PRIVACY POLICY

1. INTRODUCTION

This privacy policy explains how your personal information is collected and used by Royal Enfield, Eicher Motors Limited, or any of our affiliates when you visit our site at "www.royalenfield.com." For a full list of affiliates please see here. We want our services to be safe and secure for our users. Establishing uniform practices for processing personal information helps ensure that such personal information is handled fairly and appropriately, and disclosed or transferred only under proper circumstances.

You are encouraged to review this privacy policy whenever you visit "www.royalenfield.com." to make sure that you understand how any personal information you provide will be processed.

For the purposes of this policy, “personal information” means any information that, alone or in combination with other information, identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked directly or indirectly, with a particular individual or household.

2. COLLECTION AND USE OF INFORMATION

2.1 COLLECTION OF YOUR INFORMATION

We collect personal information you submit voluntarily, such as your name, email address, company information, street address, telephone number, or other information. We, along with our service providers, may also automatically collect data about your device and activity. Personal information that we collect may include, but is not limited to:

1. Identifiers, including, for example, contact information, your name, email address, phone number, city, state, and zip code, social media handle, social security number, identity document (for example, a photo of your driver’s license), and signature.
2. Payment Information, including, for example, your payment card information, purchase history, product details, transaction details (including information related to order fulfillment), payment preferences, and billing address.
3. Internet Activity, including information we may automatically collect about your device and activity, such as device details, IP address, browsing activity, and interactions with our ads or communications.
4. Social Media Profile Information, including, for example, username, handle, profile picture, interests, preferences, and engagement metrics.
5. Commercial Information, including, for example, marketing data, such as your viewing habits, preferences, content interactions, and demographic details, and your engagement with our communications, such as support requests, inquires, feedback, and order information.

2.2 HOW WE USE YOUR INFORMATION

Any of the information we collect from you may be used in one of the following ways:

1. TO PROVIDE MAINTENANCE AND SUPPORT: We may use personal information to provide maintenance or support for our goods and services.
2. TO OFFER AND DELIVER GOODS AND SERVICES: We may use personal information to offer and deliver goods and services to you, such as processing payments and fulfilling orders.
3. TO COMMUNICATE WITH YOU: We may use the personal information you share with us to communicate with you through e-mails, text messages and calls, to provide product or service related information, respond to requests and gather feedback.
4. TO SELECT CONTENT, IMPROVE QUALITY, AND FACILITATE USE OF THE OTHER INTERFACE CHANNELS: We may use your personal information to improve and personalize your content on our Channels, to facilitate the login and navigation process, and for security purposes.
5. TO MARKET TO YOU DIRECTLY: We may send you direct marketing communications as permitted by law, including materials, updates, information, special offers, and promotional material from us and our affiliates. If applicable law requires consent prior to sending you marketing communications, we will not send you direct marketing without your prior consent. You can unsubscribe through a link directly in each email.
6. TO COMPLY WITH LAWS AND REGULATIONS: We will use personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
7. FOR SALES OR TRANSFER OF CONTROL: We may also transfer or assign personal information as a result of, or in connection with, a sale, merger, consolidation, change in control, transfer of assets, bankruptcy, reorganization, or liquidation.
8. FOR COMPLIANCE, FRAUD PREVENTION, AND SAFETY: We may use personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to: (a) maintain the safety, security, and integrity of the site; (b) protect our, your, or others’ rights, privacy, safety or property (including by making and defending legal claims); (c) audit our internal processes for compliance with legal and contractual requirements and internal policies; (d) enforce the terms and conditions that govern the site; and (e) prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
9. WITH YOUR CONSENT: We will disclose your personal information in accordance with your prior direction or, in some cases, we may specifically ask you for your consent to collect, use, or share your personal information, such as when required by law.

3. HOW WE SHARE PERSONAL INFORMATION

Royal Enfield does not sell, rent, trade, or share (as defined by California law) personal information collected through its "www.royalenfield.com" with third parties. Royal Enfield may disclose your personal information in the following ways:

1. To Service Providers: We may share your personal information with third parties who perform services on our behalf that are necessary for the orderly operation of our business. For example, we work with service providers that help us process payments and provide billing services, deliver goods or services you purchase from us, perform website hosting, maintenance services, database management, analytics, fraud protection, marketing, and other purposes.
2. To Affiliates & Business Partners: We may share your personal information with our affiliates and partners who are selling or delivering our goods or services, or engaging in joint marketing or promotional activities, to send you information about goods and services.
3. To Law Enforcement: Under certain circumstances, we may be required to disclose personal information to law enforcement, government authorities, and other parties if required to do so by law or in response to valid requests by public authorities (for example, a court or a government agency).
4. To Parties in a Legal Proceeding: If we are involved in defending a legal claim, we may disclose personal information that is relevant to the claim to third parties as a result of, or in connection with, the associated legal proceedings, where permitted by law.
5. To Business Transaction Participants: Additionally, in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), we may transfer the personal information we have collected to the relevant third party. If Royal Enfield goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personal information collected through our website(s) may be among the assets transferred. A prominent notice will appear on our website(s) for 30 days after any such change in ownership or control of your personal information.
6. To Authorities and Others for Compliance, Fraud Protection, and Safety: We may share information with governmental agencies or other companies assisting us in fraud prevention or investigation. We may do so when permitted or required by law; or, trying to protect against or prevent actual or potential fraud or unauthorized transactions; or, investigating fraud which has already taken place. Under these circumstances information is not provided to these companies for marketing purposes.

