Privacy Policy

Last updated 3 November 2026

This policy explains how REY CERA (“REY CERA”, “we”, “us”) collects, uses, shares and protects your personal data when you use this website. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Under the DPDP Act we are the Data Fiduciary for your data.

1. What we collect

• Visit and price enquiries: your name, mobile or WhatsApp number, site pincode and, if you add them, the product you asked about and your message.
• Dealer applications: your name, firm name, mobile number, e-mail, city, pincode and what you tell us about your business.
• Technical data: our server keeps standard logs (time, page visited, browser type) to keep the site safe and working. To stop spam we keep a one-way code made from your internet address, not the address itself.

We do not ask for passwords, bank, card or payment details, health data or other sensitive personal data. The website does not take payments.

2. Why we use it

• To call or message you about your enquiry and fix a visit to our Experience Centre.
• If your site is outside Bengaluru, to pass your enquiry to the authorised REY CERA dealer nearest to your pincode, who will contact you.
• To review dealer applications and reply to them.
• To keep the website secure and to meet our legal duties.

We use your data only for these purposes and only with your consent, which you give by ticking the consent box on the form. We do not sell your data or use it for anyone else’s marketing.

3. Who we share it with

• The authorised REY CERA dealer handling your enquiry (only for enquiries from outside Bengaluru).
• Service providers who work for us under contract: the company that hosts this website (servers in India) and our e-mail service provider. They may use the data only to provide their service to us.
• Google, for Google Analytics and Google Ads, only if you accept cookies (see below).
• Government or law-enforcement authorities, when the law requires it.

4. Cookies and tracking

With your permission we use Google Analytics (by Google LLC) to count visits, see how people find us and which of our ads lead to an enquiry or a phone call. These tools set cookies and send Google details such as the pages you open, your device and browser type, an approximate location from your internet address, and whether you sent a form or tapped our phone number. They do not receive your name or phone number from our forms.

Nothing from Google is loaded until you press Accept on the cookie notice. If you press Reject, no tracking cookies are set. You can change your choice at any time with Cookie settings at the bottom of every page. Google may process this data outside India; see how Google uses data from sites that use its services. Our staff admin panel also uses one login cookie.

5. How long we keep it

We keep enquiries and applications for up to 24 months after our last contact with you, then delete them, unless the law asks us to keep them longer (for example tax records linked to an invoice). If you withdraw consent, we delete your data within a reasonable time, except what the law requires us to keep.

6. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who we shared it with;
• ask us to correct, complete, update or delete your data;
• withdraw your consent at any time, as easily as you gave it (this does not affect what we did before);
• nominate another person to use these rights for you if you die or are unable to;
• raise a complaint with our Grievance Officer (below), and then with the Data Protection Board of India.

To use any of these rights, write to our Grievance Officer. We may ask you to confirm who you are before we act.

7. Keeping it safe

Your data is stored on secured servers with encrypted connections (HTTPS), in a system only authorised staff can open with a password. No system is perfectly secure, but we take reasonable security measures. If a personal data breach happens, we will inform you and the Data Protection Board of India as the law requires.

8. Children

This website is meant for adults. We do not knowingly collect data from anyone under 18. If you think a child has sent us their details, tell our Grievance Officer and we will delete them.

9. Grievance Officer

For any question, request or complaint about your personal data or this policy, contact:

We acknowledge complaints within 48 hours and resolve them within 30 days of receiving them.

10. Who we are

We may update this policy. The date at the top shows the latest version; important changes will also be shown on the website.