied for any reason in relation to the websites and / or any contents thereof, you are prohibited from further accessing the website. 

 

Personal data that we collect

Personal data refers to data that lets TML know the specifics of who you are and which may be used to identify, contact or locate you (e.g. name, age, gender, mailing address, telephone number and e-mail address). We collect your personal data when you provide us in various scenarios such as in response to a survey, in case you register for events, when registering for personalised services, request information about product or use our services or request customer support. We may also specifically ask you to provide your personal data relevant for the scenarios such as your name, address, proof of identity, zip code, phone number, email address, IP Address, location data, information about your device, etc. Please note that our obligation or responsibility as a data fiduciary is limited to such instances where we specifically request for your personal data on our Platforms and does not include scenarios where you may, of your own accord, or on instructions of another party upload personal data on the Platforms or share personal data with another person. In latter scenarios, you / relevant third party will be the data fiduciary and/or responsible for compliance with obligations under applicable law including in relation to obtaining consent (subject to due notice) from concerned data principals. Not all of the personal data TML holds about you, will always come directly from you. It may, for example, come from your employer or other users. However, TML collects personal data about you when you interact with this site and/or utilize services offered on the Online Sales Platform. For example (illustratively but not exhaustively):

  • If you apply for a job or other staffing opportunity through this site, you will be asked to submit your resume and as well as other contact information such as your email address, phone number and mailing address. We will use this information to consider you for the job opening that you specify. We may also use this information to contact you regarding other staffing opportunities, both opportunities advertised on this site.
  • We may use a third party service provider to assist us with some features of our site. Our service provider will receive your information on our behalf and will not be permitted to use it for any other purpose.
  • We may also ask you for personal data in connection with other interactions you have with this website, including when you answer a survey and when you report a problem with this site or services offered on this site.
  • We collect your personal data if you wish to do business with us in the form of dealership / distributorship (through dealer / distributor applications).
  • We also collect personal data from third parties such as our partners, service providers, and publicly available websites, to offer services we think may be of interest and to help us maintain data accuracy, provide, and enhance the services.
  • Payment information including credit/ debit card details, Bank account number, Bank account type, Bank names, etc. may be collected by our associated payment gateways. 
  • Vehicle details including model, year, colour, RTO registration number and selling details which includes Invoice particulars, warranty details, dealer name and year of purchase are collected in the ordinary course of business.
  • Details of how you used our website.
  • Device event information such as caches, system activity, hardware settings, browser type, browser language, the date and time of your visit, time spent on those pages and other statistics and referral URL.

By providing us your personal data pertaining to your relatives, friends or any other third parties, you confirm and guarantee that you have received an appropriate consent from such relatives, friends or third parties for the disclosure of such personal data to us for the purposes/ usages as set out in this Privacy Policy.          

This website should be accessed only if you agree to the terms and conditions of our Privacy Policy and if you voluntarily consent and authorize Tata Motors Limited to use all the information provided by you in accordance with its Privacy Policy. If you do not agree to the terms of our Privacy Policy or are dissatisfied for any reason in relation to the Websites and / or any contents thereof, you are prohibited from further accessing the Website.

 

TML websites may contain links to other websites. TML shall not be responsible for the privacy or the content of such websites even if:

  • You accessed the third party website using links from our website; or
  • You linked to our website from a third party website.

How we use your personal data

We only use your personal data if we have a proper reason or a legitimate purpose for doing so. We only use your data for one or more of these reasons:

  • To fulfil a contract we have with you, or
  • If we have a legal duty to use your data for a particular reason, or
  • When we get your consent to use it, or
  • To fulfill the purpose for which we have collected your personal data; or
  • When it is in our legitimate interests which are our business or commercial reasons for using your data, but even so, we will not unfairly put our legitimate interests above what is best for you.

