Privacy Policy

Last updated: 16 May 2026 · Effective date: 16 May 2026

This Privacy Policy explains how CarXNeo ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you visit carxneo.com, submit a form on the site, or otherwise interact with us. We've written this in plain language. Where Indian law uses specific terms, we use those — but only after explaining them.

This policy is governed by the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and applicable rules thereunder. If anything in this policy conflicts with the DPDP Act, the Act prevails.

1. Who we are

CarXNeo is an Indian brand of premium automotive accessories operating through its parent organisation and authorised affiliates. Our products are sold to end consumers through our partner storefront eauto.co.in and through authorised retail distributors across India.

For the purposes of the DPDP Act, CarXNeo is the Data Fiduciary in respect of personal data collected on this website.

Grievance contact

If you have a question, concern, or grievance about how we handle your personal data, please write to:

• Email: privacy@carxneo.com
• Alternative email: hello@carxneo.com

We will acknowledge any grievance within 7 working days and respond substantively within 30 days, as required under the DPDP Act.

2. What personal data we collect

We collect personal data only when you provide it, or when limited technical data is automatically generated during your visit. Specifically:

2.1 Data you submit through forms

• Notify-me form (on the launch preview gate): your email address.
• Distributor application form: company name, contact person, email, phone, state, city, years in business, expected monthly volume, current brands distributed, and any free-text notes you provide.
• Retailer inquiry form: store name, owner/manager name, email, phone, city, store type, product categories of interest, and any notes.
• Contact / general inquiry: name, email, phone (if you choose), and the content of your message.

2.2 Data collected automatically

• Analytics data via Google Analytics 4: anonymised IP address, browser type, device type, operating system, referring URL, pages viewed, time on page, geographic region (city-level), and approximate visit duration. This data does not personally identify you in our hands.
• Local storage: we store a small flag in your browser's local storage to remember whether you've entered the preview password on this device. This data lives only on your device and is not transmitted to us.
• Server logs via our hosting provider Netlify: IP address, timestamp, HTTP method, requested URL, response code, and user-agent string. These are retained only for security and abuse prevention.

2.3 Data we do not collect

• We do not collect payment information on this website. Purchases happen on eauto.co.in, which has its own privacy practices.
• We do not collect Aadhaar numbers, PAN, or other government-issued identifiers via this website.
• We do not use third-party advertising cookies or tracking pixels for retargeting.

3. Why we collect it and the legal basis

Under the DPDP Act, we may process personal data on two grounds: with your consent, or for certain legitimate uses defined by the Act. Here is what we use your data for, and on what basis:

• Responding to your inquiry or application (distributor, retailer, contact, general): consent, given by your voluntary submission of the form. Legitimate use under section 7 of the DPDP Act (performance of a function for which you have approached us).
• Notifying you of our launch (notify-me email): consent.
• Improving the website and understanding visitor behaviour (analytics): legitimate purpose. We use only anonymised, aggregate analytics; we do not build individual profiles.
• Security, abuse prevention, and legal obligation (server logs, fraud prevention): legitimate purpose under section 7 of the DPDP Act.

You can withdraw your consent at any time by emailing privacy@carxneo.com. Withdrawing consent does not affect the lawfulness of processing that occurred before your withdrawal.

4. Who we share it with

We share personal data only with parties we use to operate the website and respond to you. Specifically:

• Form processing: for the moment, form submissions open your email client and send the message to our team (mailto: link). Once we move to a form backend (Formspree, Web3Forms, or similar), submissions will be transmitted to that processor on our behalf. We will update this policy when that change is made.
• Customer relationship management: we may store form submissions in a CRM system (such as Zoho CRM or HubSpot) to track and respond to inquiries. These providers act as Data Processors on our behalf and are bound by their own privacy and security commitments.
• Hosting: our website is hosted on Netlify (Netlify, Inc.), and standard server logs are retained by Netlify per its policies.
• Analytics: Google Analytics 4 (Google LLC) processes anonymised website usage data on our behalf.
• Email service providers (when we move beyond mailto): we may use providers such as Zoho Mail, Brevo, or Mailchimp to send and receive emails. These providers store mailbox content per their policies.
• eAuto: if you click "Buy on eAuto" you are taken to eauto.co.in, a separate platform with its own privacy policy. We do not share your data with eAuto from this website, and we do not receive your eAuto purchase data here.
• Legal authorities: if compelled by a valid legal order or for protection against fraud, security threats, or violations of our terms.

We do not sell your personal data to third parties. We do not share data with advertising networks.

5. Cross-border data transfers

Some of our service providers (Google, Netlify, and potentially future CRM/email providers) may store or process data on servers outside India. Under the DPDP Act, cross-border transfers are permitted except to countries specifically restricted by the Central Government, none of which currently apply to these providers. We rely on the providers' contractual data protection commitments to ensure standards equivalent to those required by Indian law.

6. How long we keep data

• Distributor and retailer applications: up to 3 years from the date of submission, for legitimate business follow-up and to maintain partnership history. After that, we delete or anonymise the record unless an active partnership exists.
• Notify-me email list: until you unsubscribe, or up to 3 years if we have not contacted you successfully.
• Contact / inquiry messages: up to 2 years for service quality and reference, then deleted.
• Analytics data: retained per Google Analytics 4 defaults (currently 14 months for event-level data, longer for aggregated reports).
• Server logs: retained for up to 90 days by our hosting provider, primarily for security and debugging.

You may request deletion of your data at any time (see section 7).

7. Your rights under the DPDP Act

As a Data Principal (the person whose data is being processed), you have specific rights under the DPDP Act. We honour these rights without charge:

• Right to access: you may request a summary of personal data we hold about you, the purposes for which it is being processed, and the identities of any Data Processors with whom it has been shared.
• Right to correction and erasure: you may request correction of inaccurate or incomplete data, and erasure of data that is no longer necessary for the purpose for which it was collected.
• Right to grievance redressal: you may raise a grievance about our handling of your data. We will acknowledge within 7 working days and substantively respond within 30 days.
• Right to nominate: in the event of your death or incapacity, you may nominate another individual who can exercise these rights on your behalf.
• Right to withdraw consent: at any time, with effect for the future.

To exercise any of these rights, please email privacy@carxneo.com with the subject "Data Rights Request" and identify yourself and the request clearly. We may need to verify your identity before processing the request.

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India once it is operational.

8. Children's privacy

This website is not directed at individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe we have collected such data, please contact us at privacy@carxneo.com and we will delete it promptly.

9. Cookies and similar technologies

We use a minimal set of cookies and local-storage entries:

• Google Analytics 4 cookies (`_ga`, `_ga_*`): set by Google to distinguish unique users and sessions. You can opt out at the page level by enabling Do Not Track in your browser, or globally by installing the Google Analytics Opt-Out Browser Add-on.
• Local-storage entries (`cxn_preview`): set when you successfully enter the preview password. Stored locally on your device only, never transmitted to us. You can clear it from your browser's developer tools or by clearing site data.

We do not use third-party advertising or retargeting cookies.

10. Security

We use reasonable technical and organisational measures to protect personal data, including HTTPS encryption for all site traffic, password protection where applicable, restricted access to form submissions, and use of reputable service providers that publish their security practices. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to maintaining standards consistent with the DPDP Act and industry practice.

11. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email (if you are on our mailing list) or via a notice on the website. Your continued use of the site after a change indicates acceptance of the updated policy.

12. Contact us

For any question, concern, or request regarding this Privacy Policy or your personal data:

• Privacy / data rights: privacy@carxneo.com
• General inquiries: hello@carxneo.com
• Partner inquiries: partners@carxneo.com

By using this website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the website.