Royal Enfield (“we”, “us”, “our”) is committed to protecting the personal data of all individuals (“Data Principals”) who interact with our products, websites, mobile applications, dealerships, service centers, events, and customer support channels.
This Privacy Notice explains how we collect, use, store, share, retain, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA).
By using our services or providing your personal data, you acknowledge that you have read and understood this notice.
1. Personal Data We Collect
We may collect the following categories of personal data, depending on how you interact with us:
1.1 Information You Provide
Name (first name, last name, maiden name), phone number, email address, postal address
Identity details such as date of birth and government ID (where required)
Vehicle purchase details (including but not limited to motorcycle model, vehicle registration state/city Vehicle Identification Number (VIN), vehicle purchase date, and details of your orders and purchases, including Genuine Motorcycle Accessories (GMA) and Genuine Motorcycle Apparel (GMC)), service history, warranty information such as Roadside Assistance (RSA) status, service history/due date and warranty status
Payment and transaction details (processed securely through authorised partners)
Royal Enfield Account credentials, such as your ID and password
Responses to surveys, feedback forms, complaints and other customer support correspondence
Documents submitted for test rides, vehicle financing/loan enquiries, or promotional offers
Your language preference and preferred communication channel
1.2 Information Collected Automatically
Device information, IP address, and browser data(for example browser type & version)
Cookies and other tracking technologies used on our website, mobile app and other digital platforms
Website, product and service usage data, and website activity/usage analytics
Mobile app activity, crash logs, and device identifiers
1.3 Connected Vehicle and Telematics Data (Where Applicable)
Vehicle location, diagnostics, performance data
Ride statistics and connected-service usage patterns
Alerts, fault codes, maintenance indicators
1.4 Information from Dealers, Service Centers & Partners
Booking details for service, repair, or test rides
Delivery and fulfilment information
Customer support interactions handled by authorized partners
1.5 Financial Information (For Loan, EMI & Payment Verification)
Bank account details, bank statements, income proof, insurance policy number and previous loan details, collected when you apply for vehicle financing or an EMI option
Your date of birth is also collected specifically to support loan-related processing
We share limited financial information with banking institutions solely to verify bike-ownership loan/EMI offers on your behalf
Payments are processed securely through our payment gateway partner, for example Razorpay.
2. Purpose of Processing Personal Data
We process your personal data for the following purposes:
To provide, manage, and improve our products and services, including royalenfield.com and royalenfield.store
To process purchases, orders, service bookings and payments
To enable connected-vehicle features and mobile app functionalities, where applicable
To offer customer support and respond to your requests, queries and complaints
To respond more effectively to customer requests and queries, and make our website/app interface more user-friendly
To send service reminders, safety notices, order updates and other important updates
To send marketing/promotional emails, text messages and calls about our products or services, where you have opted in
To create and personalise content, your digital experience and shopping recommendations across Royal Enfield's website, app and other digital platforms
To facilitate website/app navigation and the login process, and avoid duplicate data entry
To enhance the security of our website, app, services and other digital platforms
To track campaign and survey responsiveness, and evaluate page/response rates
To calculate state-specific on-road pricing and route your enquiry to the nearest dealership, using your pincode/postal code
To contact prospective riders promptly, gauge model interest and schedule test rides, using your name and phone number
To send EMI quotations and spec sheets, and follow up with long-term prospective buyers, using your email address
To let our affiliate marketing partners optimise campaigns by understanding lead quality, region-wise and model-wise
To process your date of birth specifically to support loan-related processing, and verify bike-ownership loan/EMI offers with banking institutions and other third parties
To conduct analytics, quality improvement, and internal reporting
To share data with third-party service providers for website management, IT infrastructure, customer service, e-mail delivery and auditing
To comply with legal obligations, audits, and law-enforcement requests
To prevent fraud, misuse, or security incidents
We will not use your personal data for purposes not disclosed in this notice, unless required by law or permitted under DPDPA.
3. Consent & Withdrawal
Where consent is required, we obtain it in a clear, specific, and informed manner.
You have the right to withdraw your consent at any time by contacting us at:
privacy.india@royalenfield.com
Withdrawal of consent does not affect past processing but may limit your ability to access certain services.
