1. Introduction and Scope
Security of your personal data is important to us, hence, we treat your privacy with respect, fairness and integrity. This Privacy Notice explains how Eicher Motors Limited (“the Company”, “we”, “us”, or “our”), collects, uses, discloses, and protects personal data when you visit or interact with our Digital Platforms, create an account, pre-book, purchase or register a Flying Flea electric vehicle (“EV”), connect to our services, or otherwise interact with us.
Where we refer to "you" or "your" in this Notice, we mean any individual who visits or interacts with our Digital Platforms, books a test ride, purchases or registers a Flying Flea motorcycle, creates a Fleaware OS account, uses the Flying Flea companion app, or otherwise interacts with us or our dealer network.
This Privacy Notice applies to all digital properties, connected vehicle services and related services operated by Eicher Motors Limited globally, including but not limited to:
● Our websites (including flyingflea.royalenfield.com, FF dealer portals, FF booking portals, and associated subdomains);
● Our mobile applications (including the Flying Flea App and any official companion apps); and
● Related digital features, software, and online services
(Collectively referred to in this Privacy Notice as our “Digital Platforms”)
This Privacy Notice is intended to apply globally. Where the applicable data protection laws of the jurisdiction in which you are located impose additional or different requirements, those requirements will apply to the extent applicable.
For the purposes of this Privacy Notice, “Applicable Data Protection Laws” means the data protection, privacy and related laws applicable to the processing of your personal data, based on your location, the services you use and the circumstances of the processing.
EU Data Act Notice:
For individuals located in, or connected motorcycles operating within, the European Union, this notice covers your personal data.Non-personal product and related-service data generated by your connected motorcycle under the EU Data Act are separately addressed in our Flying Flea Data Act Information Notice, available at https://flyingflea.royalenfield.com/uk/en/eu-data-act
2. Personal Data We Collect
We may collect the following categories of personal data, depending on how you interact with our Digital Platforms
2.1 Data shared directly by You
a) Identity and contact data: Name, email address, phone number, postal address, date of birth and government ID proofs where required.
b) Account credentials: Fleaware.OS username, password (hashed), profile pictures, account preferences, feedback, queries.
c) Order and transaction data: Purchase history, financing or EMI application details, dealer of purchase.
d) Financial data: Payment details (processed by our PCI-DSS certified payment providers; we do not store full card details).
e) Technical data: IP address, browser type and version, device identifiers, operating system, referral source.
f) Test ride & booking data: Test ride bookings, city/location selected, license details where required.
g) Marketing and communications data: Preferences for receiving marketing, survey responses, competition entries.
h) Customer support data: Correspondence, call recordings (where notified), service tickets, warranty claims, complaints, queries.
i) Riders Club data: Membership details, event registrations.
Some Flying Flea features allow you to share information about your motorcycle with people who are not Flying Flea customers or account holders for example, sending a live-tracking link by SMS or email to a friend or family member so they can see your journey in real time. Where you choose to do this:
a) The receipt typically accesses the shared link sent to the phone number or email address you provide;
b) we will process the phone number or email address you provide for the purpose of delivering the link and the one-time passcode, and will retain a record that the link was accessed and when;
c) you confirm that you have the recipient's permission to share their contact details with us for the sole purpose of sending this communication.
d) we process this data on the basis of our legitimate interest in providing the sharing feature you have activated, and, where applicable, your instruction to us to send the link on your behalf.
For Recipients: We process your contact details and link access history based on our legitimate interest in delivering the live-tracking service initiated by the sender. The initial message sent to you will include a direct link to this Privacy Notice detailing how your data is handled and how you can exercise your privacy rights. We do not use recipient contact details for marketing or build profiles on non-registered recipients.
If you are a recipient of a shared link and have questions about how your data is processed in connection with it, you can contact us using the details shared in the “Contract Us” Section. If you call or message someone who has enabled their Bluetooth phone and communication feature, your name, number, or message content may be transiently displayed or read aloud on their vehicle's cluster. This data is not stored by us. Given the nature of incoming calls and messages, it is not possible for us to notify each caller or sender individually; this notice serves as our general disclosure of this processing.
2.2 Connected Vehicle and Telemetry Data (Product Data)
This section covers connected-vehicle data only insofar as it constitutes personal data under applicable Data Protection Laws. When you register, activate, or connect Flying Flea motorcycle, the Digital Platforms (including but not limited to the Fleaware OS operating system, and the companion app), may generate the following categories of product data and related service data, that are considered Personal Data:
a) Account and Pairing Data: Fleaware OS account login, phone-as-key pairing status, Bluetooth/Wi-Fi device pairing.
b) Location data (only when connected services are active and Incognito Mode is off): GPS location, "share my status" location, geofencing boundary alerts, theft/tip-over alert location.
c) Battery and Charging Data: Battery state of charge, charging session data (via onboard charger), wireless phone-charging usage.
d) Vehicle diagnostics: Fault codes, firmware/software version, over-the-air (OTA) update history.
e) Riding behavior data: Ride mode, cruise control use, lean angle/ABS event flags.
f) Connectivity metadata: SIM/eSIM identifiers, app-to-vehicle command logs.
g) Voice and navigation data: Voice Assist interaction data, Google Maps navigation queries and route/charging-stop recommendations.
h) Phone & Communications Data (Bluetooth-paired). When you pair your smartphone with your motorcycle via Bluetooth, we transiently process caller ID (name and number of incoming calls), a rolling log of your last five calls, your favourite contacts, SMS message alerts and read-aloud content, and app notification content, solely to display or read this information through your vehicle's cluster. This data is not stored by us, it is processed only for the duration needed to display or read it aloud, and is discarded immediately afterward.
