Privacy, without the fine print maze.

Who is responsible for your data

Data fiduciary

[TODO(owner): confirm]

Data-protection contact

[TODO(owner): confirm]

Optional analytics

The coming-soon page does not run optional analytics. On the full website, analytics events are sent only after you choose “Allow anonymous analytics.” Eligible events are limited to the page path, selected experience, interaction label, referring host, and event time. The site does not intentionally include IP addresses, precise location, full referrer URLs, form contents, advertising identifiers, or cross-site profiles. “Essential only” sends no analytics events.

The analytics event itself is limited as described above, but it is not fully anonymous end-to-end: our hosting and CDN providers (including Cloudflare) may still record ordinary network logs such as your IP address and request metadata under their own policies. We keep any first-party analytics separate from those infrastructure logs and, once first-party storage is enabled, retain events for no more than 30 days.

Storage and retention

The full website saves your analytics choice on this device so it can remember the preference. The current production analytics endpoint is disabled and does not persist events. If Aadya Luxe enables reviewed first-party analytics storage later, this policy and the consent notice will be updated before collection begins, with a retention period of no more than 30 days and a tested deletion routine.

Contact channels

Email, telephone, and WhatsApp actions open those services directly. Information you send there is governed by the privacy terms of the chosen service and Aadya Luxe’s customer-contact practices. This website does not publish or link to business social-media profiles.

Journey preview map

The estimator loads base-map tiles from OpenStreetMap when the map approaches the visible page. When you explicitly choose Search, the public place text is sent to Aadya Luxe's server and then to the configured geocoding provider. After two places are selected, their coordinates are sent through the same server to the configured routing provider. The optional journey date stays in your browser until you open the email enquiry.

The website is designed not to retain raw search text, selected route, IP address, or user-agent details in its application database. It may keep a short-lived cache keyed by a one-way query hash for reliability and rate-limit compliance. Hosting, OpenStreetMap, and enabled route providers may still process ordinary network logs under their own policies. Search airports, landmarks, and localities only; do not enter a home address, confidential address, or personal information.

The staged July 2026 IHMCL dataset contains National Highway plaza metadata but no customer journey, tariff, or payment data. It is used only as the starting point for future verified toll matching.

Chauffeur directory

Aadya Luxe publishes a chauffeur profile only after identity verification and recorded publication consent. The public directory contains only approved display fields. Source documents and internal consent evidence are not returned by the public API. Chauffeurs may request correction or withdrawal through the privacy contact below.

Cookies and processors

The essential set keeps this site secure and functional; optional processors run only for the features you choose to use.

• Cloudflare (essential): Sets the __cf_bm bot-management cookie and processes ordinary network/request logs. Purpose: Bot mitigation, security, and content delivery. Provider policy
• OpenStreetMap (optional): Base-map tile requests (includes the requesting IP by nature of the request). Purpose: Rendering the optional journey-preview map. Provider policy
• Geocoding / routing provider (Nominatim or configured HeiGIT) (optional): Public place text you explicitly search, and selected coordinates. Purpose: Place search and route-distance estimates for the preview. Provider policy: [TODO(owner): confirm]

Your rights as a data principal

Under India’s Digital Personal Data Protection Act, 2023, you may exercise the following rights. Requests go to the grievance officer named in our Terms, who acknowledges within 48 hours.

• Access a summary of the personal data processed about you.
• Correction, completion, or updating of inaccurate or incomplete data.
• Erasure of personal data that is no longer required.
• Nominate another individual to exercise your rights if you are unable to.
• Grievance redressal through the grievance officer before escalating to the Data Protection Board.

Your choices

When the full website displays an analytics notice, use its “Privacy choices” control to change your preference. The coming-soon page does not show that control because it does not run optional analytics. You may also clear this site’s local storage in your browser. Privacy requests can be sent to [email protected].

Regulatory context

This policy is reviewed against the business’s actual operations and India’s applicable data-protection requirements, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.