Privacy Policy
Last updated
This policy explains what Nomad collects when you rent a vehicle or equipment from us, use our app, or visit this website — and what we do with it.
We hold driving licences and identity documents, and our vehicles carry GPS trackers. Both are unusually sensitive, so this policy says plainly what happens to them rather than burying it.
01What we collect
Only what is needed to rent you a vehicle or equipment and to meet our legal obligations.
Account information
- Your mobile number, which is your identity with us
- Name, and email address if you provide one
- Date of birth, used to confirm you meet the minimum age for the vehicle
- If you sign in with Google or Apple, the identifier that provider gives us. We never receive your password. Apple private-relay addresses are treated as ordinary email addresses
Identity and licence documents
To rent a licence-required vehicle we collect images of your driving licence and one government photo ID, and from them the licence number, the holder name, date of birth, issue and expiry dates, and the vehicle classes you are permitted to ride. This is the most sensitive data we hold and it is treated separately from everything else. See Security.
Booking and rental records
- Dates, vehicle, hub, and the delivery address and coordinates if you request delivery
- Photographs taken at handover and return recording vehicle condition, odometer and fuel level
- Your signature on the rental agreement
- Any damage reports raised against a rental
Payment information
Online payments are processed by Cashfree Payments. Card and bank details are entered on their systems and never reach ours. We store the transaction reference, the amount, the method used (UPI, card, netbanking) and whether it succeeded. Cash and UPI paid at the counter is recorded as an amount, a method and the staff member who took it.
Vehicle location
Our vehicles carry GPS trackers. While a vehicle is rented to you, its location is effectively your location, and we want to be plain about that. We use it to recover overdue and stolen vehicles, to verify distance travelled against the odometer, and to reach you if something goes wrong on a remote road. We do not use it to build a profile of your movements or share it for marketing.
App and website usage
- Device type, operating system and app version
- A push notification token, if you allow notifications
- Website analytics through Google Analytics 4. These are off by default until you accept them — see Cookies and analytics
02Why we use it
| Purpose | Data used |
|---|---|
| Creating and managing your account | Phone, name, email, sign-in identifiers |
| Confirming you may legally ride the vehicle | Licence images, licence number and classes, date of birth |
| Taking and fulfilling a booking | Booking details, delivery address, payment records |
| Recording vehicle condition and resolving damage disputes | Inspection photographs, odometer, signature |
| Recovering overdue or stolen vehicles | Vehicle GPS location during the rental period |
| Booking confirmations, reminders and receipts | Phone, email, push token |
| Tax invoicing and statutory records | Name, address, payment and invoice records |
| Understanding how the website is used | Analytics data, only with your consent |
We do not sell your personal data. We do not use your identity documents, location or booking history for advertising.
04How we protect it
- Identity documents are stored in a private bucket with no public access, separate from ordinary media such as vehicle photographs
- Staff can only view a document through a link that expires after five minutes, and every single view is logged against the staff member who opened it
- Licence numbers are encrypted at rest
- All traffic to our website, app and API is encrypted in transit
- Staff access is limited by role, and accounts that can issue refunds require two-factor authentication
- We never keep your original physical documents. We photograph them and hand them straight back
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board of India as required by law.
05How long we keep it
| Data | Kept for |
|---|---|
| Account details | Until you delete your account |
| Identity and licence documents | Up to 12 months after your most recent completed rental, then deleted. Deleted sooner on request where no dispute is open |
| Booking and rental records | As long as required by Indian tax and accounting law |
| Invoices and payment records | As required by Indian tax law. These cannot be deleted on request |
| Inspection photographs and damage reports | 24 months after the rental, or until a dispute is resolved |
| Raw vehicle GPS points | 90 days, then deleted. Only trip totals such as distance are kept |
| Analytics data | Per Google Analytics retention settings, currently 14 months |
06Your rights
Under India’s Digital Personal Data Protection Act, 2023, you may ask us to do any of the following, at no charge:
- Access a summary of the personal data we hold about you and who we have shared it with
- Correct anything inaccurate, incomplete or out of date
- Erase your data where we no longer need it for the purpose it was collected, or for a legal obligation
- Withdraw consent at any time, as easily as you gave it. This does not affect anything done before you withdrew it
- Nominate another person to exercise these rights on your behalf if you die or become incapacitated
- Complain to us first, and to the Data Protection Board of India if we do not resolve it
Email [email protected] from the address on your account, or message us on the number below. We aim to respond within 30 days.
Grievance Officer
Grievance Officer, Nomad, Lake City Plaza, Karan Nagar, Srinagar, Jammu & Kashmir 190010. Email [email protected], telephone +91 88999 21113.
07Deleting your account and data
You can ask us to delete your Nomad account and the personal data attached to it at any time.
From the app
Open the Nomad app, go to the You tab, choose Account settings, then Delete account, and confirm.
By email or message
Email [email protected] with the subject “Delete my account” from the address on your account, or message +91 88999 21113 from your registered mobile number. We will verify it is you before acting.
What gets deleted
- Your profile: name, email, date of birth and sign-in identifiers
- All identity and licence documents and the details extracted from them
- Saved vehicles, notification preferences and device push tokens
- Any location data associated with your past rentals
What we must keep, and why
Indian tax and accounting law requires us to retain invoices and financial records for a fixed period, and we cannot delete them on request. These records are reduced to the minimum needed for that purpose and are not used for anything else. We also keep records relating to an open dispute, insurance claim or unreturned vehicle until the matter is closed.
Deletion is completed within 30 days of us verifying your request, and it cannot be undone. If you have a booking in progress or an unsettled balance, we will ask you to complete it first.
09Children
Nomad is not intended for anyone under 18, and we do not knowingly collect data from children. Renting any licence-required vehicle requires a valid driving licence, which in India cannot be held before 18. If you believe a child has given us personal data, contact us and we will delete it.
10Changes to this policy
We will update this page when our practices change, and the date at the top will always tell you when it last changed. If a change materially affects how we use your data, we will tell you in the app or by message rather than relying on you to notice.
Questions about this policy
NomadLake City Plaza, Karan Nagar, Srinagar, Jammu & Kashmir 190010
[email protected] · +91 88999 21113