i) Remote command and access logs: Remote lock/unlock action type, method (LTE or Bluetooth), processing status, and the date, time, and location of each command
j) Digital key sharing data: Status, duration, and revocation history of any digital key ("Digital PIN Share") you grant to another rider to access your motorcycle
k) Vehicle authentication data: Your Vehicle PIN and related reset/renewal events
l) Security and alert data: Tamper, tow, and unauthorised-movement alerts, including the location and time associated with the alert
m) Emergency/SOS data: Data generated when the SOS or emergency alert feature is activated, including location and timing of the alert
n) Ride mode and settings configuration: Saved custom ride mode settings (e.g., power output, torque, regenerative braking level, ABS level) and Vacation Mode status
o) Shared live-tracking data: Where you choose to share a live-tracking link, the link's access history, including that it was opened and when
Incognito Mode: Flying Flea motorcycles let you disable location-based data sharing at any time via Incognito Mode. When enabled, we stop collecting and processing your location, trip details, live tracking, remote access data, and other connected-service data, including features such as geofencing, "share my status," and location-based theft alerts.
2.3 Special Category of Personal Data
We do not intentionally collect special categories of personal data (such as health data) about you except where necessary for the purposes described in this Privacy Notice or as otherwise permitted or required by Applicable Data Protection Laws. However, such data may be processed incidentally in limited circumstances, including where:
a) your motorcycle's crash or emergency detection feature is triggered, and you, an emergency contact, or emergency services provide information about your physical condition as part of the resulting emergency response; or
b) you voluntarily disclose health-related information to us - for example, when making a warranty, insurance, or customer support claim following an accident.
Where we process such data, we do so only to protect your vital interests or those of another person (for example, to facilitate an emergency response), or on another legal basis permitted under applicable law, and only for as long as necessary for that purpose.
2.4 Data From Other Sources
a) Authorized dealers and service centers (service history, ownership transfer records).
b) Payment and financing partners (loan/lease application outcomes).
c) Vehicle registration authorities, insurance verification bodies.
d) Marketing and analytics partners, and social media platforms.
e) Event and campaign partners
2.5 If you fail to provide personal data
Where we are required to collect certain personal data from you in order to provide services through the platform, and you choose not to provide such information, we may not be able to provide you with certain features, services, or functionalities available on the platform.
For example, certain services on the platform may require personal data to enable account creation, vehicle connectivity, navigation features, transaction processing, customer support, or other service-related functionalities. If you choose not to provide the required personal data, the relevant services or functionalities may not be available to you.
All comments, feedback, postcards, suggestions, ideas, and other submissions disclosed, submitted or offered to Royal Enfield on or by this Site or otherwise disclosed, submitted or offered in connection with your use of this Site (collectively, the "Comments") shall be and remain Royal Enfield's property. Such disclosure, submission or offer of any Comments shall constitute an assignment to Royal Enfield of all worldwide rights, titles and interests in all copyrights and other intellectual properties in the Comments. Thus, Royal Enfield will own exclusively all such rights, titles and interests and shall not be limited in any way in its use, commercial or otherwise, of any Comments. Royal Enfield is and shall be under no obligation.
You agree that no Comments submitted by you to the Site will violate any right of any third party, including copyright, trademark, privacy or other personal or proprietary right(s). You further agree that no Comments submitted by you to the Site will be or contain libelous or otherwise unlawful, abusive or obscene material. You are and shall remain solely responsible for the content of any Comments you make.
3. How we process your Data and Legal Bases for Processing
Purpose | Data Used | Legal Basis |
Account creation & Fleaware.OS registration | Identity, Contact, Account credentials | Performance of a Contract |
Purchase, delivery & financing | Identity, Contact, Financial, Order data | Performance of a Contract |
Warranty & after-sales service | Identity, Contact, and Vehicle data | Performance of contract; Legal obligation |
Connected features you actively enable (navigation, ride analytics, "share my status") | Location, Ride & vehicle usage data | Consent |
Geofencing / "share my status" | Location data | Consent |
OTA software/firmware updates | Vehicle diagnostics, firmware version | Performance of a contract; Legitimate interests/uses (product safety and security) |
Safety recalls and technical campaigns | Identity, Contact, and Vehicle data | Legal obligation; Vital interests |
Test rides and dealer bookings | Identity, Contact | Performance of a contract; Legitimate interests |
Customer support | Identity, Contact, Support correspondence | Performance of a contract; Legitimate interests |
Marketing communications | Contact, Marketing preferences | Consent; |
Remote lock/unlock and digital key sharing | Remote command logs, Digital key sharing data | Performance of a contract; Legitimate interests |
Phone and Communications | Recipient's phone number, Identity, Contact | Consent |
Vehicle PIN authentication and reset | Vehicle authentication data | Performance of a contract; Legitimate interests |
Tamper, tow, and theft alerts | Security and alert data, Location data | Legitimate interests |
Sharing a live-tracking link with a third party | Recipient's phone number /email, link access history | Consent |
Crash/emergency detection and SOS response | Location data, crash/impact event data, and (where applicable) health information volunteered during the emergency response | Vital interests, (as necessary to protect the vital interests of the data subject where they are physically or legally incapable of giving consent) |
Fraud prevention & platform security | Account, Technical, Connectivity data | Legitimate interests |
Dealer and Service Sharing | Identity, Contact, and Vehicle data | Performance of contract/ Legitimate Interest |
Legal and regulatory compliance | Meet our legal, tax, and consumer-protection obligations | Legal obligation |
Where we rely on consent, you can withdraw it at any time, for connected features, this is as simple as turning the feature off in the Fleaware.OS app or enabling Incognito Mode for location-based features. Withdrawing consent doesn't affect the lawfulness of processing carried out before withdrawal.
