on the Platform. For avoidance of any doubt, it is clarified that YOLO is a digital intermediary which provides facilitation of transportation services by connecting the User with the third-party transportation service provider through the Platform. (“Services”).
i. The type of information collected from the Users, including Personal Information (as defined below) and Sensitive Personal Data or Information (as defined below) relating to an individual;
ii. The purpose, means and modes of collection, usage, processing, retention and destruction of such information; and
iii. How and to whom We will disclose such information. This Policy shall apply to any person who visits, browses, uses or accesses the Platform or uses any Service on the Platform. This Policy is an electronic record in terms of the Information Technology Act, 2000 and rules made thereunder. Further, this electronic record is generated by a computer system and does not require any physical or digital signatures. This Policy is published in compliance with section 43A of the Information Technology Act, 2000, regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the
“Personal Information” is defined under the SPI rules to mean any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to
be available to a body corporate, is capable of identifying such person. The SPI rules further define “Sensitive Personal Data or Information” of a person to mean personal information about that person relating to: (i) passwords; (ii) financial information such as bank accounts, credit and debit card details or other payment instrument details; (iii) travel related data; (iv) sexual orientation; (v) information received by body corporate under lawful contract or otherwise (vi) visitor details as provided at the
time of registration or thereafter; and (vii) call data records. 2 Note that the information collected by Us
2 IndusLaw: We note that travel related data and visitor details as provided at the time of registration or thereafter is not sensitive
personal data as defined under the SPI Rules. Hence request you to please modify the same as per the SPI Rules. Further, in order
to clarify which information collected by the company is ‘personal information’ and ‘sensitive personal information’, a separate
clause should be added, which will include travel related data etc.
from You may constitute ‘personal information’ or ‘sensitive personal data or information’ under the SPI Rules.
In order to have access to all the features and benefits on Our Platform, a User must first create an account on Our Platform. To create an account, a User may be required to provide the following information, which such User recognizes and expressly acknowledges is personal information
allowing others, including Us, to identify the User i.e. name, User ID, email address, gender, country, ZIP/postal code, age, phone number, password chosen by the User. In addition, at the time of a registered User availing of the Services, the User is required to provide certain sensitive personal
information which includes its bank account or card details for undertaking transactions on the Platform for availing the Services. Other information requested on the account registration page, including the ability to receive promotional offers from Us, is optional. We may, in future, include other optional requests for information from the User to help Us to customize the Platform to deliver personalized information to the User. Further, for the purposes of availing the Services, You may be additionally asked to provide the details with respect to your booking, details of the destination, travel dates, number of persons travelling, purpose of travel, relation with the persons travelling with you, address of all the persons travelling, details of return from the trip etc.
your personal data. This policy supplements the other notices and is not intended to override them.
The information contained on this Platform and the personal information collected by using/ login and or accessing this Platform are stored at a secured server. It is stated by the server service provider that they have all the best security practices required for the server. The Platform is owned by Us and is located in India. Hence, We are bound by duty to abide by the laws, including but not limited to, regulations, rules, circulars and notifications governing privacy in India.
effect automatically, as soon as they are posted on the Platform.
the Platform immediately.
COLLECTION AND PROCESSING OF PERSONAL DATA
We may collect and process your personal data for, including without limitation, the following purposes:
Providing Our Services: We might process your personal data for the purposes of providing Our Services, facilitation, processing and fulfilment of the bookings requested by the User for tickets to be booked through the Platform and provision of the Services. For example, personal data is processed in order to set up your YOLO account to allow You to book Your tickets online for availing the services offered by independent third party providers facilitating completion of provision of Services requested
for, through the Platform and submit reviews to the Platform. We process the following personal data: (i) name; (ii) phone number; (iii) email address; (iv) home address; (v) IP address; (vi) location; (vii)
YOLO user account profile data.
Customer service: We need to process personal data for this purpose because it enables Us to adequately respond to Users’ questions/ concerns and to verify the correctness of the order for the booking placed by the User on the Platform and to ensure the quality of the Services availed by a User.
Marketing (Direct): We process Users’ data for (direct) marketing purposes. This means that We can contact customers to draw attention to Our services. For this purpose, We process the following personal data: (i) website behaviour; (ii) IP address;(iii) email address; (iv) postal address; (v) phone number (vi) online identifiers; (vii) order information; (viii) location; and (ix) and account information.
Commercial Use: All the information provided to Us by a User, including personal information or any sensitive personal data or information, is provided voluntarily. You understand that We may use certain information provided by You, which may include your personal information or sensitive
personal data or information for (i) the purpose of providing the Services offered through the Platform to You; (ii) commercial purposes and in an aggregated and anonymized form for research, statistical analysis and/or business intelligence purposes; (iii) sale or transfer of such research, statistical or intelligence data in an aggregated or non-personally identifiable form to third parties and affiliates; (iv) communication purposes to enhance your experience of booking tickets and obtaining feedback in relation to the Services; (v) customer support related issues; and (vi) and enabling you to complete any transaction through the Platform.
