- Introduction
Everything Motorcycling Private Limited (“EM,” “we,” “us,” or “our”), operating at
EverythingMotorcycling.com, is committed to protecting your personal information and your right to
privacy.
This Privacy & Cookie Policy explains how we collect, use, store, share, and protect your
information when you visit our website, create an account, make a booking, or purchase products
through our Platform.
This policy is published in compliance with the Information Technology Act, 2000 (“IT Act”), the
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal
Data or Information) Rules, 2011 (“SPDI Rules”), and the Consumer Protection (E-Commerce)
Rules, 2020.
By using our Platform, you consent to the practices described in this policy. If you do not agree,
please discontinue use of the Platform. - What We Collect
Information You Give Us Directly
- Full name, email address, mobile number, and delivery or billing address
- Payment information processed via RBI-compliant, PCI-DSS certified gateways — full card
or bank account numbers are never stored on our servers - GST number and PAN for business purchases or B2B invoicing
- Account login credentials (passwords are stored in encrypted form and are never accessible
to EM staff in plain text) - Booking details including travel dates, group size, accommodation preferences, and special
requirements - Tour participation details including emergency contact name and mobile number, blood
group, and any medical conditions relevant to safe participation - Government-issued ID details required for accommodation check-in (Aadhaar card, passport,
or driving licence) - Signed or digitally accepted Participant Waiver and Medical Declaration for tour bookings
- Reviews, ratings, feedback, or any other communications you send to us
Information Collected Automatically
- IP address, browser type, and operating system
- Pages visited, duration of visit, and referral URLs
- Device identifiers and clickstream data
- Approximate location at city or region level, if permitted by your device settings
- Cookies and similar tracking technologies — see Clause 6 for full details
- Sensitive Personal Data or Information (SPDI)
Under the SPDI Rules, the following categories of information are classified as sensitive personal
data and are handled with the highest level of care and security:
- Financial information — payment card details and bank account information, processed
exclusively through PCI-DSS compliant third-party gateways - Health and medical information — shared in connection with tour participation; used solely
for participant safety and emergency purposes, and held in strict confidence - Passwords — stored in encrypted form only; never accessible to EM employees in plain text
We collect SPDI only to the extent strictly necessary for the purpose stated at the time of collection,
and only with your explicit consent. You may withdraw your consent at any time, subject to any
legal obligations we are required to fulfil.
- How We Use Your Information
- To process and fulfil your product orders, accommodation bookings, tour enrolments, and
training course registrations - To send booking confirmations, itineraries, dispatch and delivery notifications, and service
updates - To generate GST-compliant tax invoices and maintain financial records as required under
Indian law - To share necessary information with accommodation partners, tour operators, guides, and
logistics providers to fulfil your booking — see Clause 5 - To manage your account and provide customer support and after-sales service
- To send promotional emails, newsletters, and offers — only with your consent. You may opt
out at any time by clicking “Unsubscribe” in any marketing email or by contacting us - To improve our Platform, product listings, course content, and tour offerings through analytics
and user feedback - To personalise your browsing experience and surface relevant listings and content
- To detect, investigate, and prevent fraudulent transactions, unauthorised access, and misuse
of the Platform - To comply with applicable Indian laws, respond to court orders, and satisfy regulatory
requirements
- Sharing Your Information
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
We may share your information only in the following circumstances:
- Payment gateway providers (e.g., Razorpay, PayU) — for secure payment processing; they
receive only the information necessary to process your transaction - Logistics and courier partners (e.g., Delhivery, Blue Dart, DTDC) — for fulfilment and delivery
of product orders - Accommodation partners — name, check-in and check-out dates, number of guests, and
booking reference, as required to confirm and manage your stay - Tour operators, guides, and marshals — participant name, tour dates, emergency contact
details, blood group, and relevant medical information, as required for the safe conduct of the
tour - Training providers — enrolment details necessary for course delivery and administration
- Government authorities, regulators, or law enforcement — where required by law, court
order, or to protect the safety, rights, or property of EM, its users, or the public
All third-party partners with whom we share your data are bound by contractual confidentiality
obligations and data protection requirements. They are permitted to use your data only for the
specific and limited purpose for which it was shared.
- Cookie Policy
What Are Cookies?
Cookies are small text files placed on your device or browser when you visit a website. They allow
the site to recognise your device on subsequent visits, remember your preferences, and provide a
more personalised and functional experience.
Types of Cookies We Use
Essential (Strictly Necessary) Cookies:
These cookies are required for the Platform to function correctly. They enable core features such as
user login and session management, the shopping cart, and payment security. These cookies
cannot be disabled without significantly impairing the functionality of the Platform.
Functional (Preference) Cookies:
These cookies remember your settings and preferences — such as your preferred language,
region, or display options — so you do not have to re-enter them on each visit.
Analytics (Performance) Cookies:
These cookies collect anonymised data on how visitors interact with the Platform — such as which
pages are visited most and where visitors navigate from — to help us improve user experience and
Platform performance. We use tools such as Google Analytics. No personally identifiable
information is stored in analytics cookies.
Marketing (Targeting) Cookies:
These cookies are used to display relevant advertisements and promotional content to you on our
Platform and on third-party websites, based on your browsing behaviour and interests. Marketing
cookies are placed only with your explicit consent.
Third-Party Cookies
Some cookies on our Platform are set by third-party services we use, including Google Analytics,
Meta Pixel (Facebook), and our payment gateway providers. These third parties operate under their
own privacy and cookie policies, which we encourage you to review.
