Privacy Policy

1. Who we are

De' KaarNexus ("we", "us") operates an automotive workshop at 120 D.D. Behind Poonam Chambers B Wing, Opp Atria Mall, Dr. Annie Besant Road, Worli 400018, Mumbai. GSTIN: 27AADPC5970C1Z1. We are the Data Fiduciary for the personal data described below.

2. What we collect

• Name, phone number and (optionally) email address
• Vehicle details: make, model, year, registration number, condition, kilometres
• Service, appointment or valuation details you choose to share
• Messages you send us through the contact form or WhatsApp

We do not collect payment card data, UPI PINs, bank details, Aadhaar, PAN or any biometric data through this website. We do not knowingly collect data from children under 18.

3. Why we collect it

• To schedule and carry out vehicle service appointments
• To prepare a valuation and respond to sell-your-car enquiries
• To reply to your questions and provide customer support
• To meet tax, GST and other statutory record-keeping obligations

We use your data only for the purpose you gave it for. We do not sell your data or share it with advertisers.

4. Consent and withdrawal

We ask for clear, unticked, affirmative consent at every point where we collect your details. You may withdraw consent at any time by emailing info@kaarnexus.com or calling +91 93225 17723 (call) / +91 91373 40476 (WhatsApp). Withdrawal is as easy as giving consent; once withdrawn we stop processing your data for that purpose and delete it unless a law requires us to keep it.

5. Your rights

You may request access to your data, correction of inaccurate data, erasure of data we no longer need, and you may nominate another person to exercise these rights on your behalf. Write to us at the grievance contact below; we acknowledge requests within 24 hours and aim to resolve them within 15 days.

6. Sharing and processors

We share data only where necessary: with insurance companies when you ask us to process a cashless claim, with spare-part suppliers where a part must be ordered against your vehicle, and with our website and email hosting providers who store this data on our behalf under contract. We do not transfer your data to any restricted country.

7. Retention

Enquiries and appointment records are retained while the service relationship is live and thereafter only as long as required for warranty, insurance and statutory purposes. Financial and GST records are retained for 72 months from the due date of the relevant annual return, as required by section 36 of the CGST Act. Data that is no longer needed is deleted.

8. Security

Data submitted through this website is transmitted over HTTPS and stored in a managed database with row-level access controls. Only authorised staff signed into our admin area can view enquiries; there is no public access to submitted records. Passwords are stored only as salted hashes by our authentication provider and are never logged.

9. Cookies and analytics

This website uses only the cookies and local storage strictly necessary to run the site and keep an administrator signed in. We do not run advertising pixels or third-party behavioural tracking. If that changes we will publish a cookie notice and ask for consent first.

10. Data breaches

If we become aware of a personal data breach we will notify affected individuals without undue delay, report to the Data Protection Board as required by the DPDP Rules, and report reportable cyber security incidents to CERT-In within 6 hours of becoming aware.