LEGAL
At DRIIVO, your privacy is as important to us as the quality of every fragrance we craft. This policy explains clearly what data we collect, why we collect it, and how we protect it.
DRIIVO is a premium car fragrance brand committed to transforming every drive into a luxury experience. Our website is operated at https://driivo.in.
For all privacy-related matters, you may contact us at:
We act as the data controller for all personal data collected through this website. Where we engage third-party services, they act as data processors under our instruction and are bound by data processing agreements.
We collect personal data in the following ways:
If you upload images to the website (e.g. for reviews), please ensure they do not contain embedded location data (EXIF GPS). While we do not actively extract this data, visitors can download images and extract location metadata themselves. We recommend stripping EXIF data before uploading.
We use your personal data only for legitimate purposes. The table below maps each purpose to its legal basis:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your orders | Contract performance |
| Sending order confirmations and shipping updates | Contract performance |
| Creating and managing your account | Contract performance |
| Responding to customer support enquiries | Contract performance / Legitimate interest |
| Sending marketing emails (newsletters, offers) | Consent (opt-in) |
| Personalising your shopping experience | Legitimate interest / Consent |
| Fraud detection and security monitoring | Legitimate interest / Legal obligation |
| Improving our website and products | Legitimate interest |
| Complying with tax and legal obligations | Legal obligation |
| Spam detection for comments and reviews | Legitimate interest |
We will never sell your personal data to third parties or use it for purposes beyond what is described in this policy without obtaining your explicit consent first.
Cookies are small text files placed on your device. We use them to keep the site functioning, remember your preferences, and understand how people use our site.
We share your data only where necessary to deliver our services. All third-party providers are vetted and bound by data processing agreements.
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
All payment transactions on DRIIVO are processed through PCI-DSS compliant third-party payment gateways. We accept:
Your full card number, CVV, and banking credentials are never transmitted to or stored on our servers. Payment data is handled entirely by our payment processor in an encrypted environment.
We retain a record of your order total, payment method type (e.g. "Visa ending 4242"), and transaction status for accounting and fraud prevention purposes. This information is kept for a minimum of 7 years as required by Indian financial regulations.
| Data Type | Retention Period | Reason |
|---|---|---|
| Order records | 7 years | Legal / tax compliance |
| Account data | Until account deletion | Service provision |
| Comments & reviews | Indefinitely (unless deletion requested) | Spam prevention & context |
| Newsletter subscriptions | Until unsubscribed | Consent-based |
| Support tickets | 3 years | Service improvement |
| Server log files | 30 days | Security monitoring |
| Analytics data | 26 months (anonymised) | Performance analysis |
| Cookie consent records | 1 year | Compliance evidence |
When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to you.
Depending on your location, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Correct any inaccurate or incomplete data we hold about you.
Request deletion of your personal data, subject to legal obligations.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests, including marketing.
Restrict how we process your data in certain circumstances.
You can exercise most rights directly from your account dashboard. For other requests, email us at privacy@driivo.in. We will respond within 30 days. Some rights may be limited where we are required to retain data for legal purposes.
To unsubscribe from marketing emails, click the Unsubscribe link in any email we send. This does not affect transactional emails related to your orders.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse:
In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it, as required by applicable law.
Our site may include embedded content from other websites (videos, social feeds, etc.). This content behaves exactly as if you had visited the third-party website directly — they may collect data, use cookies, and track your interaction. We recommend reviewing the privacy policies of any third-party sites you visit through our platform.
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of your rights, please reach out:
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email (if you have an account) and update the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.