In addition to the above, We may also use Your personal data for the following reasons, including but not limited to; (i) keep You informed of the booking status; (ii) send You ticket confirmations via SMS or WhatsApp or any other messaging service; (iii) send You any updates or changes to Your
booking(s); (iv) allow Our customer service to contact You, if necessary;(v) facilitating completion of payment(vi) customize the content of Our website and mobile app;(vii) request You for reviews of the Services offered through the Platform; (viii) send You verification message(s) or email(s); (ix)
validate/authenticate Your account and to prevent any misuse or abuse; (x) contact You on Your birthday and/or anniversary to inform You of any special offers; (xi) send You important notices and communications regarding Our services availed or changes to the terms and conditions and/or policies; (xii) to administer Our business and Platform; (xiii) to send You marketing related communications; (xiv) to deal with enquiries and complaints raised by You and to troubleshoot problems; (xv) ensure
compliance with all applicable laws and to ensure safety of the Platform and all Users; (xvi) to obtain your Know Your Customer (KYC) details and credit report; (xvii) to prevent fraud, errors and/or any illegal activity on the Platform; (xviii)to send invoices, statements, agreements and/or to collect payment from You or make payments to You for availing Services; and(xix) send You reminders to confirm bookings.
DISCLOSURE OF DATA
It may be necessary for Us to disclose Your personal data whether by law, legal process and/or by request from public and/or governmental authorities within or outside of your country of residence. We may also disclose Your personal information if We determine that disclosure is necessary or appropriate for the purposes of law enforcement, national security or to prevent or stop any activity We may consider to be, or to pose a risk of being, illegal, unethical or legally actionable.
Some sections on the Platform are freely accessible by all Users and visitors and require no prior registration. Further, certain sections on the Platform are accessible by Users only after entering their details, username and password. Therefore, We request You to use a safe and secure server to access the Platform to ensure the safety of Your username, password and other information. We do not guarantee the security and/or privacy of any information, which may be available to all Users and visitors of the Platform publicly. Further, the Platform may contain links to other websites. Please note that We do not endorse any links or websites and are not responsible for the privacy practices of such third-party websites.
We automatically receive the URL of the site from which anyone visits. We also receive the Internet Protocol (IP) address of each User’s computer (or the proxy server a User used to access the World Wide Web), device IDs or other unique identifiers, User’s computer operating system and type of web
browser the User is using, email patterns, as well as the name of User’s ISP. This information is used to analyze overall trends to help Us improve Our Services. The linkage between User’s IP address and User’s personally identifiable information is not shared with or disclosed to third parties.
Notwithstanding the above, We may share and/or disclose some of the aggregate findings (not the specific data) in anonymized form (i.e., non-personally identifiable) with advertisers, sponsors, investors, strategic partners, and others in order to help grow Our business.
Note that We maintain a strict no-spam policy and do not rent, sell, disclose or share personal information belonging to You with other people or non-affiliated companies without Your consent, except to provide Services which You have requested/placed ordered for or otherwise as specifically
provided for in this Policy.
Third party service providers: We engage, retain or might, as per requirement and business needs of the Company, employ, engage, contract with third party service providers to work with Us, under
agreements containing confidentiality obligations and in accordance with law, in relation to the Services provided by Us on the Platform. These third party service providers may use Your personal information in assisting Us to communicate with You about Our offers, scheduling of bookings,
feedback of Services, assisting in payment facilities, verification of credit information to process payment, providing customer support, assisting in advertising on the Platform, obtaining your KYC details or credit report, etc. We may employ third party companies and/or individuals to help improve
or facilitate Our service, to provide the Service on Our behalf, to perform platform-related services, including but not limited to: payment processing, maintenance services, fraud detection services, database management, web analytics, monitoring, booking of tickets and evaluation services. In this
event, Your information may be shared with such third-party companies and/or individuals;
Compliance with laws and protection of Users: We may release your personal information when the same is required in order to comply with the law, in response to court orders, court summons, judgments, decrees, injunctions, arbitral awards, administrative orders, governmental investigation or orders of any government authority or any other legal process, to establish/exercise Our legal rights or defend against legal claims or in the event We reasonably believe that doing so is legally required or is
in your interest to protect Your property or other legal rights or property or rights of others. We may also share your personal information in order to enforce and fully comply with Our terms of service and other Company policies;
Contracting parties: We transfer/share Your information with Our third-party contractors to facilitate the availing of Services by You or payment gateways etc.to You in order to consummate the transaction.
