Skip to content
Wheels
Menu

24×7 reservations

+91 70757 20095+91 97032 20095

Help & policies

Privacy notice

What personal data we collect when you use our website or book with us, why we need it, who we share it with and the rights you have under the Digital Personal Data Protection Act, 2023.

Last updated: 27 September 2026

1. Who is responsible for your data

Wheels Rent A Car (“Wheels”, “we”, “us”) is the data fiduciary for the personal data described in this notice. Our head office is at 6-3-869, 1st Floor, Tourism Plaza, Balayogi Paryatak Bhavan, Greenlands, Begumpet, Hyderabad, Telangana 500016. You can reach us about privacy at ramesh@wheelsrentacar.com or +91 70757 20095, or through our grievance officer.

2. What we collect

  • Contact details — your name, mobile number and email address.
  • Trip details — pickup and drop addresses, dates and times, flight numbers, passenger names and any special requests.
  • Billing details — company name and GSTIN if you want a GST invoice, and the status of your payments and refunds. Card, UPI and bank details are entered on Razorpay's secure checkout and are not stored by us.
  • Enquiries — what you tell us through our forms, by phone, WhatsApp or email.
  • Device and log data — IP address, browser type, pages requested and timestamps, used to run and secure the website.
  • Cookies — we use only essential cookies, for example to keep you signed in and to remember your booking progress. We do not use advertising cookies.

3. Why we use it

  • To take, confirm and manage your bookings, and to verify your mobile number with a one-time password.
  • To dispatch a car and chauffeur and keep you informed about your trip.
  • To issue invoices and GST invoices and to keep records required by tax and accounting law.
  • To provide customer support and handle feedback, lost property and complaints.
  • To detect and prevent fraud, misuse of the website and payment abuse.
  • To send service messages about your booking.

We will send you marketing messages only if you separately agree to receive them, and you can opt out at any time.

4. Legal basis

We process your personal data on the basis of your consent, which you give when you submit a booking or enquiry, and for the legitimate uses permitted by section 7 of the Digital Personal Data Protection Act, 2023 — for example, where you voluntarily provide data for a specified purpose such as a booking, or where we must comply with a law such as retaining tax records.

5. Who we share it with

We do not sell your personal data. We share it only as needed to provide the service, with:

  • Razorpay — Payment processing (UPI, cards, netbanking) and refunds
  • MSG91 — SMS and WhatsApp OTPs, booking confirmations and trip notifications
  • Google Maps — Address search, suggestions and distance calculation
  • Resend — Transactional email such as confirmations and invoices
  • Vercel — Website hosting
  • Supabase — Database hosting
  • Your assigned chauffeur and, where used, our vendor partners — your name, mobile number, pickup details and trip details, so they can serve your booking.
  • Authorities — where required by law, court order or to protect the safety of our passengers and staff.

These service providers process data on our instructions and are required to keep it secure.

6. How long we keep it

  • Booking and invoice records: around 8 years, as required under tax and accounting laws.
  • Enquiries and leads that do not turn into a booking: up to 2 years.
  • OTP and verification logs: a short period, only as long as needed for security.

When data is no longer needed for these purposes, we erase or anonymise it.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

  • Access a summary of the personal data we hold about you and how we process it.
  • Correction, completion and updating of inaccurate or incomplete data.
  • Erasure of data that is no longer needed, unless we must keep it by law.
  • Withdraw consent at any time — withdrawing is as easy as giving it. This does not affect processing already done, and some services may no longer be possible.
  • Nominate another person to exercise your rights in the event of your death or incapacity.
  • Grievance redressal — raise a complaint with us about how we handle your data.

To exercise any of these rights, email ramesh@wheelsrentacar.com, call +91 70757 20095 or use the privacy request form below. We may ask you to verify your identity, and we will respond within 30 days. If you are not satisfied with our response after using our grievance process, you may complain to the Data Protection Board of India.

8. Children

Bookings must be made by adults. We do not knowingly process personal data of children under 18 without verifiable consent from a parent or lawful guardian, and we do not track or target advertising at children. If a minor travels on a booking, the adult who booked provides any details we need.

9. How we protect your data

We use reasonable security safeguards, including encrypted connections (HTTPS), access controls so staff see only what they need, OTP-based sign-in and reputable hosting providers. No system is completely secure; if a personal data breach occurs, we will notify affected users and the Data Protection Board as required by law.

10. Where your data is stored

Your data is stored in India or in the regions where our service providers operate their infrastructure. Where data is processed outside India, we do so only as permitted under Indian law.

11. Changes to this notice

We may update this notice from time to time. We will post the new version here with a new “last updated” date and, for significant changes, tell you directly.

Privacy request

Use this form to ask for access, correction or erasure of your data, or to withdraw consent. Please use the mobile number and email linked to your bookings.