4. LINKS TO WEBSITES AND APPS

We may provide links to other websites to improve your web experience, and to offer you products in which you might be interested. When you click on these links, you will be transferred from our site and connected to the site of the organization or company that you select. This Policy does not apply to the practices of other companies or websites that are provided by third parties. If you visit a third party website, you should consult that site's privacy policy before providing any identifiable personal information. Royal Enfield does not assume any responsibility or liability in relation to the conduct of these third parties.

5. CHILDREN’S PRIVACY

Our site is not directed to people who are under 18 years old. We do not knowingly collect personal information from individuals under 18 years of age. Individuals under the age of 18 should not attempt to provide us with any personal information. If you think we have received personal information from individuals under the age of 18, please contact us immediately. We do not knowingly “sell” or “share” the personal information of individuals under 18 years of age.

6. CONTROL OF YOUR INFORMATION

Royal Enfield also provides individuals with the following rights with regards to your personal information:

1. The Right to Know/Access. You can request access to the personal information we collect about you including the following information about how we have collected, used and shared your personal information:
   1. the categories of personal information we collected;
   2. the categories of sources from which we collected personal information;
   3. the purposes for collecting, using, or sharing (as applicable) that personal information;
   4. the categories of third parties with whom we disclose personal information; and
   5. a copy of the personal information that we collected about you in a portable, readily usable and machine-readable format.
2. The Right to Correct. You can request that we correct inaccurate personal information that we maintain about you.
3. The Right to Withdraw Consent. Where we process your personal information based on consent (including direct marketing consents), you have the right to withdraw consent at any time. In case of a withdrawal, we may continue to use your personal information as permitted or required by law. Please note, that if you choose to withdraw your consent, we may not be able to provide the services outlined in section 2.2 of this policy.
4. The Right to Delete. You can request that we delete the personal information we collected from you where it is no longer needed to fulfil the purposes for which we have collected it.
5. Right to Opt-Out of Targeted Advertising. You have the right to opt-out of “targeted advertising” under applicable state law.
6. The Right to Opt-Out of Sales/Sharing. If we “sell” or “share” your personal information, you can opt-out. We do not “sell” your personal information to third parties in exchange for money, nor do we “sell” your personal information, as described by the CCPA, for other valuable consideration. We also do not “share” your personal information, as described by the CCPA, for purposes of cross context behavioral advertising.
7. Right to Opt-Out of Profiling. You may request to opt-out of profiling in furtherance of a decision that produces a legal or similarly legal effect. If you are located in Québec, profiling is subject to opt-in by using the mechanism to that effect. If you have opted-in, you can later opt-out at any time.
8. The Right to Data Portability. You have the right to obtain that your personal information be transferred to another organization of your choice. in a portable, and to the extent technically feasible, readily useable format, which you can use to transmit your data to another entity.
9. Right to Limit Processing of Sensitive Personal Information. You have the right to ask that we limit how we process your sensitive personal information, subject to exceptions.
10. The Right to Withdraw Consent. Where we process your personal information based on consent (including direct marketing consents), you have the right to withdraw consent at any time. In case of a withdrawal we may continue to use your personal information as permitted or required by law. Please note that if you choose to withdraw your consent, we may not be able to provide the services outlined in section 2.2 of the policy.
11. About Automated Decision Making. If you are subject to a decision exclusively by automated decision making, you have the right to be informed and to request access to your personal information that was used to make the decision as well as to have it corrected as necessary. You have the right to make representations to a person in a position to review the decision. You have the right to opt-out of automated decision making.
12. The Right to Nondiscrimination. You are entitled to exercise the rights described above without receiving discriminatory treatment.
13. The Right to File a Complaint. If you have concerns about how we process your personal information you may file a complaint with us. While we will do all we can to respond to your satisfaction, if that is not the case and you reside in Canada, you can lodge a complaint with the privacy commissioner competent in your province.
14. The Right to Appeal. You may appeal our decision to your request regarding your personal information. To do so, please contact us in any of the ways list below. We respond to all appeal requests as soon as we reasonably can, and no later than legally required. Click here to review our appeals process.

Please contact us at myprivacy@royalenfield.com to exercise any of these rights.

Your request must be made in writing. In your request, please make clear which right you would like to exercise. If you direct us not to sell/share your personal information, we will consider it a request pursuant to California’s “Shine the Light” law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes. We will also honor opt-out preferences transmitted through Universal Opt-Out Mechanisms (UOOMs) as a valid means to opt-out of targeted advertising . We reserve the right to confirm your identity to process your requests. This is a security measure to, for example, help ensure we do not disclose information to a person who is not entitled to receive it.