4. How We Use Your Data
a) To provide, operate, and maintain the Digital Platform, your account, and connected vehicle services.
b) To process orders, deliveries, financing, registration, and after-sales support.
c) To monitor vehicle health, issue safety/firmware updates, and manage recalls.
d) To personalize your riding experience where you opt in (ride modes, route suggestions, range prediction).
e) To display incoming call, message, and notification information from your paired smartphone on your vehicle's cluster, and to read this information aloud where you have enabled this feature, for your convenience and safety while riding.
f) To improve our products through aggregated or pseudonymized analysis of telemetry and usage trends.
g) To communicate service, safety, and recall notices.
h) To send marketing communications where you have consented or as otherwise permitted by local law.
i) To detect, investigate, and prevent fraud, theft, and unauthorized vehicle access.
j) To comply with legal, tax, warranty, and regulatory obligations, including type-approval and roadworthiness reporting.
5. Who We Share Your Data With
a) Group companies including subsidiaries and affiliates of Eicher Motors Limited, for shared platform operation, R&D, and group reporting.
b) Authorized dealers, service centers, distributors network and technicians to fulfil test ride bookings, purchases, warranty, after-sales service and Roadside assistance partners.
c) Payment, financing and insurance partners to process payments, loan/lease applications, and insurance claims.
d) Cloud hosting, telematics, IT service providers and our authorized call center partners.
e) Logistics and courier companies who transport our products to you
f) Marketing and analytics partners, only where you have provided consent.
g) Regulators, law enforcement, and public authorities, where we are legally required to, or to establish, exercise, or defend legal claims.
h) A buyer or successor entity in the event of a merger, acquisition, or restructuring of the Company.
6. International Data Transfers
We are an organization based out of India, hence your personal information may be transferred to, and stored in, India and other countries which may be outside your country of residence, in particular in connection with the operation of our shared Fleaware.OS connected-vehicle platform, backend engineering, and customer support functions. Some of these countries, including India, are not currently the subject of an adequacy decision by the European Commission or the UK Government and may apply different standards of data protection than your country of residence.
We will take appropriate steps to ensure that any transfer of your personal information outside the European Economic Area (EEA) or the United Kingdom is carried out in accordance with applicable law, and we only transfer personal information to another country where:
a) We are satisfied that adequate levels of protection are in place to protect your information; and
b) The transfer is limited to countries which either benefit from an adequacy decision or are covered by alternative safeguards that we are satisfied with providing an adequate level of protection.
To this end:
a) Transfers within the Eicher Motors Group are covered by an intra-group data transfer agreement, incorporating Standard Contractual Clauses, which contractually oblige each group entity to protect your personal information receives an adequate and consistent level of protection wherever it is transferred within the group, together with supplementary technical measures such as encryption in transit and at rest, role-based access controls, and data minimization at the receiving location.
b) Where we transfer your personal information outside the group to third parties who help us provide our products and services, we obtain contractual commitments from them, to protect your personal information to the same standard.
c) Where we receive requests for information from law enforcement, courts, or regulators, we carefully review and validate these requests before any personal information is disclosed.
7. Data Retention
We retain your personal data only for as long as necessary to provide our products and services to you, or as required by applicable law. The retention period applied depends on the nature of the data and the purpose for which it was collected; for instance, account and vehicle data is generally retained for the duration of your relationship with Flying Flea, while certain records may be retained for a longer period to comply with our legal, tax, or warranty-related obligations. Once personal data is no longer required for these purposes, we securely delete or anonymize it.
If you sell or otherwise transfer ownership of your motorcycle, you should notify us so that your account and data can be delinked from the vehicle. To do this, please contact our customer care team or write to us at support.emea@flyingflea.com providing details of the vehicle and the change in ownership at:
For India: support.india@flyingflea.com
For EU & UK: support.emea@flyingflea.com
Once we receive your request, we will process the removal of the vehicle from your account and perform the necessary steps on our end to ensure that the new owner cannot view any of your historical data associated with that vehicle, including ride history, diagnostics, and location data.
Please note that we may retain certain data relating to the vehicle and its prior ownership where required to comply with our legal, regulatory, warranty, or safety obligations (for example, in connection with recalls, roadworthiness reporting, or dispute resolution), even after the vehicle has been delinked from your account. Any such retained data will continue to be handled in accordance with this Notice and our data retention practices.
8. Your Data Subject Rights
Depending on where you live, data protection law gives you a number of rights over your personal data. These rights are subject to certain exceptions and conditions under applicable law, and we will inform these to you if they apply to a specific request you make.
a) Right to Access: You have the right to confirm whether we hold personal data about you, and if so, to receive a copy of that data, together with information such as the purposes of processing, the categories of data concerned, and the recipients to whom it has been or will be disclosed.
b) Right to Rectification: You have the right to correct any personal data we hold about you that is inaccurate, and to have incomplete personal data completed.
c) Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, for example, where the data is no longer necessary for the purposes for which it was collected. This right does not apply where we need to retain the data to comply with a legal obligation, or to establish, exercise, or defend legal claims.
d) Right to restriction of processing: You have the right to limit the way we use your personal data in certain circumstances.
e) Right to data portability: Where we process your personal data on the basis of your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to have it transmitted to another organization, where technically feasible.
f) Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our legal basis. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
g) Right to Grievance Redressal: You have the right to seek redressing of any grievances regarding the processing of your personal data.
h) Right to Nomination (For Indian Users): You have the right to nominate any other individual who shall, in the event of your death or incapacity, exercise your data rights in accordance with applicable law.
i) Right to withdraw consent: Where we rely on your consent to process your personal data for example, for optional connected features such as location sharing, or for marketing communications you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before your withdrawal.
