Privacy Policy

This policy explains what happens to the information you give CARZ 2.O through this website, over WhatsApp, by phone or in person at the workshop. It is written in plain language rather than legal shorthand, because you should be able to tell what happens to your details without needing help.

We only ask for what we need to respond to you and to work on your vehicle:

• Your name and contact details — phone, WhatsApp number and email.
• Vehicle details you provide, such as make, model, year and registration.
• Photographs or video you send us of your vehicle or its damage.
• What you tell us about the condition, the problem or the outcome you want.
• Records of work carried out, estimates issued and invoices raised.

We do not ask for payment card details through this website, and you should never send them to us by message.

Photographs are how we assess a vehicle accurately before it arrives, so they matter to the quality of the advice you get. Images you send are used to prepare your assessment, estimate and the work itself.

We will not publish a photograph of your vehicle — on this website, on social media or anywhere else — without asking you first. If you would prefer your car never appears publicly, tell us and that is the end of it. Where we do publish work, identifying details such as number plates are handled with care.

• To reply to your enquiry and answer your questions.
• To assess your vehicle and prepare a recommendation and estimate.
• To carry out agreed work and keep you updated while it is with us.
• To raise invoices and maintain service records for your vehicle.
• Where you ask us to assist with an insurance claim or renewal, to prepare and pass on the documentation that process requires.

We do not sell your details to anyone, and we do not pass them to third parties for their own marketing.

Your details are shared only where the work requires it, and only as far as it requires:

• Insurers and surveyors — where you have asked us to assist with a claim, and only the information that claim needs.
• Suppliers — where a part has to be sourced for your vehicle.
• Service providers that help us operate, such as messaging and hosting, which handle data on our behalf.

If a legal obligation ever required disclosure, we would comply with it — but that is not something we expect in the normal course of car care.

When you contact us, we will reply through the channel you used, or the one you asked us to use. If you have shared your expiry date for insurance renewal reminders, we will contact you ahead of that date, because that is the point of the reminder.

We will not add you to marketing messages you did not ask for. If you would rather not hear from us at all, say so and we will stop.

Enquiries that do not lead to work are kept only as long as they are useful for following up. Service records, estimates and invoices are kept longer, because they form your vehicle’s history and may be needed for warranty, insurance or resale purposes.

You can ask us to delete what we hold about you. Where we are required to retain records — invoices, for instance — we will tell you what has to stay and why.

You can, at any time:

• Ask what information we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your details, subject to records we must keep.
• Withdraw permission to publish images of your vehicle.
• Ask us to stop contacting you.

Contact us using the details below and we will deal with it.

If you have a question about this policy, or about anything we hold, reach us on +916364993536 or through the contact page. If something here is unclear, tell us — that is a problem with our wording, not with your question.

Under the Digital Personal Data Protection Act, 2023 we may only use your personal data for a purpose you have agreed to, and we have to be able to show that you agreed. That is why each form asks you to tick a box for each separate purpose, why none of them is ticked in advance, and why the exact sentence you agreed to is stored with your record rather than a reference to wording we could later change.

Agreeing to be contacted about offers is always optional and never a condition of getting a quote or having work done. This notice is version 2026-08-18.1.

We keep personal data only for as long as the purpose it was given for still exists. In practice that means:

• Enquiries that do not become a job — 12 months, then deleted.
• Photographs sent with an enquiry — 12 months, or until the related job closes.
• Records of work, estimates and invoices — 8 years, because tax and accounting law requires it.
• Insurance claim correspondence — as long as the claim and any dispute period runs.
• Marketing consent — until you withdraw it.

Open item: these periods are proposals and need confirming with an accountant and a lawyer. Automatic deletion is not yet running — see the note at the end.

The Act gives you the following rights, and we have built a way to use each of them:

• Access — a summary of what we hold, what we used it for, and who we shared it with.
• Correction and completion — have anything wrong or incomplete put right.
• Erasure — have it deleted, except where the law requires us to keep it.
• Withdraw consent — as easily as you gave it. This does not undo what was already done.
• Grievance redressal — complain to us and get an answer.
• Nomination — name someone to exercise these rights if you die or cannot act.

Use the data rights form, or contact the grievance officer below. We will ask you to confirm your identity first, so that nobody else can obtain your information simply by asking for it.

If you are unhappy with how we have handled your personal data, contact:

TO BE CONFIRMED, Grievance Officer
connect@carz2o.com
+916364993536

We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

This site is meant for adults arranging work on a vehicle, and we do not knowingly collect data about anyone under 18. We do not track children or show them targeted advertising. If you believe a child has given us personal data, tell the grievance officer and we will delete it.

This site sets no advertising or analytics cookies. There is no Google Analytics, no Tag Manager, no advertising pixel and no session recording. The fonts are served from our own server rather than a third party, so simply reading these pages does not announce your visit to anyone else.

There is no embedded map. Directions open in Google Maps in a new tab only if you choose to click through, which means nothing is shared with Google unless you ask for it.

If personal data we hold is exposed or lost, we will notify the Data Protection Board of India and everyone affected, without delay, telling you what happened, what it means for you, and what we are doing about it.