You may designate an authorized agent to make a request on your behalf. If you do so, we may require proof of your identification, the authorized agent’s proof of identification, and any other information that we may request in order to verify the request, including evidence of valid permission for the authorized agent to act on your behalf. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee or decline to comply with your request if your request is clearly unfounded, repetitive, or excessive.

While the majority of questions and issues related to access can be handled quickly, complex requests may take more research and time. In such cases, issues will be addressed, or you will be contacted regarding the nature of the problem and appropriate next steps, within thirty days.

We note, however, that these rights, and rights listed elsewhere in this Privacy Policy, may not be absolute, and in some cases, we may not be able to respond to your request, such as when a legal exemption applies or if we are not able to verify your identity. If we cannot grant your request, we will provide reasons.

7. DATA STORAGE

Royal Enfield may transfer your information from “www.royalenfield.com” to other databases and store it on Royal Enfield or other supplier systems. Royal Enfield ensures appropriate security controls when storing data on its or its suppliers’ systems.

8. CROSS-BORDER DATA TRANSFERS

When conducting business, working on company projects, or implementing new processes or systems, an operation may require the transfer of personal information to other entities or third parties that are located outside of your jurisdiction. When that is the case, your personal information becomes subject to the local laws of general application which may be different from the jurisdiction of your residency.

9. COMMITMENT TO DATA SECURITY

We have implemented reasonable security features designed to protect personal information. While we try our best to safeguard personal information once we receive it, please understand that no transmission of data over the Internet or any other public network can be guaranteed to be 100% secure. When we engage service providers to process personal information, we take steps to ensure that they do so securely, in accordance with our instructions and under appropriate contract terms that we have in place with them.

We ensure that our service providers employ industry standard security measures to ensure the security of information through legally binding terms and conditions. However, users of our “www.royalenfield.com” are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password protected or secure areas of any Workday websites. Access to and use of password protection and/or a restricted part of “www.royalenfield.com” is restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution.

10. ADDITIONAL CHOICES YOU CAN MAKE

Cookies. As is the case with many sites, when you visit our site and complete a registration form, we will place a "cookie" on your computer, which helps us identify you. We will not use "cookies" or other devices to follow your click stream on the Internet generally, but will use them, and other devices, to determine which pages or information you find most useful or interesting at our own sites.

Most browsers permit you to refuse to accept a "cookie" offered by a site. You will not be denied access to any part of the site on account of your refusal to accept a cookie that is not a strictly necessary cookie, but your transactions through this site may be delayed due to the time it takes you to re-enter basic information necessary to complete a transaction.

Should you choose to unsubscribe or to be forgotten, the cookies will be disabled. For more information about cookies and its usage visit our cookie policy. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

Email Communications. If you provide us with your email address in order to receive communications, you can opt-out of marketing emails at any time by following the instructions at the bottom of our emails. Please note that certain emails may be necessary for the operation of our Site, such as to deliver notifications directly to you through the Site. You will continue to receive these emails, even if you unsubscribe from our marketing communications.

Analytics. The website may use Google Analytics to help us analyze how the website is being accessed and used. You can learn more about how Google protects your data by clicking here. To opt-out of Google Analytics, you can download and install the Google Analytics Opt-out Browser Add-on, available here. You may opt-out of Google’s use of cookies by visiting Google’s Ads Settings.

Do Not Track. Some browsers may be configured to send “Do Not Track” signals to the online services that you visit. The website currently does not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

11. RETENTION AND DISPOSAL

We will retain your personal information for as long as necessary to fulfill the purpose of collection, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish and defend legal claims, for fraud prevention purposes, or as long as required to meet our legal obligations. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, any applicable ongoing legal claims, and the applicable contractual obligations or legal requirements. We do not retain information specific to us beyond any limits imposed by law.

We will retain your information for as long as your account is active or as needed to provide you services. If you wish that we no longer use your information to provide you services, contact us via the information provided in section 12 of this privacy policy. We will respond to your request within 30 days of receipt of the request. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

12. PRIVACY CONTACT INFORMATION

If you have any questions regarding our privacy policy or if you need to make a request under section 6, you can do so by contacting us by email addressed to myprivacy@royalenfield.com.

13. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be amended by Royal Enfield may, without notice or liability, update this Privacy Policy. You should periodically revisit this posting to review any revisions to this Privacy Policy.

Our collection of personal information has not changed during the last 12 months.

United States Privacy Law Appendix

This Section provides additional information required by the laws of certain states in the United States, including but not limited to California and Colorado. Our collection of personal information has not changed during the last 12 months.

As explained in this Privacy Notice, we do not “sell” or “share” any personal information as those terms are defined under California privacy law. The following chart provides information about the categories of personal information we collect, how we collect it, why we collect it, with whom we share it, and how long we retain it.