1. Who we are

This policy explains how Rentomozo collects, uses, shares and protects personal data when you use this website, contact us, or when your organisation rents laptops, desktops, printers or barcode scanners from us. We rent only to businesses and organisations, so most personal data we hold relates to authorised signatories, delivery contacts and other people acting for those organisations. For that personal data, Rentomozo is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), and you are the Data Principal. We handle personal data in line with the DPDP Act, the rules made under it, and other applicable Indian law.

2. What we collect

When you enquire or book

Your name, organisation, designation, mobile number, email address, and delivery and billing addresses.
Details of the rental: models, quantity, dates and any requirements you share with us.

For KYC verification

The organisation's GST certificate or company documents and the entity's PAN.
The authorised signatory's name, designation, photo ID and authorisation letter or official email confirmation.
The name, phone number and address of each delivery contact, and at delivery, a check of the receiver's photo ID (not copied).

During and after the rental

Payment and refund records, such as transaction references and the bank account to which a deposit is refunded. Card and UPI payments are processed by payment providers; we do not see or store your card number, CVV or UPI PIN.
Delivery and pickup records, including the laptop's serial number, condition notes, photos of the device and the name of the person who received or returned it.
Messages, call notes and emails exchanged with us about your rental.

When you visit this website

Basic technical information such as browser type, device type, pages visited and approximate location derived from your IP address, collected through cookies or analytics tools where these are enabled.
Details you type into a quote or contact form.
If you reach us from one of our Google ads, a Google Ads conversion-tracking cookie records the ad click, and we note when you then tap a WhatsApp or call button. This tells us which ads lead to enquiries. It does not record the content of your messages or calls. You can block or delete these cookies in your browser settings, and manage ad personalisation at adssettings.google.com.

3. Why we use it

We use personal data only for specific, stated purposes:

to verify your identity and address before handing over a high-value device, and to prevent fraud;
to process your booking, deliver and collect the laptop, and provide support and replacements;
to issue invoices, including GST invoices, collect rent and refund deposits;
to assess and settle damage, loss or theft, recover unreturned devices, and resolve disputes or legal claims;
to comply with legal obligations, such as tax and GST record-keeping and lawful requests from authorities;
to send service messages about your booking, delivery, payments, extensions and returns;
to send offers and updates, only if you have agreed to receive them.

We do not use KYC documents for marketing, and we do not sell personal data to anyone.

4. The basis for using your data

We process personal data on the basis of your consent, given after we tell you what we collect and why, or for legitimate uses permitted under the DPDP Act, such as where you have voluntarily provided data for a specific purpose like a rental, or where processing is needed to comply with the law. We collect only what is needed for these purposes, and we use it only for them.

5. Who we share it with

We share personal data only where needed, and only the part that is needed:

our delivery and pickup team, who receive your name, phone number and address, not your KYC documents;
payment providers and banks, to process payments and refunds;
service providers that host our systems, store records or send messages for us, acting on our instructions as Data Processors under a contract;
accountants, auditors and legal advisers, under a duty of confidentiality;
if a company books laptops for its staff, that company, which receives delivery, return and condition details for the devices it rents;
the police, courts or other authorities, where required by law or where needed to recover a stolen or unreturned device.

Where a service provider stores data outside India, it is transferred only as permitted under Indian law.

6. How long we keep it

KYC documents are kept for the duration of the rental and for a limited period afterwards, so we can close the account, refund the deposit, and settle any damage claim or dispute. After that, they are erased.
Invoices, payment and tax records are kept for as long as GST, income-tax and accounting laws require, which can be several years.
Delivery, condition and communication records are kept for as long as they are needed to resolve questions about a rental, and then erased.
If you withdraw consent, or once the purpose for which data was collected is served, we erase it unless the law requires us to keep it longer.
If a dispute or legal claim is open, related records are kept until it is resolved.

7. How we protect it

We take reasonable security safeguards to prevent personal data breaches, including restricting access to KYC documents to the staff who verify rentals, using secured systems and accounts to store records, and removing access when it is no longer needed. If a personal data breach occurs, we will inform the Data Protection Board of India and the affected persons as the law requires.

8. Data on returned devices

Files and accounts you leave on a rented laptop or desktop are not something we collect. Every returned laptop and desktop is factory-reset before its next rental, which removes your accounts, apps and files. We can’t restore anything after the reset, so copy what you need, delete sensitive files and sign out before return, as explained in our Rental Policy. Our team does not open, copy or review files left on returned laptops.

9. Your rights

Under the DPDP Act, you have the right to:

ask for a summary of the personal data we hold about you and how we have used it, and the identities of those we have shared it with;
ask us to correct, complete or update inaccurate or incomplete data;
ask us to erase data that is no longer needed, unless the law requires us to keep it;
withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect processing already done, and if KYC is withdrawn during an active rental, we may need to end the rental and collect the laptop;
have your grievances addressed by us;
nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To use any of these rights, contact us as described in section 12. We may ask you to confirm your identity before acting on a request.

10. Your duties

The DPDP Act also asks Data Principals to provide genuine information, not to impersonate anyone, not to suppress material information when submitting documents, and not to file false or frivolous complaints.

11. Persons under 18

We rent only to businesses and organisations, through adult authorised signatories, and we do not knowingly collect personal data of anyone under 18 without the verifiable consent of a parent or lawful guardian.

12. Grievances and contact

If you have a question, a request about your data, or a complaint about how we have handled it, call or WhatsApp +91 98215 55658, 9 AM – 9 PM, all 7 days, or write to us through the contact page, marking your message "Privacy". We will acknowledge your request and respond within the time required by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

13. Changes to this policy

We may update this policy as our services or the law change. The current version is always on this page, and where a change materially affects how we use your data, we will tell you before it applies to you.

Privacy Policy