For location and connected-service data specifically, you can manage or withdraw your consent through two dedicated settings available in the App, under Vehicle Settings > Vehicle Mode:
● Privacy Mode — When enabled, your location data is not processed by us.
● Incognito Mode — When enabled, your motorcycle continues to monitor for a crash using onboard sensors, without this requiring the processing of your location or other personal data. This passive monitoring capability is retained so that, if a crash is detected or the SOS button is pressed, your motorcycle can immediately and automatically exit Incognito Mode and resume standard processing, including location data, so that we and emergency services can locate and assist you.
● The app will display a countdown showing how long Incognito Mode will remain active, and will notify you shortly before it is due to expire so that you can choose to extend it or turn it off.
j) Right to lodge a complaint: If you believe our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the supervisory authority
Country | Supervisory Authority |
India | Data Protection Board of India |
United Kingdom | Information Commissioner's Office (ICO) |
France | Commission Nationale de l'Informatique et des Libertés (CNIL) |
Germany | The data protection authority of the relevant German federal state (Land) |
Spain | Spanish Data Protection Agency (AEPD - Agencia Española de Protección de Datos) |
Italy | Italian Data Protection authority ( Garante per la protezione dei dati personali) |
You may exercise any of the above rights by contacting us using the details in Section 13. To protect your personal data, we may need to verify your identity before responding to your request and may ask you for additional information for this purpose. We will acknowledge receipt of your request without undue delay and provide a substantive response within one month of receiving it.
Taking into account the complexity and number of requests, this period may be extended by up to two additional months where necessary. If an extension is required, we will inform you of the delay and the reasons for it within one month of receiving your initial request.
To protect your personal data, we may need to verify your identity before fulfilling your request and may ask for additional information for this purpose. Exercising your rights is generally free of charge, though we reserve the right to charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.
9. Children's Privacy
Our Digital Platforms are intended solely for use by individuals who are legally permitted to use the relevant service or Vehicle under the applicable laws. We do not permit account creation, vehicle registration, or access to any part of our Digital Platforms by individuals below legally permitted age, nor do we not knowingly collect their personal data.
Access to our Digital Platforms are conditioned on the user confirming, at the point of registration, that they are at least the legally permitted age. Where we become aware that personal data has been collected from an individual below this age threshold, we will take steps to delete that data and deactivate the associated account without undue delay.
10. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, and we review these measures regularly to keep pace with new risks. This includes securing your connected motorcycle, account, and the systems we use to store and process your data.
For your convenience and security, you may choose to unlock the App using your phone's built-in fingerprint or facial recognition feature (where supported by your device) or PIN or pattern. This authentication is carried out entirely by your phone's operating system; your fingerprint or facial data is processed and stored locally on your device, and is never received, accessed, or stored by us. We only receive confirmation that your device has been successfully authenticated by you.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We encourage you to do your part by keeping your account password and phone-as-key credentials confidential.
We also require our dealers and technology partners to protect your data to a similarly high standard. Where we become aware of a personal data breach, we will assess, investigate and respond to the breach in accordance with Applicable Data Protection Laws, including notifying relevant authorities and affected individuals where and to the extent required by law
If you believe your personal data may have been compromised, please contact us immediately.
11. Cookies
We use cookies and similar technologies on our Digital Platforms to keep them secure, remember your preferences, and understand how you use them. Strictly necessary cookies do not require your consent. All while all other cookies, including (analytics, functionality, and marketing cookies), require your consent. You can manage your preferences at any time through our cookie preference center.
For full details of the cookies we use and their duration, see our Cookie Policy at https://flyingflea.royalenfield.com/uk/en/cookie-policy
12. Update to this Notice
We may update this Notice from time to time to reflect changes in our practices, our products, or applicable law. We will post the updated Notice on this page with a revised “Effective Date” and, for material changes, notify you via email or an in-app/website notice.
13. Contact Us
If you have questions about this Privacy Notice or how we handle your personal data or would like to exercise any of your rights, please contact us using the details below, based on your location:
If you are based in: | Contact us at: |
The European Union | privacy.eu@royalenfield.com |
The United Kingdom | privacy.uk@royalenfield.com |
India | privacy.india@royalenfield.com |
14. Language Preferences (For Users in India)
You may choose to receive this Privacy Notice and relevant privacy-related information in a language listed in the Eighth Schedule to the Constitution of India. In accordance with the DPDPA, this Privacy Notice and consent options are available via our Digital Platforms and account settings in English and all 22 languages listed in the Eighth Schedule to the Constitution of India. You can switch your preferred language at any time in your account/Digital Platforms Settings.
22 Language Options: Assamese, Bengali, Bodo, Dogri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Maithili, Malayalam, Manipuri, Marathi, Nepali, Odia, Punjabi, Sanskrit, Santhali, Sindhi, Tamil, Telugu, and Urdu.
Please mail your request to privacy.india@royalenfield.com
1. Introduction
This notice provides information about data generated through the use of the Flying Flea electric motorcycle and its associated connected services.
