Skip to main content
EV Doctor

Privacy Policy

Effective 6 May 2026 · Last updated 6 May 2026

Draft — pending owner sign-off. Items highlighted like this are awaiting confirmation. For any privacy concern in the meantime, call or WhatsApp +91 96110 99511.

EV Doctor (“we”, “us”, “our”) is a sole proprietorship operated by Naveen, with its workshop at #2, 6th Main Road, WOC Road, Rajajinagar, Bengaluru 560010, Karnataka, India. We service and repair electric two-wheelers and the batteries inside them.

This Privacy Policy explains what personal information we collect about you, why we collect it, how we use and protect it, and the rights you have over it. It is written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 along with the rules made under it.

If anything here is unclear, please contact us using section 10.

1. Who this policy applies to

This policy applies to you if you:

  • visit our website (the live URL once your custom domain is live);
  • call, message, or WhatsApp us on +91 96110 99511;
  • bring your electric vehicle to our workshop in Rajajinagar, Bengaluru;
  • interact with our pages on Instagram, YouTube, LinkedIn, or our Google Business listing.

We do not knowingly collect data from anyone under 18 years of age. If you are under 18, please ask a parent or guardian to deal with us on your behalf.

2. The personal information we collect

We only collect what we genuinely need to service your vehicle and run our workshop.

a. Information you give us directly

  • Name and phone number— when you call or WhatsApp us, or walk in for a service.
  • Email address— only if you choose to share one (it is optional).
  • Vehicle details— make, model, year, registration number, battery type, kilometres run, and the issue you are reporting.
  • Service history with us— past complaints, work performed, parts replaced, payments made, invoices issued.
  • Photographs— of your vehicle, the issue area, and our work, taken for diagnosis, internal records, and (only with your consent) social media.

b. Information collected automatically when you use our website

  • Standard log data— IP address, browser type, device type, pages visited, referring page, date and time. Collected by our hosting provider (Vercel) for security and reliability.
  • Analytics data — we use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 sets cookies and may process a truncated version of your IP address. The data is aggregated; we cannot identify you personally from it.
  • Cookies— small files that GA4 stores in your browser. You can clear or block these in your browser settings without affecting how the site works.

c. CCTV footage at our workshop

Our workshop premises are monitored by CCTV cameras for the safety of staff, customers, and customer vehicles, and to maintain a record in case of disputes about damage or service. CCTV footage is automatically overwritten on a rolling basis (typically within 30 days) unless we need to preserve a specific clip for an active incident or a legal request.

d. Reviews and social media

If you leave a public review on our Google Business listingor comment on our Instagram, YouTube, or LinkedIn pages, we can see it the same way anyone else can. We may quote or screenshot public reviews on our website or socials. We do not post your review on platforms you didn’t already post it on yourself.

3. Why we collect your information (and the legal basis)

Under the DPDP Act, we are required to tell you the purpose of every piece of data we collect. Here is the full list:

PurposeWhat we useLegal basis
Booking your service appointment and identifying your vehicle when you arriveName, phone, vehicle detailsYour consent / performance of service
Diagnosing the fault and quoting an estimateVehicle details, photos, your description of the issuePerformance of service
Calling/WhatsApping you with updates while we work on the vehiclePhone numberPerformance of service
Generating an invoice and meeting tax (GST) obligationsName, phone, vehicle, parts/labour, paymentLegal obligation
Sending reminders for next service or follow-up after a repairPhone number, last service dateYour consent — opt-out any time (section 7)
Posting before/after photos or videos on Instagram or YouTubePhoto / videoYour separate verbal or written consent at the time of service. Number plates are blurred or cropped by default.
Asking you for a Google review after a successful servicePhone number, nameYour consent
Operating CCTV on our premisesCCTV footageLegitimate interest in safety and dispute resolution
Understanding how visitors use our websiteCookies, page-view data via GA4Your consent (you can disable cookies in your browser)
Defending ourselves in any legal claim or responding to a lawful requestAny of the above, as relevantLegal obligation / our legitimate interest

We do not sell your personal information. We do not use your information for any purpose other than the ones listed above without coming back to you for fresh consent.

