🔐 Privacy & Data

Privacy Policy

We are committed to protecting your personal data. This policy explains how NamathuPark collects, uses, stores, and protects your information in compliance with Indian law.

📅 Effective: January 1, 2025 📍 Jurisdiction: Tamil Nadu, India 🔄 Version 1.0

📋 Table of Contents

  1. Overview & Scope
  2. What Data We Collect
  3. How We Collect Data
  4. Why We Use Your Data
  5. Data Sharing & Disclosure
  6. Data Storage & Security
  7. Data Retention
  8. Cookies & Tracking Technologies
  9. Third-Party Services
  10. Your Rights
  11. Children's Privacy
  12. Changes to This Policy
  13. Grievance Officer
  14. Contact Us

Compliance Notice: This Privacy Policy is drafted in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). NamathuPark is also committed to aligning with the principles of India's Digital Personal Data Protection Act, 2023 (DPDPA) as the relevant provisions come into force.

1 Overview & Scope

NamathuPark ("we", "us", "our") operates a smart parking platform connecting drivers with parking space owners across Tamil Nadu, India. This Privacy Policy applies to:

By using any of these products, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, you should discontinue use of our Platform.

Data Controller: NamathuPark is the Data Fiduciary (as defined under the Digital Personal Data Protection Act, 2023) responsible for the processing of your personal data. Contact: namathuparksupport@gmail.com

2 What Data We Collect

We collect the following categories of personal and non-personal data:

2.1 Personal Data You Provide

Data TypeExamplesApplicable To
Identity InformationFull name, date of birthAll Users
Contact InformationMobile number, email addressAll Users
Authentication DataOTP-verified mobile number via Firebase AuthAll Users
Vehicle InformationVehicle registration number, vehicle typeDrivers
Payment InformationUPI ID, card details (processed by Razorpay — not stored by NamathuPark), transaction historyDrivers
Banking / KYC DataBank account number, IFSC, Aadhaar / PAN (for Partner payouts, as required under PMLA)Partners
Space DetailsAddress, photos, capacity, pricing, operating hoursPartners
Institutional InformationCollege name, department, designationCollege App Users

2.2 Data Collected Automatically

Data TypeDetails
Location DataGPS coordinates when searching for or navigating to parking slots (with permission)
Device InformationDevice model, OS version, unique device identifiers, app version
Usage DataApp interaction logs, features accessed, search queries, session duration
Booking HistorySlots booked, durations, payments, cancellations
Notification TokensFCM (Firebase Cloud Messaging) tokens for push notification delivery
Crash & Error ReportsAnonymous technical diagnostics to improve app stability

2.3 Sensitive Personal Data or Information (SPDI)

Under the IT (SPDI) Rules, 2011, the following data collected by NamathuPark may qualify as Sensitive Personal Data:

We collect SPDI only with your explicit, informed consent and use it solely for the specific purpose for which it was provided.

3 How We Collect Data

We collect your data through the following methods:

Your Control: You can manage device permissions (location, notifications) at any time through your device settings. Withdrawing certain permissions may limit functionality — for example, withdrawing location permission will prevent the app from showing nearby parking slots.

4 Why We Use Your Data

NamathuPark processes your personal data for the following lawful purposes:

PurposeLegal Basis
Creating and managing your accountContractual necessity / Consent
Processing bookings and paymentsContractual necessity
Showing real-time nearby parking spotsLegitimate interest / Consent (location)
Sending booking confirmations and remindersContractual necessity
Processing Partner payoutsContractual necessity / Legal obligation (PMLA)
Sending promotional notifications and offersConsent (opt-in)
Improving platform features and performanceLegitimate interest
Fraud detection and preventionLegitimate interest / Legal obligation
Complying with legal obligations (tax, KYC)Legal obligation
Responding to support queries and disputesContractual necessity / Legitimate interest
Analytics and aggregated reportingLegitimate interest (anonymised data)

We will not use your data for any purpose beyond what is listed above without obtaining your prior consent.

5 Data Sharing & Disclosure

5.1 With Whom We Share Data

NamathuPark does not sell your personal data to any third party. We share your data only as described below:

5.2 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred as part of that transaction. You will be notified of any such change and your rights will continue to be protected.

5.3 Aggregated & Anonymised Data

We may share aggregated, anonymised data (e.g. city-wide parking demand patterns) with third parties for research, analytics, or commercial purposes. Such data cannot be used to identify you personally.

