PRIVACY POLICY

 

Mahindra & Mahindra Limited having its registered office at Gateway Building, Apollo Bunder, Colaba, Mumbai 400 001, Maharashtra, India (“we” “us” “our” “M&M”) is committed to protecting the privacy and security of your Personal Data. Your privacy is important to us.

 

your Personal Data for the purpose of your participation and consumption of services offered by us through our eMPOWER App for the purpose of rewarding you for using Mahindra Genuine products (“Application”) and how you can exercise your privacy rights. The Application allows for scanning the QR code on Mahindra Products to accumulate and redeem reward points.

This Policy shall be referred and read as an integral part of the Terms of Use of the Application. Before using our Application, you are advised to carefully review this Privacy Policy including the Terms of Use of the Application. If you do not agree with the terms of this Policy or Terms of Use, please do not access this Application. By using our Application, you are giving us your consent to process of your Personal Data in the manner as set forth in this Policy.

 

 

When you interact with us, we collect different types of information including your Personal Data from you based on the type of interaction.

 

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

 

“Processing”, “Processed”, “Process” in relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital Personal Data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

We endeavour to process only such information that is reasonably necessary to provide a service requested by you or to respond to your enquiries.

 

(a) IDENTIFIERS INFORMATON

 

When you interact with our application, we collect the following Personal Data from you directly:

 

i. For Your Registration:

• Name
• Mobile number
• Workshop Address
• Bank/UPI details
• PAN Number (Optional)

 

 

 

 

(b) ELECTRONIC INFORMATION 

The Application collects the following information about you when you interact with it:

 

• The region, or city from where the Application is accessed
• Your GPS location, if allowed by you
• The search queries used
• The remote log access, along with the date, time, action of remote logging and the result
• The selected page on our Application (URL)
• The date and time of your visit
• Your IP Address
• Name and version of your web browser

 

Electronic information is generally non-identifying in nature, but to process such usage information and to make it feasible for our legitimate business interests like promoting system security and stability, allowing for error and performance analysis, and serving internal statistical needs, we may associate the usage information with other information collected from you and such combination may be treated as your Personal Data. This data also enables us to optimize our online services.

 

You are under no obligation to provide the Personal Data that we ask you for. However, if you do not provide your Personal Data, you will not be able to make use of the features and functions of the Application.

 

We may use a third-party service provider to assist with some features of our Application. Our service provider will receive your Personal Data on our behalf but will not be permitted to use it for any other purpose.

 

 

The Application contains some pages that are hosted and served by third parties. In this case, M&M is not responsible for the privacy policies/notices/statements or the content of such Third-Party/Software or Services even if you accessed the third-party website using links from our Application.

 

If you provide your Personal Data to any third-party website, then the use of your Personal Data is governed by their privacy policies. This Policy applies to our Application only. We encourage you to be aware when you leave our Application and to read the privacy policies of other Third-Party Software Applications that may collect your Personal Data.

3. PURPOSE FOR WHICH WE PROCESS YOUR PERSONAL DATA

 

We collect your Personal Data for the following purposes:

 

 

• Make this Application and its services available to you and to further optimize and develop the same
• Provide chat services including customer services to you via the Application
• Identify your geographic location in connection with the required services
• Recognize, prevent, and investigate attacks on this Application
• Communicate with you
• Provide you with relevant information regarding products and services offered by Mahindra Group Companies through your mobile phone, if you opt in for the same.
• Facilitate third-party features

 

 

• Use or disclose data collected from mobile's location, contacts and camera in Application's features
• Create usage statistics of this Application
• Manage your accounts, services, and other personalized features, to improve the user experience of the Application
• Assess and improve your user experience on the Application
• Be able to recognize, prevent and investigate attacks on this Application
• Contact you via email for surveys or feedback, if you opt in for the same;
• Protect our rights and legitimate interests.
• Comply with legal and regulatory obligations
• Enforce any legal right or claim

 

 

• Subject to receiving your consent, send newsletters/communications about our own or that of our affiliates’ current services, new services, or promotions that we are developing, and opportunities that may be available to you
• Subject to receiving your consent, send any video and audio advertisement to you.

 

 

We use your Personal Data only if we have a legal basis for doing so. In case, we wish to use your Personal Data for purposes other than the legitimate uses, we shall seek specific consent from you in a separate process prior to processing your Personal Data for such additional purposes.

We shall also use your Personal Data for legal and regulatory purposes, such as:

 

1. To ensure compliance with our legal obligations and to also comply with our obligations towards public authorities;
2. To enforce our terms and conditions;
3. To enforce any legal right or claim;
4. For legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention or prevention of fraud;
5. For our internal and external audit requirements and for information security purposes;
6. As otherwise described to you at the time of collection of your Personal Data.

 

 

As far as this is necessary for the purposes set out above, we will share your Personal Data with the following recipients who either have a need to know and who will process it for us based on our instructions and for no other purpose:

 

M&M companies and potential partnerships: Our businesses around the world are supported by different teams and functions, and Personal Data will be made available to them, if necessary, for the provision of product and/or services, account administration, sales and marketing, customer and technical support, and business and product development. All our employees and contractors are required to follow our data protection and security policies when handling Personal Data. Your Personal Data might also have to be shared in the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

 

External service providers: Occasionally, to provide our services, it is necessary to collaborate with external service providers. These external service providers shall process your Personal Data on our behalf subject to appropriate safeguards only insofar as it is necessary for them to provide their services to us. Our prior authorisation is required before they are permitted to transfer responsibility for processing Personal Data to a third-party. We may share your Personal Data with our channel partners/service partners/third-party entities for the purpose of completing the transaction or establishing the relationship.