This notice explains:
a) what data the motorcycle and its connected services can generate;
b) the format, estimated volume, and frequency of that data;
c) where the data is stored and how long it is retained;
d) how you can access, retrieve, or erase available data;
e) how you can ask us to share data with a third party;
f) how we may use the data; and
g) how you can contact us or raise a complaint.
Where data referred to in this notice is Personal Data, our collection and use of that Personal Data is governed by the Flying Flea Privacy Notice, available at [Privacy Notice Link]. This notice should be read alongside, and does not duplicate the information already provided there.
2. Scope
This notice applies to:
a) the Flying Flea [FF.C6 / applicable model(s)];
b) the software and connectivity systems installed on the motorcycle;
c) the Flying Flea mobile application
d) the Flying Flea user account and vehicle-pairing system;
e) navigation, route-planning, and "walk to motorcycle" services;
f) remote vehicle-control services (lock/unlock, digital key sharing);
g) security and tamper/theft-monitoring services, including geofencing;
h) diagnostic and vehicle-health services;
i) over-the-air (OTA) software services
j) other digital services that affect, control, or support the operation or behaviour of the motorcycle.
The precise data generated may vary according to motorcycle
model and model year, hardware and software configuration, installed equipment, activated services, user settings, country, connectivity availability, and how the motorcycle and connected services are used.
3. Royal Enfield as Data Holder
The prospective Data Holder for the purposes of the EU Data Act is:
a) Full legal name of the EU entity: Royal Enfield Europe B.V
b) Registered address: Middelweg 3, 4023AR Rijswijk (GLD)
c) Company registration number: 93329016
d) Email: privacy.eu@royalenfield.com
4. Key Definitions
a) Connected Motorcycle — the Flying Flea motorcycle that generates or collects data concerning its use, performance, or environment, and is capable of communicating that data through an electronic communications service, physical connection, or on-device access.
b) Product Data — data generated by the use of the Connected Motorcycle that is designed to be retrievable from the motorcycle, a remote server, or another technical interface.
c) Related Service — a digital service connected to the motorcycle such that its absence would prevent the motorcycle from performing one or more of its functions, or which affects or adapts the motorcycle's functions or behavior (e.g., the Fleaware.OS app, remote lock/unlock, live tracking).
d) Related Service Data — data representing your actions, events, or interactions relating to a Related Service.
e) User — a person or organisation that owns the Connected Motorcycle, has a contractual right to use it, rents or leases it, or receives a Related Service. This includes a secondary rider granted access via Digital PIN Share.
f) Readily Available Data — Product Data and Related Service Data that we lawfully obtain, or can lawfully obtain, from the Connected Motorcycle or Related Service without disproportionate effort.
5. Data Generated by Connected Vehicles
The table below reflects the data categories and parameters generated by the FF
Data Category | Data Parameters | Storage Location |
Bluetooth | MAC ID, Device Name | Processed transiently for pairing/connection only |
Vehicle Status | Parked, Riding, Charging | Remote (backend systems hosted in Germany and Switzerland) |
Location Data | Latitude and Longitude, Charging Points, Location Tags, SOS | Remote (backend systems hosted in Germany and Switzerland) |
Vehicle Data | VIN, Colour, Seat, Model, Nickname, Vehicle PIN, SOS | Vehicle PIN stored on-motorcycle (secure hardware memory); remaining vehicle data (VIN, Colour, Seat, Model, Nickname, SOS) stored remotely |
Telemetry Data | TPMS (tyre pressure), Motor/Battery/LTE/GPS Health, Odometer Reading, Trip Details, Vehicle Component Firmware/Hardware Versions (VCU, MCU, BMS, OBC, ABS, BCM) | Remote (backend systems hosted in Germany and Switzerland) |
Wi-Fi | Device Name, MAC ID | processed transiently for pairing/connection only |
Software | Version, Status, Time | Remote (backend systems hosted in Germany and Switzerland) |
Riding Modes | Custom, City, Rain, Highway, Sport | Remote (backend systems hosted in Germany and Switzerland |
Battery Status | Charging Time, Charging Type, Range, Battery Level, Battery Temperature, Battery Heat/Cold Alerts, Charging Alert | Remote (backend systems hosted in Germany and Switzerland |
Remote Lock/Unlock Events | Action type (lock/unlock), method (LTE or Bluetooth), processing status, success/error result, timestamp, location, and user ID logged for every action | Remote (backend systems hosted in Germany and Switzerland |
Incognito Mode Status | Active/inactive status, countdown timer, auto-deactivation trigger (crash/SOS override) | Remote (backend systems hosted in Germany and Switzerland |
Tamper / Tow / Theft Alerts | Unauthorised movement detection, component tampering detection, GPS coordinates at time of alert, Harsh Acceleration/Braking Alerts, Overspeed Alerts | Remote (backend systems hosted in Germany and Switzerland |
Emergency / Crash Detection | Crash detection trigger, automatic override of Incognito/Vacation modes | Remote (backend systems hosted in Germany and Switzerland |
Geofencing | Polygon boundary (up to 10 points) or radius-based boundary configuration, breach events | Remote (backend systems hosted in Germany and Switzerland |
Navigation — "Walk to Motorcycle" | Last parked location, walking directions, distance, estimated time (requires GPS) | Remote (backend systems hosted in Germany and Switzerland |
Ride Mode Customisation (Custom Mode) | Power output, torque map, regen coast, regenerative braking level (10% increments), ABS level (1–4) | Remote (backend systems hosted in Germany and Switzerland |
Regenerative Braking | Configurable braking regeneration setting | Remote (backend systems hosted in Germany and Switzerland |
Lean-Angle ABS | ABS level setting (1–4; Level 1 = Rear ABS Off) | Remote (backend systems hosted in Germany and Switzerland |
Traction Control & Hill Hold | Status (display-only, synced from vehicle cluster) | Remote (backend systems hosted in Germany and Switzerland |
