Privacy Policy

HUSE Mobility (“HUSE”, “we”, “us”, “our”) operates the website huse.co.in (the “Site”) and related services. We respect your privacy and are committed to protecting your personal data in compliance with Indian laws, including:

The Information Technology Act, 2000 and its Rules (including the SPDI / Reasonable Security Practices Rules)
The Digital Personal Data Protection Act, 2023 (DPDP Act)

By using the Site or interacting with HUSE (e.g., making purchases, contacting us), you consent to the practices described in this policy.

If you do not agree with this policy, please do not use the Site or provide us your personal data.

1. Definitions & Interpretation

In this policy:

“Data Principal” / “you” means an individual whose personal data is processed by us.
“Personal Data” means any data about an individual that can directly or indirectly identify them.
“Sensitive Personal Data or Information (SPDI)” means personal data of special sensitivity, such as financial details, passwords, biometric data, health, etc.
“Processing” includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination, erasure or destruction.
“Data Fiduciary” means the entity (HUSE) that determines the purpose and means of processing personal data.
“Data Processor” means any person or entity processing data on behalf of HUSE under contract.

2. Contact & Corporate Information

Name / Entity: HUSE Mobility (under HUSE / Huse Energy Systems Private Limited)

Address (for business / distributors):
Bldg. No.1, Plot No.1/2, Behind Blue Chip Industrial Estate, Village Waliv, Sativali Udyog Nagar, Vasai (East), Palghar, Maharashtra, India

Phone: +91 895 602 5825

Contact method / message form: via the “Contacts” page of the Site

You may contact us via these means to raise queries, complaints, or to exercise your data rights (see Section 11).

3. Categories of Personal Data Collected

We collect various categories of personal data, including (but not limited to):

a. Identity & Contact Information

Name, email address, postal / billing / shipping address, telephone / mobile number

b. Transaction & Order Information

Order history, payment method, transaction ID, delivery address

c. Account / Authentication Data

Username, (hashed) password, login details

d. Technical / Device / Usage Data

IP address, browser type and version, device identifiers, operating system, referral / exit pages, pages visited, time spent, click paths, cookies, log files

e. Location Data (optional / if permitted)

Geolocation (if explicitly enabled by user) for delivery or service purposes

f. Customer Service / Support Communications

Records of communications (email, chat, call logs)

g. Other Data (if applicable)

If you provide additional data (e.g. when filling forms, feedback, surveys), we may collect that too.

If we ever collect SPDI (e.g. financial information like credit / debit card numbers, though typically handled by payment gateways), we will treat it with stricter safeguards.

4. Purposes of Processing & Legal Basis

We process your personal data for the following purposes, under lawful bases:

Purpose	Legal Basis / Justification	Notes
To operate, maintain, and improve the Site and services	Legitimate interest / for performance of contract	Ensures Site functions correctly
To process orders, payments, deliveries, returns	Performance of contract / lawful obligation	Fulfill user purchases
To communicate (order updates, support, marketing)	Consent / legitimate interest	You may opt out of marketing
To personalize user experience (recommendations, preferences)	Consent / legitimate interest	Subject to your consent / preference settings
Fraud prevention, security, anti-abuse	Legitimate interest	Protect the business and users
Analytics, usage metrics, reporting	Legitimate interest	To improve services
Legal compliance, audits, dispute resolution	Lawful obligation	For regulatory requirements or legal claims
To respond to your requests (e.g. rights, complaints)	Legal obligation / contract	As required under DPDP Act

If you withdraw consent (where consent is the basis), we will cease processing your data for those consent-based purposes, unless processing is otherwise permitted by law (e.g. to fulfill an ongoing order).

5. Sharing, Disclosures & Cross-Border Transfers

5.1 Sharing / Disclosure

We may share your personal data with:

Service providers / vendors / contractors (e.g. payment processors, shipping firms, IT / cloud hosting, CRM, analytics) , only to perform services for us, under confidentiality agreements.
Affiliates or business partners (for operations or co-marketing) , only with your consent or as disclosed.
Legal / regulatory / law enforcement authorities , when required by law, court order, or to protect rights, safety, or property.
Acquirers / in business transitions (mergers, acquisitions, restructuring): your data may be transferred as part of the transaction, subject to confidentiality.

