Mumbai · Thane · Navi Mumbai · Mira Bhayandar and expanding
| My Bookings | Logout |

Privacy Policy

Last updated: May 8, 2026

Miles Mobility Pvt Ltd ("Miles Tours & Travels", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, retain, and safeguard your personal information when you use our website, mobile application, or customer portal to book travel and cab services. This policy is issued in compliance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Information We Collect

  • Personal Identifiers: Full name, mobile number, and email address.
  • Location Data: Pickup/drop-off locations and (with consent) real-time GPS data.
  • Device Information: Device model, OS version, unique identifiers, and app version.
  • Usage Data: Pages visited, features used, booking history, interaction logs.
  • Payment Information: Transaction identifiers via Razorpay. We do not store full card or banking credentials.
  • Communications: Messages or queries submitted through our support channels.

2. Lawful Basis and Purpose

We process your personal data on the basis of your consent or for legitimate uses permitted under the DPDP Act, including: booking processing, OTP verification, push notifications, driver dispatch, payment processing, customer support, service improvement, and legal compliance.

3. Information Sharing

We do not sell your personal information. We share data only with: assigned drivers (name, mobile, trip details), Razorpay (payments), SMS/OTP gateway providers (mobile number), and legal authorities when required by law. We do not share data with advertising networks for targeted advertising.

4. Data Retention Period

  • Account information: retained for the life of the account and up to 3 years after account closure.
  • Booking and payment records: retained for 7 years as required under tax and financial laws.
  • Device logs and usage data: retained for up to 12 months.

After the applicable period, data is securely deleted or anonymised in line with Section 8(7) of the DPDP Act.

5. Security

We implement reasonable security safeguards including HTTPS/TLS encryption, role-based access controls, regular security reviews, bcrypt password hashing, and PCI-DSS compliant payment processing. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by law.

6. Your Rights as a Data Principal (DPDP Act 2023)

Under Sections 11–14 of the DPDP Act, you have the following rights:

  • Right to Access: Obtain a summary of your personal data being processed and the processing activities.
  • Right to Correction and Erasure: Request correction, completion, updating, or erasure of your personal data.
  • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 8).
  • Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.

To exercise any right, email our Grievance Officer at the address in Section 8. We will respond within 30 days.

7. Consent and Withdrawal of Consent

Where processing relies on your consent, you may withdraw consent at any time. The procedure is:

  1. Send a written withdrawal request to grievance@milestoursandtravels.co.in from your registered email address, stating which consent(s) you wish to withdraw (e.g. location, marketing notifications), or use the consent toggles in the customer portal.
  2. We will action the request within 7 working days and confirm via email.
  3. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to provide certain services. Statutory retention obligations (e.g. tax records) will continue to apply.

8. Grievance Officer

In accordance with Section 8(9) of the DPDP Act, 2023 and Rule 5(9) of the IT Rules, 2011, the contact details of our Grievance Officer / Data Protection Officer are:

  • Name: Mr. Rakesh Kumar (Grievance Officer)
  • Designation: Data Protection Officer, Miles Mobility Pvt Ltd
  • Email: grievance@milestoursandtravels.co.in
  • Phone: +91 81047 79974 (Mon–Sat, 10:00–18:00 IST)
  • Address: A-505, Satya Sai Krupa Apartment, Satya Nagar, Borivali West, Mumbai 400092, Maharashtra, India

If your complaint is not resolved to your satisfaction, you may approach the Data Protection Board of India.

9. Children's Data

We do not knowingly process personal data of children under 18 without verifiable parental consent, in compliance with Section 9 of the DPDP Act.

10. More Information

For common questions about bookings, refunds, account management, and data rights, see our Frequently Asked Questions. Our Terms and Conditions govern your use of the Service.

11. Changes to This Policy

We may update this Privacy Policy. The revised version will be posted on this page with a new "Last updated" date. Continued use after the change constitutes acceptance.