Digital PIN Share (Phone-as-Key) | Digital key share status (Active/Inactive), share duration, revocation events | Remote (backend systems hosted in Germany and Switzerland |
Vehicle PIN Reset/Renewal | OTP-authenticated reset events, failed attempt count (lockout after 3 failed attempts) | the Vehicle PIN itself is stored on-motorcycle (secure hardware memory); the reset/renewal event log is stored remotely (backend systems) |
Data Sync Metadata | Last-synced timestamp; sync typically occurs within 5 seconds across app, cloud, and vehicle cluster | Remote (backend systems hosted in Germany) |
Remote Live Tracking (Shared Access) | Secure link generation for non-app users, OTP-authenticated access, link validity period | session-based; not retained beyond session expiry |
Vehicle CAN Data | Motor and battery control signals (e.g., motor RPM/torque, battery cell voltage/current, charger input-output values), vehicle mode and drive-state signals, sensor and diagnostic signals from vehicle control units | Remote (backend systems hosted in Germany and Switzerland |
Diagnostic Trouble Code (DTC) Data | Fault/malfunction codes generated by onboard control units (e.g., battery, motor, charging, braking systems), used for diagnostics and maintenance | Remote (backend systems hosted in Germany and Switzerland |
Contextual Vehicle Warnings | On-display warnings such as battery derating, low SOC, thermal/insulation faults, sensor faults | Remote (backend systems hosted in Germany and Switzerland |
Network Connectivity Data | Signal strength and quality indicators (e.g., LTE/Wi-Fi/Bluetooth signal strength, network latency, connection type), used to maintain connected services | Remote (backend systems hosted in Germany and Switzerland |
Inertial/Motion Data (IMU) | Lean angle, acceleration, orientation data used to support ABS, traction control, and crash-detection features | Remote (backend systems hosted in Germany and Switzerland |
Component Fault & Status Signals |
| Remote (backend systems hosted in Germany and Switzerland |
Vehicle Software/Version Data | Firmware, hardware, and bootloader version identifiers for individual vehicle control units, used for OTA updates and diagnostics | Remote (backend systems hosted in Germany and Switzerland |
6. Data Format
Product Data and Related Service Data may be generated internally in formats including numeric values, Boolean/status values (e.g., ACTIVE/INACTIVE), text strings, timestamps, geographical coordinates, event/log records, diagnostic trouble codes (DTCs), and structured telemetry formats.
Data made available to you will be provided in PDF, together with the metadata necessary to understand and use the data (e.g., timestamp, user ID, and location).
Some data generated within individual vehicle components may use proprietary technical formats. Where such data constitutes Readily Available Data, it will be converted into, or accompanied by information that renders it in, a comprehensive, structured, commonly used, and machine-readable format.
7. Estimated Data Volumes
a) On-motorcycle data generated: 15 MB per day considering a 2 Hr ride
b) Related Service Data (app-level): 450 MB/month
The actual volume will depend on factors including frequency and duration of use, number and length of journeys, activated connected services (e.g., live tracking, navigation use, software version, network availability, occurrence of warning/diagnostic/security events, and user settings.
8. Continuous and Real-Time Data Generation
Some data is generated and synced continuously or near-continuously while the motorcycle is in use:
a)Live location tracking updates every 2–5 seconds when active.
b) App-cloud-vehicle cluster sync for settings and status changes typically completes within 5 seconds.
c) The app displays a "Last synced" timestamp and will notify the user if data is outdated (e.g., not synced within 24 hours).
Other data is generated on a periodic or event-triggered basis, including at ignition on/off, at app connection/synchronization, when a connected function is used (e.g., a lock/unlock command), when a warning, fault, tamper, or safety event occurs (e.g., crash detection, geofence breach), during charging, during servicing/diagnostics, or when a remote command is issued.
9. Storage and Retention
Data Category | Retention Period |
Vehicle authentication credentials, certificates, keys | 1 year |
Vehicle Status, Location Data, Telemetry Data, Trip Details, Riding Modes, Battery Status | 7 years |
Remote Lock/Unlock Events, Tamper/Tow/Theft Alerts, Emergency/Crash Detection, Geofencing | 7 years |
Digital PIN Share, Vehicle PIN Reset/Renewal events | 7 years |
Remote Live Tracking (Shared Access) | 7 years |
Bluetooth, Wi-Fi (MAC ID, Device Name) | 7 years
|
10. Your Rights
You may access Readily Available Data generated through your use of Connected Motorcycle and Related Services. Some data is directly accessible through the motorcycle's display cluster, the Flying Flea app, or your user account for example, battery state of charge, charging time remaining, vehicle health status, and current ride mode.
Other data may only be available from Flying Flea's backend systems and must be requested through a request by email: [to be shared by Legal]
We shall share your Data, without undue delay, free of charge and in a secure (location and sensitive data are encrypted during transmission and storage), comprehensively, structured, commonly used, and machine-readable format with the relevant metadata necessary to interpret and use it; at the same level of quality available to us; and continuously and in real time where relevant and technically feasible.
Some products or related service data may contain or be linked to trade secrets. We will inform you if any part of the requested data is subject to such protections, and will work with you to provide access in a way that respects both your rights and our legitimate interests as well as of our third parties including but not limited to where we identify data that constitutes a trade secret and we will require you and/or your designated third party to agree to proportionate technical and confidentiality measures (such as non-disclosure and usage restrictions) prior to granting access.