With Your consent: In addition to the aforementioned circumstances, We may share Your personal information with third parties with Your prior consent and/or at Your request.
COLLECTION AND USE OF NON-PERSONAL DATA
Non-personal data is data that can never be used to identify an individual. We may collect information regarding customer activities on Our Platform. This aggregated information shall be used by Us in research, analysis, to improve and monitor Our Services and for various promotional schemes. Such non-personal data may be shared in aggregated, non-personal form with third party to enhance customer experience, offerings or services.
data off Your hard disk or read cookie files created by other websites.
We may place both permanent and temporary cookies. A permanent cookie will remain on your web browser until its expiry date, unless deleted prior to such expiry date. However, most cookies are “session cookies” meaning that they automatically get deleted from your computer system at the end
The data that cookies collect will be used to process and/or analyse information by third parties to help improve or facilitate Our services, to provide Service on Our behalf, to Platform-related services including but not limited to maintenance services; fraud detection services; database management; web analytics; monitoring; and evaluation services. If You have any questions about Our cookie usage, please contact Us at the contact details/information mentioned below.
YOUR RIGHTS AND HOW TO EXERCISE THEM
We respect the exercise of the rights You have in relation to the personal data We process or use. You can request access to or a copy of your personal data collected and processed by Us. You may also request to withdraw Your consent provided hereunder at any point in time, rectification and removal of personal data or the restriction of the processing of Your personal data. Users have the right to unilaterally change their e-mail and contact preferences at any time by logging into their “Account” at [●] and changing the account settings. You also have the right to data portability. If You have an objection to use of Your data under this policy, please write to Our privacy team at [●]. To prevent misuse, We will ask You to identify yourself. Please note that Your request for withdrawal of consent, cancellation of account, removal of data or restriction of the processing data may result in the Company being unable to provide You the Services or to terminate any existing relationship the Company may have with You.
NOTE FOR ALL USERS
We do not control or endorse the content, messages or information found in any Services and, therefore, We specifically disclaim any liability with regard to the Services and any actions resulting from Your participation in any Services, and You agree that you waive any claims against Us relating
to same, and to the extent such waiver may be ineffective, you agree to release any claims against Us relating to the same.
You are responsible for maintaining the accuracy, truthfulness, correctness and completeness of the information You submit or provide to Us, on the Platform; and shall hold harmless and indemnify YOLO from and against all claims arising out of or in relation to the wrongful information posted,
provided by You to Us, on the Platform.
If Your personal information changes, You may correct, delete inaccuracies, or amend information by making the change on Our member information page or by contacting Us on [●]. There may be circumstances where We will not correct, delete or update Your personal data, including; (i) where the
personal data is opinion data that is kept solely for evaluative purpose; and (ii) the personal data is in documents related to a prosecution if all proceedings relating to the prosecution have not been completed. If you wish to cancel your account or request that We no longer use your information to provide you Services, contact Us on [●].
We understand the serious implications of data security and take extensive measures to ensure Your data and information is secured. We take extensive technical, and legal measures to safeguard Your personal data. The Platform uses a reliable SSL certificate to ensure Your personal data is not misused in any manner whatsoever. We use SSL encryption when transmitting certain kinds of information, such as financial services information or payment information. An icon resembling a padlock is
displayed on the bottom of most browser windows during SSL transactions that involve debit/credit cards and other forms of payment. In case We ask You for Your debit/credit card number for payment or for verification purposes, the same will be SSL encrypted. The information You provide will be stored securely on Our servers. Once You choose to store or enter Your debit/credit card number, it will not be displayed back to You in its entirety when You retrieve or edit it in the future. Instead of the entire number, You will only see asterisks and either the first four digits or the last four digits of
your debit/credit card number.
We also work with third party service providers/experts/trainers/professional who provide services on
Our behalf or to Us. We enter into agreements with such third-party service providers, experts, trainers, professional to ensure complete security and safety of the User information. Such third-party service providers do not have any independent right to the information provided by Us to them.
Our employees and data processors, who have access to, and are associated with the processing of sensitive personal data or information, are obliged to respect the confidentiality of every User’s personal information or sensitive personal data and information. We have put in place procedures and
technologies as per good industry practices and in accordance with the applicable laws, to maintain security of all personal data from the point of collection to the point of destruction. Any third-party data processor to which We transfer Personal Data shall have to agree to comply with those procedures and policies, or put in place adequate measures on their own.