4. Who we share your information with

Your information stays with us except in these specific cases:

  • WhatsApp / Meta Platforms Ireland Limited— when you message us on WhatsApp, the chat is processed by WhatsApp’s infrastructure. WhatsApp’s own privacy terms apply to how they handle the message in transit and storage.
  • Google LLC— for Google Analytics on our website, our Google Business listing, and Google Maps directions to our workshop. Google’s privacy policy applies to how they process this data.
  • Vercel Inc.— our website is hosted on Vercel’s infrastructure. Vercel processes basic server logs to keep the site running.
  • Spare-parts suppliers and authorised service centres — only if a part is under manufacturer warranty and we need to share your vehicle’s chassis/battery serial number to claim a replacement.
  • Tax and government authorities— when required by law to share invoicing data, GST records, or respond to a legal notice or court order.
  • A future buyer of the business— if Naveen ever sells or transfers EV Doctor to another owner, your records may transfer so service continuity is maintained. We will notify you in advance if this happens.

We do not share your data with advertisers, data brokers, or any third party not listed above.

Some of the providers above (Vercel, Google, Meta) operate servers outside India. By using our website or messaging us on WhatsApp, you understand that your data may be processed on servers outside India under those providers’ security and contractual standards.

5. How long we keep your information

Type of dataHow long we keep it
Customer service records (name, phone, vehicle, complaints, work)3 years from your last service
Invoices, payment records, GST records8 years (CGST Act, 2017 & Income Tax Act, 1961)
CCTV footageUp to 30 days, on a rolling overwrite, unless preserved for a specific incident
Photos/videos used on social media with your consentUntil you ask us to take them down (see section 7)
Website analytics (GA4)Up to 14 months (GA4 default for event-level data)
WhatsApp chat historyAs long as the chat is on our business phone, plus whatever WhatsApp retains on its own servers

When the retention period ends and we don’t have a legal reason to keep the data, we delete it or make it permanently unidentifiable.

6. How we protect your information

We are a small workshop, and we are honest about what “secure” means at our scale:

  • The phone we use for WhatsApp Business is PIN/biometric protected.
  • Customer records are stored in a locked register and on a password-protected device accessible only to Naveen.
  • Only Naveen and trusted workshop staff access customer information, and only for the work in front of them.
  • Our website is served over HTTPS.
  • We do not store your bank, card, or UPI credentials. Payment happens directly between you and your payment app at the time of billing.
  • We review who has access to customer data whenever a staff member joins or leaves.

Despite these measures, no system is 100% secure. If we ever discover a breach affecting your personal data, we will notify you and the Data Protection Board of India in line with what the DPDP Act requires.

7. Your rights

Under Indian law you have the following rights over the personal data we hold about you. To exercise any of them, contact us using section 10.

  • Right to know— what data we have about you and what we do with it.
  • Right to correction— ask us to correct anything wrong, outdated, or incomplete.
  • Right to erasure— ask us to delete your data, except where we are legally required to keep it (e.g. GST invoices for 8 years).
  • Right to withdraw consent— for anything you originally said yes to, including service reminders and social-media photos.
  • Right to opt out of marketing — reply STOP on WhatsApp, or tell us on a call, and we will remove your number from reminder broadcasts within 7 working days.
  • Right to grievance redressal— if we don’t resolve your concern, you can complain to the Data Protection Board of India once it is operational, or to the National Consumer Helpline at 1915 / consumerhelpline.gov.in.
  • Right to nominate— under the DPDP Act you can nominate another person to exercise your rights if you become unable to.

We respond to any rights request within 30 days. We may need to verify your identity (usually by a quick call back to the number we have on file) before acting.

8. Cookies on the website

Our website uses the following cookies:

  • Strictly necessary cookies— set by our hosting/CDN to keep the site working. These cannot be turned off.
  • Analytics cookies — set by Google Analytics 4 to count visits and understand which pages are useful. Optional. You can block these by changing your browser settings or by installing the Google Analytics Opt-out Browser Add-on.

We do not use advertising or tracking cookies from any third-party network.

9. Changes to this policy

We may update this Privacy Policy from time to time — for example, when we add a new tool, change retention periods, or to reflect a change in the law. The “Last updated” date at the top will always reflect the current version. For material changes (anything that meaningfully changes how we use your data), we will post a notice on our website’s home page for at least 30 days.

10. How to contact us

For any privacy question, complaint, or rights request:

  • Grievance Officer: Naveen, Proprietor, EV Doctor
  • Email: TODO_owner_email@example.com
  • Phone / WhatsApp: +91 96110 99511
  • Address: #2, 6th Main Road, WOC Road, Rajajinagar, Bengaluru 560010, Karnataka, India

We respond to grievances within 30 days of receiving them.