4. Your Rights as a Data Principal
Under DPDPA, you have the following rights regarding your personal data:
Right to Access Information
You may request details of the personal data we process about you.
2.Right to Correction
You may request updates or corrections to inaccurate or incomplete data.
3.Right to Erasure
You may request deletion of your personal data when it is no longer required or when consent is withdrawn.
4.Right to Grievance Redressal
You may raise complaints regarding how your data is handled.
5.Right to Nominate
You may appoint a nominee to exercise your rights in the event of death or incapacity.
You may exercise these rights by writing to us at:
Email- Royal Enfield Privacy Office – privacy.india@royalenfield.com
We will respond within timelines prescribed under the DPDPA.
5. Data Sharing & Third Parties
We may share your personal data only with:
Authorized Royal Enfield dealers, service centers and financing partners
Advertising & marketing platforms, such as Meta (Facebook/Instagram) and Google, to deliver and measure our digital advertising campaigns
CRM and customer-engagement platforms, such as Salesforce (India/EMEA), our appointed CRM agency in India, and Salesforce CDP (for marketing communications by email, SMS and push notification)
Web analytics providers, such as Google Analytics and Microsoft Clarity, to understand website usage and visitor behaviour
Payment service providers, including Razorpay, our payment gateway partner
Logistics and delivery partners, including Shipdelight, for courier orchestration and order delivery
Banking institutions, for loan/EMI verification
Affiliate marketing partners, to support lead generation and campaign optimisation
Affiliates/Subsidiaries of Eicher Motors Limited, on a need-to-know basis for business operations
IT service providers, cloud hosting partners, and other analytics vendors
Connected-vehicle technology partners, where applicable
Legal, audit, or regulatory authorities, where required by law
We ensure all third parties follow appropriate data-protection standards and process data only under our instructions.
6. Data Storage
Royal Enfield may store your personal data on secure systems hosted by us or authorized service providers.
Appropriate organizational and technical measures are used to ensure the security and integrity of your personal data.
7. Cross-Border Transfers
Your personal data may be transferred to trusted third-party partners located outside India.
We ensure that such transfers comply with DPDPA requirements and that adequate protection measures are in place.
For example, our marketing, analytics and CRM technology partners - including Meta, Google, Google Analytics, Microsoft Clarity and Salesforce - may process personal data on servers located outside India.
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in this notice or as required by applicable laws, whichever is longer. When data is no longer needed, we securely delete or anonymize it.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or loss.
These include encryption, access controls, secure storage, monitoring, and vendor security assessments.
10. Children’s Data
Royal Enfield does not knowingly collect personal data from children below the age threshold defined under applicable law (an individual under 18 years of age) without verifiable parental consent.
11. Grievance Redressal Mechanism
If you have any concerns, complaints, or questions about how your personal data is processed, you may contact our Grievance Officer:
Grievance Officer
Email -grievance.officer.India@royalenfield.com
Office No. 1111, 11th Floor, Ashoka Estate, Plot No. 24, Barakhamba Road, New Delhi-110001.
If you are unsatisfied with our response, you may escalate your grievance to the Data Protection Board of India in accordance with DPDPA procedures.
12. Updates to This Privacy Notice
We may update this Privacy Notice periodically to reflect legal, operational, or technological changes.
Updated versions will be posted on our website with the date of revision.
13. AI Usage Clause
The Royal Enfield AI Chatbot may use artificial intelligence to generate automated responses. While it is designed to provide accurate assistance, the responses may not always be complete or up to date.
Information provided by the chatbot does not constitute legal, technical, or professional advice.
Users should independently verify critical information. Royal Enfield is not responsible for actions taken based on chatbot responses.
14. Language Preferences
Data Principal may choose to receive this Privacy Notice and relevant privacy-related information in a language listed in the Eighth Schedule to the Constitution of India.
22 Language Options: Assamese, Bengali, Bodo, Dogri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Maithili, Malayalam, Manipuri, Marathi, Nepali, Odia, Punjabi, Sanskrit, Santhali, Sindhi, Tamil, Telugu, and Urdu.
Please mail your request on privacy.india@royalenfield.com