We will not sell your personal data to third parties for marketing without your explicit consent.

5.2 Cross-Border Transfers

If we transfer your personal data outside India, we will ensure:

The recipient jurisdiction has laws or safeguards comparable to Indian data protection standards; or
We put in place appropriate contractual or technical safeguards (e.g. standard contractual clauses, encryption) as required under DPDP Act.

We will inform you in this policy or at the point of consent if data is transferred abroad.

6. Data Retention & Erasure

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected (e.g. order processing, warranties, legal obligations).
After the retention period, we will securely delete or anonymize the data.
If you request erasure and there is no overriding legal or business reason to retain, we will comply.
In cases of withdrawal of consent, we will cease processing (for consent-based purposes) within a reasonable time.

7. Security & Safeguards

We adopt reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, loss or destruction. These may include:

Encryption (in transit and at rest)
Access controls and authentication
Secure servers and firewalls
Periodic security audits and assessments
Contracts with processors requiring them to meet similar security obligations

While we aim for high standards, no system is foolproof, so we cannot guarantee absolute security.

In the event of a personal data breach (unauthorized access, loss, or disclosure), we will:

Evaluate the incident’s scope and impact,
Notify the Data Protection Board (as required under DPDP law) and affected individuals in a timely manner,
Take steps to mitigate damage and prevent recurrence.

8. Cookies & Tracking Technologies

We and third parties may use browser cookies, web beacons, pixels, local storage, and similar technologies to:

Ensure Site functionality
Remember your preferences
Analyze usage (e.g. via analytics tools)
Serve personalized or targeted marketing

You may manage or disable cookies via your browser settings, but doing so may adversely affect Site functionality.

We will provide clear notice about cookies / trackers and obtain necessary consent (where required) in a transparent way.

9. Users’ Rights & Choices

Under the DPDP Act (once operational), and applicable Indian laws, you as a Data Principal have the following rights:

Right to Access / Overview , request a summary of personal data we hold, categories, processing means, recipients, retention period, and more.
Right to Correction / Update , request edits or updates to inaccurate, incomplete, or outdated data.
Right to Erasure / Deletion , request deletion of data, subject to legal or business constraints.
Right to Withdraw Consent , you may revoke consent at any time for consent-based processing; we will then stop such processing (unless otherwise lawfully permitted).
Right to Grievance / Complaint , you may lodge a grievance with us; if unresolved, you may approach the Data Protection Board of India (once established).
Right to Nominate , you may nominate someone to exercise your rights in case of death or mental incapacity (as per DPDP Act).

To exercise any of these rights, contact us using the contact information in Section 2. We will respond within the timelines prescribed by applicable law.

We may require identity verification to prevent misuse of these rights.

10. Children & Minors

Our services are not intended for children (persons under 18 years). We do not knowingly collect the personal data of minors without verifiable parental consent. If we become aware that we collected data of a minor without such consent, we will delete it promptly.

We prohibit targeted advertising or behavioral tracking of children, unless explicitly permitted by law.

11. Grievance Redressal & Dispute Resolution

Grievance Officer / Contact Person:

You may direct your complaints, questions or requests by contacting us via the contact details in Section 2. We will endeavor to acknowledge and address grievances promptly, as required by law.

If your grievance remains unresolved, you may escalate the matter to the Data Protection Board of India or other statutory authority once established under the DPDP Act.

12. Amendments / Updates to this Policy

We may update or revise this Privacy Policy from time to time (for legal, technical, business, or regulatory reasons). We will publish the updated policy on the Site, indicating the Effective Date. We may also notify users via email or on our Site.

Your continued use of the Site after changes constitutes acceptance of the updated policy.

13. Miscellaneous

Language: We may provide the privacy policy in English and other languages; the English version will generally prevail.
Severability: If any provision is held invalid or unenforceable, the remainder of the policy remains in effect.

Governing law / jurisdiction: Indian law governs this policy; courts in India shall have jurisdiction.