The use of your information is subject to the privacy notice in effect at the time of our use. TML uses information provided to us for our general business use. This may include the following purposes:

  • To respond to your requests;
  • To provide services to you including customer services issues;
  • To enable third parties to provide you with support services or to connect you with third parties to avail their services (subject to your express consent);
  • To send communications to you about our or our affiliates’ current services, new services or promotions that we are developing, and opportunities that may be available to you;
  • To alert you to new features or enhancements to our services.
  • To communicate with you about job or career opportunities about which you have inquired;
  • To ensure that our site and our services function in an effective manner for you;
  • To measure or understand the effectiveness of advertising and outreach.
  • To send you important information regarding the Websites, changes in terms and conditions, user agreements, and policies and/ or other administrative information.
  • Marketing and events: We use personal information to deliver marketing and event communications to you across various platforms, such as email, telephone, text messaging, direct mail, and online. If we send you a marketing email, it will include instructions on how to opt out of receiving these emails in the future. We also maintain email preference centres for you to manage your information and marketing preferences. Please remember that even if you opt out of receiving marketing emails, we may still send you important service information related to your accounts and subscriptions.
  • To investigate potential breaches, or to protect the rights, property or safety of TML and the Users of our website.
  • Legal obligations: We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of a crime; loss prevention; or fraud. We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate:
  • Under applicable law, which may include laws outside your country of residence;
  • To respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence;

In addition to the standard information in relation to use of personal data for all Users, kindly also see additional requirements below that may apply to you as a specific category of User, depending on our specific contractual arrangements with such category of User, in which case the policies and terms contained herein and those contained in the contract or agreement shall be read together harmoniously in favour of the widest interpretation compliant with applicable law requirements.

We endeavour to collect only such information that is reasonably necessary to perform services for you or to respond to your inquiries. You are responsible for ensuring that the information you provide is accurate, complete and current.

By giving your contact details on our Website, Mobile Application or any other mode, you agree to receive communication from TML or any of its associate/ affiliate over email, SMS, phone call and/ or WhatsApp.

 

Circumstances where TML is not the data fiduciary

You understand and acknowledge that all of the personal data that you provide in order to avail our services is completely voluntary and TML has not solicited any such personal data from you, except where marked as mandatory by TML. Where you have shared personal data on a voluntary basis and / or TML does not determine the means of processing your personal data and / or undertakes processing on behalf of another entity, TML shall not be the data fiduciary with respect to such personal data.

TML understands that there are various instances where the User may undertake activities pertaining to personal data of other data principals (including its drivers and /or individuals with log-in access) while utilizing the Platform. In this regard the User shall be the data fiduciary with respect to such data principals. Please note that where a User enables additional login credentials to use / operate such User’s account, the User or the person with additional log-in access, as the case may be and in accordance with applicable law, will qualify as the data fiduciary.

 

When we share personal data

TML shares or discloses personal data when necessary to provide services or conduct our business operations. If TML intends to transfer your personal data outside, TML shall take steps to ensure that your privacy rights continue to be protected and shall ensure that adequate safeguards are in place. Nor do we collect any information about criminal convictions and offences.

TML may, with your consent, disclose information about you to unaffiliated third-party customers of TML in connection with your application for staffing opportunities advertised on this site, or in connection with opportunities advertised on a website of one of our affiliates. For example-

  • Within TML: Our businesses around the world are supported by a variety of TML teams and functions, and personal information will be made available to them if necessary for the provision of services, account administration, sales and marketing, customer and technical support, and business and product development. All of our employees and contractors are required to follow our data protection and security policies when handling personal data.
  • Affiliates: Our parent company, subsidiaries, joint ventures, group and associate companies. These entities may use this information for the purposes outlined above.
  • Dealers: Our Authorized Dealers which are independently owned and operated. They may use this information for their everyday business purposes, including marketing, customer service, fulfilment and related purposes.
  • Distributors: Our Authorized Distributors which are independently owned and operated. They may use this information for their everyday business purposes, including marketing, customer service, fulfilment and related purposes.
  • Our business partners: We occasionally collaborate with other organizations to deliver co-branded Services, provide content, or to host events, conferences, and seminars. As part of these arrangements, you may be a customer of both TML and our partners, and our partners and we may collect and share information about you. TML will handle personal data in accordance with the privacy notice.
  • Our third-party service providers: We collaborate with service providers around the world for any support needed. Personal data may be made available to these parties only when necessary to fulfil the services they provide to us, such as software, system, and platform support; direct marketing services; cloud hosting services; advertising; and order fulfilment and delivery. Our third-party service providers are not permitted to share or use personal data we make available to them for any other purpose than to provide services to us. However, for data aggregation purposes we may use and monetize anonymized personal data at our discretion. Any such data aggregation would be either anonymized or pseudonymized, as required to avoid personal identifiable data. By using the Onlines Sales Platform, you are hereby consenting to submission of the data collected with the individuals, agencies and third-party service providers that we mention above who we hire to provide various services to us. These third-party service providers may include but are not limited to: payment processors, all centres, data management services, help desk providers, accountants, law firms, auditors, shopping cart and email service providers, and shipping companies. 
  • Third parties for legal reasons: We will share personal data when we believe it is required, such as:
  • To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence.
  • In the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
  • To protect our rights, users, systems, and services.