 

We only share your Personal Data to recipients that have an adequate level of data protection by implementing appropriate technical and organizational security measures, or we take measures to ensure that all recipients provide an adequate level of data protection as prescribed by applicable law. We do not sell your Personal Data to anyone.

Courts and Public authorities: We will share your Personal Data when required for the following purposes:

 

• To comply with legal obligations and respond to requests from government agencies, including law enforcement agencies and other public authorities.
• To prevent or detect or investigate offences or cyber incidents or for the prosecution or punishment of offences.

• To raise or defend against legal claims.
• To protect our users, systems, and product and/or services.

 

 

Notwithstanding the obligation on us to put in place all necessary means to maintain the accuracy of your Personal Data, you agree to provide us with accurate Personal Data at all times and you will notify us promptly upon any changes to your Personal Data.

 

 

We implement appropriate technical and organizational measures in relation to the information and Personal Data that is processed by us. We take reasonable measures to protect all Personal Data from unauthorised processing or accidental disclosure, acquisition, sharing, alteration, misuse, destruction or loss or unauthorised access and modification that compromises the confidentiality, integrity, and availability of such data.

While we endeavour to always protect our systems, applications, operations and information against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe and secure from intrusion by others.

 

You too have an important role in protecting your Personal Data. You should not share your user identity, password or other authentication data provided to you with anyone. If you have any reason to believe that your user identity or password has been compromised, please contact us immediately by using the contact details given in paragraph 12 below.

 

 

We respect your right to access and control your Personal Data, and we will respond to requests to exercise your rights under applicable laws and, where applicable, will correct, update, or erase your Personal Data.

 

Please note that applicable law might require that we cannot comply with every request. We will be required to retain your Personal Data due to legitimate business/ regulatory/ statutory retention requirements despite your request for erasure.

 

You have the following rights:

 

• Right to access information about your Personal Data: At any point, you can contact us for a summary of your Personal Data we hold about you, the processing activities undertaken with respect to such Personal Data, the identities of all those persons with whom your Personal Data has been shared by us along with a description of the Personal Data so shared, and any other information related to your Personal Data and its processing.

• Right to request correction: If your Personal Data is incomplete, inaccurate or misleading, or out of date, you can inform us about the same and your Personal Data will be corrected, completed, or updated, as the case may be.
• Right to request erasure: If you believe that we should discontinue the use of your Personal Data, you have the option to request the deletion of your Personal Data, unless retention is necessary for compliance with any law for the time being in force.
• Right of grievance redressal: We are committed to protecting your Personal Data collected by us. However, in case of any act or omission regarding the performance of our obligation in relation to your Personal Data or in the exercise of your rights under applicable law, we encourage you to contact us using the contact details provided in paragraph 12.
• Right to nominate: In the event of death or incapacity to exercise these rights, you can nominate any other individual to exercise such rights.
• Right to withdraw your consent to process your Personal Data: You can withdraw/revoke your consent at any time, to the processing of your Personal Data for which consent was sought earlier. You can withdraw your consent easily by contacting us using the contact details given below in paragraph 12. The withdrawal of consent previously granted for the processing of Personal Data does not affect the lawfulness of the processing until the withdrawal. However, opting out will result in cessation of the respective services.

For exercising any of your rights, you can contact us using the contact details provided in paragraph 12. We will need you to furnish proof of your identity before you can exercise these rights. M&M may not be able to process any requests made in the event you fail to establish your identity or if M&M is unable to authenticate your identity.

 

It is important that the Personal Data we hold about you is accurate and updated. Please write to us if the Personal Data given to us changes during the period for which we hold it.

 

We will retain your Personal Data which we have collected for as long as we reasonably consider it necessary for achieving the abovementioned purposes and as is permissible under applicable law. This is determined on a case-to-case basis.

 

We will delete your Personal Data whenever you request us to do so. However, we may archive and/or retain your Personal Data for as long as there are statutory retention obligations or potential legal claims are not yet time barred.

 

 

We do not knowingly collect or solicit Personal Data from minors. Our services are not designed for any person who is under 18 years of age, and we do not knowingly permit such persons to register for the services. So, if you are under 18, please do not attempt to register for the services or send any Personal Data about yourself to us. Further, we do not undertake tracking and behavioural monitoring of children or targeted advertising directed to minors.

If we learn that we have collected Personal Data from a minor without verified parental consent, we will erase such Personal Data.

 

If you believe that a child under 18 may have provided us their Personal Data, please contact us using the contact details provided in paragraph 12.

 

If you have questions or comments regarding this Policy or want to exercise any of your rights or express your grievances regarding the processing of your Personal Data, please contact us using the contact details given below:

 

(Sanjoy Chatterjee) National Sales Head Bazaar Sales

Mahindra & Mahindra Limited chatterjee.sanjoy@mahindra.com

 

 

If you have any grievances against our processing of your Personal Data, you may lodge your grievance with the Data Protection Officer as per details provided in paragraph 12 above.

 

If you are not satisfied with the resolution provided you may log your complaint with the Data Protection Board of India following the procedure prescribed by them.

 

 

We reserve the right to change this Policy at our sole discretion at any time. Any material changes to this Policy will be posted on this page. We encourage you to review this Policy regularly for such changes. The updated Privacy Policy will take effect as soon as it has been updated.

 

This Policy was last updated as of 1^st March 2025.