How to Manage Your Cookie Preferences
You can control and manage cookies at any time through your browser settings. Depending on your
browser, you can:
- View which cookies are currently stored on your device and delete them individually or in
bulk - Block cookies from specific websites or from all websites
- Block third-party cookies while allowing first-party cookies
- Set your browser to alert you before cookies are placed, giving you the choice to accept or
reject them - Automatically delete all cookies when you close your browser
ℹ Please note that disabling essential cookies may prevent you from logging in, completing a booking, or
using the shopping cart. Disabling analytics or marketing cookies will not affect your ability to use the
Platform’s core features.
Cookie Retention Periods
- Session cookies — deleted automatically when you close your browser
- Functional and preference cookies — typically retained for 30 to 90 days
- Analytics cookies — typically retained for up to 24 months
- Marketing cookies — typically retained for up to 12 months, or until you withdraw consent
You may withdraw consent for non-essential cookies at any time by adjusting your browser settings.
This will not affect the lawfulness of any processing that took place before you withdrew consent.
- Security & Data Storage
Your personal data is stored on secure servers located in India. In accordance with the SPDI Rules,
we implement and maintain the following security measures:
- SSL/TLS encryption for all data transmitted between your device and our servers
- Firewall protection and intrusion detection systems
- Role-based access controls that limit staff access to personal data strictly on a need-to-know
basis - Regular internal security audits and vulnerability assessments
- Encrypted storage of all passwords and sensitive credentials
- Secure backup and disaster recovery procedures
While we take all commercially reasonable precautions to protect your data, no method of electronic
transmission or storage is 100% secure. You acknowledge that you share information with us at
your own risk. In the event of a data breach that is reasonably likely to adversely affect your rights
or interests, we will notify you and the relevant authorities as required by applicable law.
- Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it
was collected, or as required or permitted by applicable Indian law:
- Account data — retained for the duration of your active account, plus 2 years following
account closure - Booking and financial transaction records — retained for a minimum of 6 years as required
under the Goods and Services Tax Act and Indian income tax law - Tour participant waivers and medical declarations — retained for a minimum of 1 year from
the tour completion date - Marketing consent records — retained until you withdraw consent
- Customer support and complaint records — retained for 2 years from the date of resolution
You may request deletion of your personal data at any time by contacting our Grievance Officer at
grievance@everythingmotorcycling.com. We will honour such requests promptly, subject to any
legal or regulatory obligations that require us to retain certain records for a specified period.
- Your Rights
As a user of our Platform, you have the following rights in respect of your personal data:
- Right of Access — request a copy of the personal data we hold about you
- Right of Correction — request that we correct any inaccurate or incomplete personal data
- Right of Erasure — request that we delete your personal data (“right to be forgotten”), subject
to legal retention obligations - Right to Withdraw Consent — withdraw consent for marketing communications at any time
by clicking “Unsubscribe” in any email or by contacting us - Right to Data Portability — request your data in a structured, commonly used, machine-
readable format where technically feasible - Right to Complain — lodge a complaint with our Grievance Officer or the relevant data
protection authority if you believe your data has been mishandled
To exercise any of the above rights, please contact our Grievance Officer at
grievance@everythingmotorcycling.com. We will acknowledge your request within 7 days and
provide a full response within 30 days of receipt.
- Children’s Privacy
Our Platform and services are not directed at or intended for use by persons under 18 years of age.
We do not knowingly collect, store, or process personal information from minors without verifiable
parental or guardian consent.
Participants under 18 who attend tours or training courses must be accompanied by a parent or
legal guardian who accepts this Privacy & Cookie Policy and our Terms & Conditions on their behalf
and takes full responsibility for the minor’s participation.
If you believe we have inadvertently collected personal information from a minor, please contact our
Grievance Officer immediately at grievance@everythingmotorcycling.com and we will take prompt
steps to identify and delete such information from our records.
- Third-Party Links
Our Platform may contain links to third-party websites, social media platforms, and Partner pages.
EM is not responsible for the privacy practices, cookie policies, or content of those third-party sites.
We encourage you to read the privacy policy of every external website you visit before sharing any
personal information with them. - Grievance Officer
In accordance with the Information Technology Act, 2000, and the Consumer Protection (E-
Commerce) Rules, 2020, we have appointed a Grievance Officer to receive and address complaints
and concerns regarding the collection, storage, and processing of your personal data:
Grievance Officer
Everything Motorcycling Private Limited
First Floor, Alcove Building, GoodEarth Malhar Avenue, Kambipura, Kengeri, Bengaluru – 560076
Email: grievance@everythingmotorcycling.com
Response Time: Within 30 days of receipt of complaint - Changes to This Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our data
practices, technology, business operations, or applicable law. The revised policy will be posted on
this page with an updated effective date.
If we make material changes that significantly affect how we collect or use your personal data, we
will notify all registered users by email at least 14 days before the changes take effect. Continued
use of the Platform after the changes are posted and notified constitutes your acceptance of the
updated policy.
Contact Us
Everything Motorcycling Private Limited
First Floor, Alcove Building, GoodEarth Malhar Avenue, Kambipura, Kengeri, Bengaluru – 560076
General Support: support@everythingmotorcycling.com
Tours & Accommodation: tours@everythingmotorcycling.com
Grievance Officer: grievance@everythingmotorcycling.com