Where we store and process personal data

TML as a global organization, we take steps to ensure that the information we collect is processed according to this privacy notice and the requirements of applicable law wherever the data is located. TML has networks, databases, servers, systems, support, and help desks located throughout our offices around the world. We collaborate with third parties such as cloud hosting services, suppliers, and technology support located around the world to serve the needs of our business, workforce, and customers. We take appropriate steps to ensure that personal data is processed, secured, and transferred according to applicable law.

In some cases such as to provide the product or service you have requested, we may need to disclose or transfer your personal data within TML or to third parties if required. When we transfer personal information to other countries in which applicable laws do not offer the same level of data privacy protection as in your home country, we take measures to provide an appropriate level of data privacy protection. For example, we use approved contractual clauses, multiparty data transfer agreements, intragroup agreements, and other measures designed to ensure that the recipients of your personal information protect it.

How we secure personal data

TML uses appropriate technologies and procedures to protect your personal data. Our information security policies and procedures are closely aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet our business needs, changes in technology, and regulatory requirements. For example,

  • Policies and procedures: TML employs reasonable technological, physical and operational security procedures intended to protect your personal data from loss, misuse, alteration, or unintentional destruction. Our security measures are periodically reviewed and updated in an effort to provide appropriate security for all the data collected about you.
  • We place appropriate restrictions on access to your personal data.
  • We implement appropriate security measures and controls, including monitoring and physical measures, to store and transfer data securely.
  • We require privacy, information security, and other applicable training on a regular basis for our employees and contractors who have access to personal data.
  • We take steps to ensure that our employees and contractors operate in accordance with our information security policies and procedures and any applicable contractual conditions.
  • We require, with contracts and security reviews, our third-party vendors and providers to protect any personal data with which they are entrusted in accordance with our security policies and procedures.

Cookies

From time to time, we may use a standard technology called a “cookie”. A cookie is a small text file that is placed on a computer or other device and is used to identify the user or device and to collect information. Cookies are typically assigned to one of four categories, depending on their function and intended purpose: necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes. A cookie cannot retrieve any other data from your hard drive, pass on computer viruses, or capture your e-mail address. Currently, websites use cookies to enhance the user's visit; in general, cookies can securely store a user's ID and password, personalize home pages, and identify which parts of a site have been visited. It is possible to set your browser to inform you when a cookie is being placed. This way you have the opportunity to decide whether to accept the cookie. By showing how and when our visitors use this web site, this information can help us to improve our site on a continual basis. TML does not merge or associate our cookie information with any personally identifiable information obtained by us from third parties.

We may use cookies to: (i) count your number of visits to the Website; (ii) accumulate anonymous, aggregate, statistical information on website usage; (iii) providing the appropriate content according to your need or viewing history; and (iv) save your password (only on allowing to do so by you) so you don't have to re-enter it each time you visit our sites. You can also disable cookies. By modifying your browser preferences, you can accept or reject all cookies, or request a notification when a cookie is set.

 

Strictly necessary cookies

These cookies are necessary for proper functioning of the website, such as displaying content, logging in, validating your session, responding to your request for services, and other functions. Most web browsers can be set to disable the use of cookies. However, if you disable these cookies, you may not be able to access features on our website correctly or at all.

Children

We do not provide services directly to children or proactively collect their personal information. Parents or guardians may authorise person under the age of 18 years (child) / persons with disabilities to use our website provided they assume all responsibility and legal liability for the conduct of such child/persons with disabilities including, without limitation, monitoring the child's access and use of the Online Sales Platform.