6 Data Storage & Security

6.1 Where Data is Stored

Your personal data is stored in Google Firebase Firestore, which may store data on servers located in the United States or other countries where Google operates data centres. By using NamathuPark, you consent to the cross-border transfer of your data to these servers, which are protected under Google's comprehensive security frameworks.

NamathuPark is committed to ensuring that any cross-border data transfer is carried out in compliance with applicable Indian data protection laws, including obligations under the DPDPA, 2023 once fully notified.

6.2 Security Measures

We implement industry-standard security practices to protect your personal data, including:

Important: While we take all reasonable precautions, no system is 100% secure. If you suspect your account has been compromised, contact us immediately at namathuparksupport@gmail.com.

7 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

Data CategoryRetention Period
Active account data (profile, contact)Duration of account + 12 months after deletion
Booking history7 years (for tax and legal compliance)
Payment transaction records8 years (as required by PMLA, 2002 and RBI guidelines)
Partner KYC documents5 years post partner offboarding
Usage logs and analyticsUp to 2 years (anonymised after 6 months)
Support correspondence3 years from closure of query
Push notification tokensDeleted upon account deletion or token refresh

Upon expiry of the retention period, data will be permanently deleted or anonymised in a manner that prevents re-identification.

8 Cookies & Tracking Technologies

The NamathuPark mobile apps do not use browser cookies. However, the following tracking technologies may be used:

If you use NamathuPark's website, standard web cookies may be used for session management and basic analytics. You can disable cookies through your browser settings, though this may affect website functionality.

9 Third-Party Services

NamathuPark integrates the following third-party services. Their privacy practices are governed by their own policies:

ServiceProviderPurpose
Firebase AuthenticationGoogle LLCMobile OTP-based user login
Firebase FirestoreGoogle LLCReal-time data storage (bookings, slots, users)
Firebase Cloud MessagingGoogle LLCPush notifications
Firebase AnalyticsGoogle LLCApp usage analytics
RazorpayRazorpay Software Pvt. Ltd.Payment processing (UPI, cards, net banking)
Google Maps SDKGoogle LLCIn-app navigation to parking slots

NamathuPark is not responsible for the data practices of these third-party providers. We encourage you to review their respective privacy policies.

10 Your Rights

Under applicable Indian data protection law, including the IT (SPDI) Rules, 2011 and the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

✅ Right to Access

Request a copy of the personal data we hold about you at any time.

✏️ Right to Correction

Request correction of inaccurate or incomplete personal data.

🗑️ Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

📤 Right to Data Portability

Receive your data in a structured, machine-readable format upon request.

🚫 Right to Withdraw Consent

Withdraw consent for processing at any time (may affect service availability).

⚠️ Right to Grievance Redressal

Lodge a grievance with our designated Grievance Officer (see Section 13).

🛑 Right to Opt-Out

Opt out of marketing communications at any time via in-app settings.

👦 Rights of Nominees

Under DPDPA 2023, nominate a person to exercise data rights on your behalf.

To exercise any of these rights, send a written request to namathuparksupport@gmail.com. We will respond within 30 days. In certain cases (e.g. ongoing legal proceedings, statutory retention obligations), we may be unable to fulfil your request and will explain the reasons.

11 Children's Privacy

NamathuPark is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data without parental consent, please contact us immediately at namathuparksupport@gmail.com and we will delete such data promptly.

Parents and guardians are encouraged to monitor their children's use of digital platforms and to report any concerns to us.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service offerings. When we make material changes, we will:

Your continued use of NamathuPark after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree to the revised policy, please discontinue use of the Platform.

13 Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, NamathuPark has designated a Grievance Officer for addressing concerns related to privacy and data processing:

DetailInformation
RoleGrievance Officer, NamathuPark
Contact Emailnamathuparksupport@gmail.com
Response TimeAcknowledgement within 24 hours; Resolution within 30 days
JurisdictionTamil Nadu, India

If you are not satisfied with our resolution, you may approach the appropriate regulatory authorities under the Consumer Protection Act, 2019, or the Data Protection Board of India once constituted under the DPDPA, 2023.

14 Contact Us

For any privacy-related questions, data access requests, or to exercise your data rights, please reach out to us:

We aim to respond to all privacy-related requests within 2 business days and resolve them within 30 days.

Questions About Your Privacy?

Your data is important to us. Contact our team for any privacy queries or data requests.

📧 namathuparksupport@gmail.com