No administrator of the Platform will have knowledge of Your password. It is important for You to protect against unauthorized access to Your password, Your computer and Your mobile phone. Ensure You log off from the Platform when finished. We do not undertake any liability for any unauthorised use of Your account and password. If You suspect any unauthorized use of Your account, you must immediately notify Us by sending an email to [●]. You shall be liable to indemnify Us due to any loss
suffered by Us due to such unauthorized use of Your account and password. Note that We make all User information accessible to Our employees, agents or partners and third parties only on a need-to-
know basis and bind only its employees to strict confidentiality obligations. However, We are not responsible for the confidentiality, security or distribution of Your personal information by Our partners and third parties outside the scope of Our agreement with such partners and third parties.
In case there is any breach of security, We will make all legally required disclosures concerning the breach and the confidentiality, or integrity of Your unencrypted electronically stored “personal data” to You via email or by posting it on Platform without unreasonable delay, in as far as is consistent with any legitimate needs of law enforcement and any measures required to determine the scope of the breach and to safeguard the integrity of data.
APPLICABLE LAWS AND REGULATIONS
We ensure that your data and information shall be protected under the provisions of General Data Protection Regulation (“GDPR”), Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 along with any amendments made to these acts, rules and regulations.
We do not keep your personal data longer than necessary for the purpose of the processing. This includes, for example, the purposes of satisfying any legal, regulatory, accounting, reporting requirements, to carry out legal work, for the establishment or defence of legal claims. We may aggregate and anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case We may use this information indefinitely without further notice to you.
Under certain circumstances, You have rights under applicable data protection laws in relation to Your personal data. It is Our policy to respect Your rights and We will act promptly and in accordance with any applicable law, rule or regulation relating to the processing of Your personal data. Details of Your rights under GDPR are set out below:
(i) Right to be informed about how personal data is used – You have a right to be informed about how We will use and share Your personal data. This explanation will be provided to You in a concise, transparent, intelligible and easily accessible format and will be written in clear and plain language;
(ii) Right to access personal data – You have a right to obtain confirmation of whether We are processing Your personal data, access to Your personal data and information regarding how Your personal data is being used by Us;
(iii) Right to have inaccurate personal data rectified – You have a right to have any inaccurate or incomplete personal data rectified. If We have disclosed the relevant personal data to any third parties, We will take reasonable steps to inform those third parties of the rectification where
(iv) Right to have personal data erased in certain circumstances – You have a right to request that certain personal data held by Us is erased. This is also known as the ‘right to be forgotten’. This is not a blanket right to require all personal data to be deleted. We will consider each request carefully in accordance with the requirements of any laws relating to the processing of
your personal data;
(v) Right to restrict processing of personal data in certain circumstances – You have a right to block the processing of your personal data in certain circumstances. This right arises if You are disputing the accuracy of personal data, if You have raised an objection to processing, if processing of personal data is unlawful and You oppose erasure and request restriction instead or if the personal data is no longer required by Us but You require the personal data to be retained to establish, exercise or defend a legal claim;
(vi) Right to data portability – Under certain circumstances, You have the right to request to receive a copy of Your personal data in a commonly used electronic format. This right only applies to personal data that You have provided to Us (for example by completing a form or providing information through the Platform). Information about You which has been gathered
by monitoring Your behaviour will also be subject to the right to data portability. The right to data portability only applies if the processing is based on Your consent or if the personal data must be processed for the performance of a contract and the processing is carried out by automated means (i.e. electronically);
(vii) Right to object to processing of personal data in certain circumstances (including where personal data is used for marketing purposes) – You have a right to object to processing being carried out by Us if (a) We are processing personal data based on legitimate interests or for the performance of a task in the public interest (including profiling), (b) if We are using personal data for direct marketing purposes, or (c) if information is being processed for scientific or historical research or statistical purposes. You will be informed that You have a right to object at the point of data collection and the right to object will be explicitly brought to Your
attention and be presented clearly and separately from any other information; and
(viii) Right not to be subject to automated decisions where the decision produces a legal effect or a similarly significant effect – You have a right not to be subject to a decision which is based on automated processing where the decision will produce a legal effect or a similarly significant
effect on You.
You may exercise any of the above-mentioned rights by sending a request to Us on Our contact information as detailed below. You will not have to pay a fee to access Your personal data (or to exercise any of the other rights). However, to the extent permitted under the applicable data protection
laws, We may refuse to comply with Your request if Your request is clearly unfounded, repetitive or excessive.
We may need to request specific information from You to help Us confirm Your identity and ensure Your right to access Your personal data (or to exercise any of Your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact You to ask You for further information in relation to Your request to speed up Our response.
We try to respond to all legitimate requests within one month. Occasionally it may take Us longer than one calendar month if Your request is particularly complex or You have made a number of requests. In this case, We will notify You and keep You updated.
QUESTIONS OR COMPLAINTS
If you have any question or complaints about the processing of your personal data, write to Us at [●]. Our team will be happy to assist you. 5
Address: [ ●]
Customer Support: [●]