Legal
DirectoryPrivacyPolicy
Last updated 23 August 2026
This policy covers personal data on the 4x4 Trails India, 4x4 Events India, 4x4 Clubs India, 4x4 Tracks India and 4x4 Garages India directories. For information and submissions on these directories, PRODM IT Solutions, Bengaluru, Karnataka, India is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. Grievance Officer & Data Protection contact: contact@prodmitsolutions.com.
1. What we collect
- Submissions: trail/event details, route (GPS/GPX), photos, and — only if you choose to give it — one contact (email or phone).
- Garage listings: a business name, location, business contact details (phone, WhatsApp, email, website), services, brands serviced, hours, and photos/videos. Many garages are compiled from public sources; where a business is claimed and verified by its owner, the owner controls which contact fields are shown publicly (per-field consent), and until then contact details stay hidden. Business contact details shown publicly are business — not personal — contact information.
- Your messages to us.
- Basic technical logs (IP, browser, timestamps) to run and secure the site and to record consent.
- We do NOT collect identity documents, driving-licence numbers or emergency contacts on this directory.
2. Why & lawful basis
- Submission data is processed on your consent — to publish the listing and to use your contact ONLY to reply to you about that submission. Technical logs are processed for the legitimate purpose of security and keeping a record of consent. We do not sell your data or use it for advertising.
3. Public display & safeguards
- What you submit is shown PUBLICLY — do not include anything private. Do not upload a track that starts or ends at your home. We automatically trim the start and end of every uploaded route and remove location (EXIF) data from photos, but please check before you submit.
4. Processors & transfers
- We use hosting (Vercel), database (Neon), and where applicable email/messaging delivery and AI enrichment. Some processing occurs outside India with safeguards consistent with the DPDP Act. AI enrichment processes public facts, not your personal contact details; where an AI tool ever processes personal data you submit, it acts as our processor, under confidentiality, only to prepare the listing.
5. Retention
- Submitter contact is kept while the listing is live plus 12 months, then deleted; contact for rejected or withdrawn submissions is deleted within 30 days; consent and technical records are kept while the listing is public and up to 3 years as evidence, then deleted. Published facts may remain once personal details are removed.
6. Your rights
- You may access, correct, complete, delete or withdraw consent, withdraw a submission, or nominate someone to act for you. Email contact@prodmitsolutions.com; we aim to respond within 15 days. Unresolved data-protection complaints may be escalated to the Data Protection Board of India.
7. Security
- We use HTTPS, access controls, non-public unguessable upload URLs, and audit logging. We will notify affected users and the Data Protection Board of a personal-data breach as the law requires.
8. Children
- The Directories are for adults (18 or older). We do not knowingly process a child's personal data without verifiable parental consent, and we do not track or profile children.