INTRODUCTION:

DrukRide PRIVATE Limited (hereinafter “DrukRide”) recognizes the importance of privacy of its users and also of maintaining confidentiality of the information provided by its users as a responsible data controller and data processor. This Privacy Policy provides for the practices for handling and securing user's Personal Information (defined hereunder) by DrukRide and its subsidiaries and affiliates. This Privacy Policy is applicable to any person (‘User’) who purchases, intends to purchase, or inquire about any product(s) or service(s) made available by DrukRide through any of DrukRide’s customer interface channels including its website, mobile site, mobile app & offline channels including call centers and offices (collectively referred herein as "Sales Channels").

For the purpose of this Privacy Policy, wherever the context so requires "you" or "your" shall mean User and the term "we," "us," "our" shall mean DrukRide. For the purpose of this Privacy Policy, Website means the website(s), mobile site(s) and mobile app(s). By using or accessing the Website or other Sales Channels, the User hereby agrees with the terms of this Privacy Policy and the contents herein. If you disagree with this Privacy Policy please do not use or access our Website or other Sales Channels. This Privacy Policy does not apply to any website(s), mobile sites and mobile apps of third parties, even if their websites/products are linked to our Website. User should take note that information and privacy practices of DrukRide’s business partners, advertisers, sponsors or other sites to which DrukRide provides hyperlink(s), may be materially different from this Privacy Policy. Accordingly, it is recommended that you review the privacy statements and policies of any such third parties with whom they interact. This Privacy Policy is an integral part of your User Agreement with DrukRide and all capitalized terms used, but not otherwise defined herein, shall have the respective meanings as ascribed to them in the User Agreement.


B. USERS OUTSIDE THE GEOGRAPHICAL LIMITS OF BHUTAN:

Please note that the data shared with DrukRide shall primarily be processed in Bhutan and such other jurisdictions where a third party engaged by DrukRide may process the data on DrukRide’s behalf. By agreeing to this policy, you are providing DrukRide with your explicit consent to process your personal information for the purpose(s) defined in this policy. The data protection regulations in Bhutan or such other jurisdictions mentioned above may differ from those of your country of residence. If you have any concerns about the processing of your data and wish to withdraw your consent, you may do so by writing to the following email id: privacy@drukride.com.

However, if such processing of data is essential for us to be able to provide service to you, then we may not be able to serve or confirm your bookings after your withdrawal of consent. For instance, if you want to book a bus journey, then certain personal information of yours like contact details, gender, location details, etc. may have to be shared by us with our bus operator and they may further process this information for making suitable arrangements for your journey. A withdrawal of consent by you for us to process your information may: Severely inhibit our ability to serve you properly, and in such a case, we may have to refuse the booking altogether, or Unreasonably restrict us to service your booking (if a booking is already made) which may further affect your trip or may compel us to cancel your booking.


C. TYPE OF INFORMATION WE COLLECT AND ITS LEGAL BASIS:

The information as detailed below is collected for us to be able to provide the services chosen by you and also to fulfill our legal obligations as well as our obligations towards third parties as per our User Agreement.


D. HOW WE USE YOUR PERSONAL INFORMATION:

The Personal Information collected may be used in the following manner: While making a booking: While making a booking, we may use Personal Information, including payment details, which include cardholder name, credit/debit card number (in encrypted form) with expiration date, banking details, wallet details, etc., as shared and allowed to be stored by you. Surveys: We value opinions and comments from our Users and frequently conduct surveys, both online and offline. Participation in these surveys is entirely optional. User Generated Content (UGC): DrukRide provides an option for its users to post their experiences by way of review, ratings, and general poll questions. The UGC that DrukRide collects may include reviews, ratings, questions and answers, and crowd-sourced data collection. Marketing Promotions, Research, and Programs: Marketing promotions, research, and programs help us identify your preferences, develop programs, and improve user experience.

E. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION:

DrukRide will retain your Personal Information on its servers for as long as is reasonably necessary for the purposes listed in this policy. In some circumstances, we may retain your Personal Information for longer periods of time, for instance, where we are required to do so in accordance with any legal, regulatory, tax, or accounting requirements.


F. COOKIES AND SESSION DATA:

Cookies: DrukRide uses cookies to personalize your experience on the Website and the advertisements that may be displayed. Cookies are small pieces of information that are stored by your browser on your device's hard drive. Automatic Logging of Session Data: Each time you access the Website, your session data gets logged. Session data may consist of various aspects like the IP address, operating system, type of browser software being used, and the activities conducted by the User while on the Website.

G. WITH WHOM YOUR PERSONAL INFORMATION IS SHARED:

Service Providers and Suppliers: Your information shall be shared with end service providers like hotels, bus service providers, cab rental, or any other suppliers who are responsible for fulfilling your booking. Companies in the Same Group: In the interests of improving personalization and service efficiency, we may, under controlled and secure circumstances, share your Personal Information with our affiliate or associate entities. Business Partners and Third-Party Vendors: We may also share certain filtered Personal Information with our corporate affiliates or business partners who may contact customers to offer certain products or services. Disclosure of Information: DrukRide may disclose User's Personal Information if required to do so by law, required by any enforcement authority for investigation, by court order, or in reference to any legal process.


H. HOW WE PROTECT YOUR PERSONAL INFORMATION:

All payments on the Website are secured. This means all Personal Information you provide is transmitted using TLS (Transport Layer Security) encryption. DrukRide has stringent security measures in place to protect against the loss, misuse, and alteration of the information under our control.


I. WITHDRAWAL OF CONSENT AND PERMISSION:

You may withdraw your consent to submit any or all Personal Information or decline to provide any permissions on its Website as covered above at any time. If you choose to do so, your access to the Website may be limited, or we might not be able to provide the services to you. You may withdraw your consent by sending an email to privacy@drukride.com.


J. YOUR RIGHTS QUA PERSONAL INFORMATION:

You may access your Personal Information from your user account with DrukRide. You may also correct your personal information or delete such information (except some mandatory fields) from your user account directly. If you don’t have such a user account, then you can write to privacy@drukride.com.


K. ELIGIBILITY TO TRANSACT WITH DRUKRIDE:

You must be at least 18 years of age to transact directly with DrukRide and also to consent to the processing of your personal data.


L. CHANGES TO THE PRIVACY POLICY:

We reserve the rights to revise the Privacy Policy from time to time to suit various legal, business, and customer requirements. We will duly notify the users as may be necessary.