Right to Erasure
Where technically available, you may erase or initiate erasure of relevant data by:
● deleting a journey or record in the app;
● removing a motorcycle from your account;
● resetting the motorcycle;
● deleting your account; or
● contacting us at privacy.eu@royalenfield.com
Deletion may not be available for:
● data automatically overwritten by the motorcycle (circular storage);
● data required for an active service (e.g., an active Digital PIN Share, active geofence);
● data required for safety, security, or legal obligations;
● records required to establish or defend legal claims;
● data that must be retained under warranty or product-safety obligations
If you sell or otherwise transfer ownership of your motorcycle, you should notify us so that your account and data can be delinked from the vehicle. To do this, please contact our customer care team or write to us at privacy.eu@royalenfield.com providing details of the vehicle and the change in ownership.
Once we receive your request, we will process the removal of the vehicle from your account and perform the necessary steps on our end to ensure that the new owner cannot view any of your historical data associated with that vehicle, including ride history, diagnostics, and location data.
Please note that we may retain certain data relating to the vehicle and its prior ownership where required to comply with our legal, regulatory, warranty, or safety obligations (for example, in connection with recalls, roadworthiness reporting, or dispute resolution), even after the vehicle has been delinked from your account. Any such retained data will continue to be handled in accordance with this Notice and our data retention practices described in the notice.
10.2. Right to share Data with Third Parties
You may request us to make Readily Available Data available to a third party of your choice for example, an independent repairer, maintenance/diagnostic provider, insurer, fleet-management provider, charging provider, mobility service, roadside-assistance provider, or another service provider selected by you.
You can submit and manage a sharing request through: privacy.eu@royalenfield.com
Once available, you will be able to select the relevant motorcycle, identify the recipient, select the data to be shared, specify the purpose (not mandatory) and duration of sharing, approve the request, and end or revoke future sharing. Data will be provided to an eligible third party without undue delay and, where relevant and technically feasible, continuously and in real time. Where such sharing involves a fee, this will be offered on fair, reasonable, and non-discriminatory (FRAND) terms.
We may ask you for information reasonably necessary to verify that you are the owner, lessee, renter, or otherwise authorised user (e.g., a secondary rider with an active Digital PIN Share) of the motorcycle. We will not request more information than is necessary to verify your entitlement and securely fulfil the request. Repeated failed identity/PIN verification attempts may result in a temporary lockout (3 failed attempts triggers a 15-minute lockout), consistent with the motorcycle's existing security design.
10.3. Right to Lodge a Complaint
You have the right to lodge a complaint alleging an infringement of the Data Act with the competent authority designated for this purpose in your Member State. However, we shall recommend you to first write to us about concerns and give us an opportunity to remediate them before reaching to a Supervisory Authority.
11. Purposes for Processing your Data
We may use non-personal Product Data and Related Service Data for the following purposes:
● delivery of connected services (remote lock/unlock, live tracking, geofencing, navigation, including real-time weather data obtained from our weather-service provider to support route and charging-stop recommendations);
● diagnostics and maintenance (vehicle health reports, fault alerts, temperature/thermal alerts);
● battery and range management;
● safety and security (tamper/theft alerts, crash detection, incognito-mode override logic);
● warranty administration;
● product improvement;
● aggregate analytics;
● service-network planning; and
● development of future products.
12. Changes to This Notice
We may update this Notice from time to time to reflect changes in our practices, our products, or applicable law. We will post the updated Notice on this page with a revised “Effective Date” and, for material changes, notify you via email or an in-app/website notice.
13. Contact Us
If you have questions about this Notice or how we handle your data or would like to exercise any of your rights, please contact us: privacy.eu@royalenfield.com
1. Structure, Scope & Mandatory Local Legal Overrides
1.1 Application and Binding Agreement
(i) These Terms of Use ("Terms") govern access to and use of the website https://flyingflea.royalenfield.com (and its regional subdomains, mobile web interfaces, and web applications) ("Website"), as well as vehicle pre-bookings, reservation deposits, AI chatbot interactions, and test ride bookings provided by Eicher Motors Limited ("Flying Flea”) for Flying Flea electric motorcycles ("Vehicle").
(ii) These Terms apply to users in India, the European Union (Germany, Italy, Spain, Netherlands, France), and the United Kingdom.
(iii) Nothing in these Terms shall limit, restrict, or exclude any non-waivable statutory rights, guarantees, or remedies granted to you under applicable mandatory consumer protection laws in your jurisdiction of residence. In the event of a conflict between these Terms and mandatory local consumer laws, the local law shall prevail.
2. Website Use, User Accounts & AI Interaction
2.1 Account Security & Accuracy
You must be at least 18 years old (or the legal age of majority in your jurisdiction) to create an account, submit a pre-booking, or request a test ride. You are solely responsible for keeping your login credentials confidential.
2.2 Product Representations & Accuracy
Images, technical specifications, projected battery ranges, charging times, and visual options are for illustration only. Final production specs may vary due to local homologation requirements.
2.3 AI Assistant & Chatbot Interactions
Automated AI chatbots on the Website assist with queries. Information provided by AI systems is generated automatically, is indicative, and does not constitute a legally binding contractual representation or formal sale offer.
3. Vehicle Pre-Booking, Reservation Deposits & Cancellation Rights
3.1 Pre-Booking Status
A pre-booking reservation deposit represents an expression of interest to secure allocation priority for a Vehicle. It does not constitute a completed contract of sale or a guarantee of delivery. Final purchase terms are governed by a separate, formal sale agreement executed with Flying Flea or an authorized Flying Flea distributor or dealer.