If we learn that personal data of a child / person with disabilities has been collected without verifiable parental / legal guardian consent, then TML may take the appropriate steps to delete such information. However, if you discover your child / the person with disability under your guardianship has submitted their data to TML, you may request to have such data deleted from TML's database by sending an e-mail request. Upon receiving the request, TML shall ensure to delete such information from its database.

Your rights and your personal data

We respect your right to access and control your information, and we will respond to requests for information and, where applicable, will correct, amend, or delete your personal information.

 

In such cases, we will need you to respond with proof of your identity before you can exercise these rights.

  • The right to access information: At any point you can contact us to request a summary of the personal data relating to you that we hold. Once we have received your request we will respond within one month. There are no fees or charges for the first request but additional requests for the same data may be subject to an administrative fee. You do not have to provide a reason for requesting access, but you will need to provide some proof of your identity correlating to the personal data sought access to. 
  • The right to correct and update the information: If the data we hold on you is out of date, incomplete or incorrect, you can inform us and your data will be updated.
  • The right to have your information erased: Subject to applicable law, if you feel that we should no longer be using your personal data or that we are illegally using your personal data, you can request that we erase the personal data we hold. When we receive your request we will confirm whether the data has been deleted or the reason why it cannot be deleted (for example because we need it for our legitimate interests or regulatory purpose(s).
  • The right to object to processing: You have the right to request that we stop processing your data. Upon receiving the request, we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data. Even after you exercise your right to object, we may continue to hold your data to comply with your other rights or to bring or defend legal claims.
  • The right to withdraw your consent to the processing at any time for any processing of data to which consent was sought. Subject to applicable laws, you can withdraw your consent easily by telephone, email, or by post (refer to consent withdrawal form to the Data Protection Representative Office ).
  • The right to object to the processing of personal data where applicable.
  • The right to lodge a complaint with the Data Protection Representative.
  • You can ask us or third parties who we have engaged, to stop sending you marketing messages at any time by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.
  • You can always opt out of receiving further email correspondence from us or our affiliates. 

In relation to the above, you can exercise such right by sending us an email with your request to dpr@tatamotors.com along with the necessary proof of identity requirements that we may require prior to processing such request from you. 

 

How long do we keep your personal data

We retain personal information for as long as we require it to fulfill the purpose for which it was collected (unless you withdraw your consent earlier) and/or pursuant to legal or business purposes. In determining data retention periods, TML takes into consideration local laws, contractual obligations, and the expectations and requirements of our customers. When we no longer need personal information, we securely delete or destroy it.

 

Changes

TML may update privacy policy from time to time. We encourage you to check our website frequently to see the current privacy policy so that you may stay informed of how TML is using and protecting your information. Whenever a change to this policy is significant, we will place a prominent notice on this website and provide an updated effective date.

Limitations 

We are not liable for breach of security during internet transmission of personal information, including any unintended loss, misuse, alteration or disclosure of such information. Furthermore, notwithstanding anything to the contrary, we will not be responsible for any loss, damage or misuse of personal information, if such loss, damage or misuse is attributable to an event of force majeure or to any reason attributable to you.

We may disclose your personal data in good faith or whenever necessary to comply with a legal obligation or if disclosure was required by any law or by order of any competent court or statutory authority, to protect and defend the legal rights or any Intellectual Property Rights.

Your Specific Obligations

You warrant to us that you will not use the Website for any purpose that is illegal or prohibited by these terms of use. You shall not use this Website in any manner which could damage, disable, overburden or impair the Website or interfere with any other party's use and enjoyment of this Website. You shall not modify, copy, distribute, transmit, display, reproduce, publish, license, create derivative works from, transfer, or sell any data, services obtained from TML website without our prior consent, directly or indirectly in any medium. Neither these materials nor any portion thereof may be stored in a computer except for personal and non-commercial use.

 

TML reserve the right, in its sole discretion, to terminate your access to whole or any part of TML website and the related services or any portion thereof at any time without notice.

 

Governing law/Jurisdiction

This Privacy Policy shall be governed by the laws of India; and the Courts of Mumbai (India) shall have the exclusive jurisdiction to try any dispute arising thereof.

 

Question/Contact Information

If you have questions or comments regarding this Privacy Notice Policy, please contactour Data Protection Representative at:

Email: dpr@tatamotors.com