3.2 Payment & Processing
Reservation deposits are processed via secure payment gateways. Payment options depend on your country of residence.
3.3 EU / UK - Right of Withdrawal (Cooling-Off Period)
If you reside in the EU or the UK and place a pre-booking deposit online:
● Cancellation Period: You have the legal right to cancel your pre-booking within 14 calendar days from the date of placing the pre-booking without giving any reason.
● EU Digital Withdrawal Function: EU residents may exercise this right using the dedicated online "Withdraw from Contract" / "Cancel Reservation" function available in their account portal or order summary page.
● Refund Method & Timeline: Upon valid cancellation, Flying Flea will refund all payments received within 14 calendar days using the original payment method (e.g., credit card or direct bank transfer) without charging processing fees.
3.4 Voluntary Customer Cancellation (India & Post-Cooling-Off EU/UK)
You may cancel your pre-booking at any time prior to signing the final sales agreement. Refunds will be processed to the original payment source within 7–10 business days. (Note: Cheque refunds apply only where original online payment re-crediting is unavailable due to banking regulations).
3.5 Cancellation by Flying Flea
Flying Flea may cancel pre-bookings due to regulatory changes, force majeure events, or pricing errors. Flying Flea’s maximum liability is limited to a full refund of the reservation deposit received.
4. Test Ride Terms, Eligibility & Rider Liabilities
4.1 Test Ride Eligibility Requirements
To participate in a Flying Flea test ride, you must:
● Hold and present a valid, unexpired driver’s license corresponding to the motor vehicle class in the local jurisdiction.
● Wear protective safety gear complying with local road safety laws (including a certified helmet, eye protection, and closed-toe shoes).
● Maintain zero impairment from alcohol, drugs, or medications.
● Execute Flying Flea’s physical or electronic Test Ride Indemnity Form at or prior to the appointment.
4.2 Risk Assumption & Rider Responsibilities
● Hazard Awareness: Operating a two-wheeled electric motorcycle carries risks, including property damage, personal injury, or death. You voluntarily accept these operational hazards.
● Traffic Violations & Fines: You are liable for all traffic violations, speeding fines, toll charges, or penalties incurred during your test ride.
● Damage Liability: You are responsible for loss or damage to the Vehicle, third-party property, or personal injury caused by your reckless operation, willful misconduct, or failure to follow instructor safety directions.
● Liability Limitations: Nothing in these Terms excludes or limits Flying Flea's liability for death or personal injury resulting from Flying Flea's gross negligence or willful misconduct, or any other liability that cannot be excluded under applicable law.
5. Intellectual Property & Acceptable Conduct
5.1 Intellectual Property
All content, trademarks ("FLYING FLEA"), designs, and code on the Website belong to Eicher Motors Limited or its licensors. You receive a limited, revocable, non-commercial license to view and browse the Website.
5.2 Prohibited Conduct
You must not reverse engineer the Website, introduce malicious code, scrape data using automated software, or bypass access controls.
6. Personal Data & Privacy
Personal data collected via Website interactions, pre-bookings, and test ride scheduling is managed in compliance with applicable regional privacy regulations (including GDPR in the EU/UK and the Digital Personal Data Protection Act, 2023 in India), as detailed in the Privacy Policy.
7. Warranties & Limitation of Liability
7.1 Service Availability
The Website and booking services are provided on an "as-is" and "as-available" basis. Flying Flea does not guarantee uninterrupted access or error-free operations.
7.2 Aggregate Liability Cap
To the extent permitted by law, Flying Flea’s total liability for claims arising out of these Terms or Website use shall not exceed the total deposit amount paid by you or $100 USD (or equivalent local currency), whichever is higher.
8. Jurisdiction & Governing Law
8.1 Indian Residents: These Terms are governed by the laws of India, and the courts in Chennai, Tamil Nadu, shall have exclusive jurisdiction over any and all disputes arising out of or resulting from these Terms, use of the Website, pre-booking or test ride.
8.2 EU & UK Residents: These Terms are governed by the laws of India, provided that such choice of law does not deprive you of mandatory legal protections available in your country of residence. You may bring legal proceedings regarding your use of this Website, pre-booking or test ride in the competent courts of your country of residence.
9. Grievance Redressal
For inquiries, booking cancellations, or statutory grievances, contact Flying Flea:
India - Grievance Redressal
● Role: Grievance Officer
● Email: grievance.officer.India@royalenfield.com
● Address: Eicher Motors Limited, Office No. 1111, 11th Floor, Ashoka Estate, 24 Barakhamba Road, New Delhi – 110001, India.
EU Consumer Inquiries
● Email: grievance.officer.EU@royalenfield.com
● Address: Royal Enfield Europe B.V., Middelweg 3, 4023AR Rijswijk (GLD)
UK Economic Operator
● Email: grievance.officer.UK@royalenfield.com
● Address: Royal Enfield UK Limited, Bruntingthorpe Proving Ground, Bath Lane, Leicestershire, LE17 5QS, United Kingdom
I confirm that I am at least 17 years old and have read and agree to the Privacy Policy, EU Data Act and Terms of Use.
Opt-in to Personalization & Profiling
I consent to Royal Enfield analyzing my browsing behavior and interaction data to deliver personalized website experiences, product suggestions, and relevant email content.
Opt-in to Marketing & Direct Communication
I consent to my data being processed by Royal Enfield and its affiliated partner dealers to provide me with news on products, services, rider events, newsletters, and exclusive promotional offers.