PRIVACY POLICY

Last Updated:21 September 2026

Royal Enfield (“we”, “us”, “our”) is committed to protecting the personal data of all individuals (“Data Principals”) who interact with our products, websites, mobile applications, dealerships, service centers, events, and customer support channels.

This Privacy Notice explains how we collect, use, store, share, retain, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA).

By using our services or providing your personal data, you acknowledge that you have read and understood this notice.

1. Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with us:

1.1 Information You Provide

● Name (first name, last name, maiden name), phone number, email address, postal address
● Identity details such as date of birth and government ID (where required)
● Vehicle purchase details (including but not limited to motorcycle model, vehicle registration state/city Vehicle Identification Number (VIN), vehicle purchase date, and details of your orders and purchases, including Genuine Motorcycle Accessories (GMA) and Genuine Motorcycle Apparel (GMC)), service history, warranty information such as Roadside Assistance (RSA) status, service history/due date and warranty status
● Payment and transaction details (processed securely through authorised partners)
● Royal Enfield Account credentials, such as your ID and password
● Responses to surveys, feedback forms, complaints and other customer support correspondence
● Documents submitted for test rides, vehicle financing/loan enquiries, or promotional offers
● Your language preference and preferred communication channel

1.2 Information Collected Automatically

● Device information, IP address, and browser data(for example browser type & version)
● Cookies and other tracking technologies used on our website, mobile app and other digital platforms
● Website, product and service usage data, and website activity/usage analytics
● Mobile app activity, crash logs, and device identifiers

1.3 Connected Vehicle and Telematics Data (Where Applicable)

● Vehicle location, diagnostics, performance data
● Ride statistics and connected-service usage patterns
● Alerts, fault codes, maintenance indicators

1.4 Information from Dealers, Service Centers & Partners

● Booking details for service, repair, or test rides
● Delivery and fulfilment information
● Customer support interactions handled by authorized partners

1.5 Financial Information (For Loan, EMI & Payment Verification)

● Bank account details, bank statements, income proof, insurance policy number and previous loan details, collected when you apply for vehicle financing or an EMI option
● Your date of birth is also collected specifically to support loan-related processing
● We share limited financial information with banking institutions solely to verify bike-ownership loan/EMI offers on your behalf
● Payments are processed securely through our payment gateway partner, for example Razorpay.

2. Purpose of Processing Personal Data

We process your personal data for the following purposes:

● To provide, manage, and improve our products and services, including royalenfield.com and royalenfield.store
● To process purchases, orders, service bookings and payments
● To enable connected-vehicle features and mobile app functionalities, where applicable
● To offer customer support and respond to your requests, queries and complaints
● To respond more effectively to customer requests and queries, and make our website/app interface more user-friendly
● To send service reminders, safety notices, order updates and other important updates
● To send marketing/promotional emails, text messages and calls about our products or services, where you have opted in
● To create and personalise content, your digital experience and shopping recommendations across Royal Enfield's website, app and other digital platforms
● To facilitate website/app navigation and the login process, and avoid duplicate data entry
● To enhance the security of our website, app, services and other digital platforms
● To track campaign and survey responsiveness, and evaluate page/response rates
● To calculate state-specific on-road pricing and route your enquiry to the nearest dealership, using your pincode/postal code
● To contact prospective riders promptly, gauge model interest and schedule test rides, using your name and phone number
● To send EMI quotations and spec sheets, and follow up with long-term prospective buyers, using your email address
● To let our affiliate marketing partners optimise campaigns by understanding lead quality, region-wise and model-wise
● To process your date of birth specifically to support loan-related processing, and verify bike-ownership loan/EMI offers with banking institutions and other third parties
● To conduct analytics, quality improvement, and internal reporting
● To share data with third-party service providers for website management, IT infrastructure, customer service, e-mail delivery and auditing
● To comply with legal obligations, audits, and law-enforcement requests
● To prevent fraud, misuse, or security incidents

We will not use your personal data for purposes not disclosed in this notice, unless required by law or permitted under DPDPA.

3. Consent & Withdrawal

Where consent is required, we obtain it in a clear, specific, and informed manner.
You have the right to withdraw your consent at any time by contacting us at: privacy.india@royalenfield.com

Withdrawal of consent does not affect past processing but may limit your ability to access certain services.

4. Your Rights as a Data Principal

Under DPDPA, you have the following rights regarding your personal data:

1. Right to Access Information
You may request details of the personal data we process about you.

2. Right to Correction
You may request updates or corrections to inaccurate or incomplete data.

3. Right to Erasure
You may request deletion of your personal data when it is no longer required or when consent is withdrawn.

4. Right to Grievance Redressal
You may raise complaints regarding how your data is handled.

5. Right to Nominate
You may appoint a nominee to exercise your rights in the event of death or incapacity.

You may exercise these rights by writing to us at:

Email- Royal Enfield Privacy Office – privacy.india@royalenfield.com

We will respond within timelines prescribed under the DPDPA.

5. Data Sharing & Third Parties

We may share your personal data only with:

● Authorized Royal Enfield dealers, service centers and financing partners
● Advertising & marketing platforms, such as Meta (Facebook/Instagram) and Google, to deliver and measure our digital advertising campaigns
● CRM and customer-engagement platforms, such as Salesforce (India/EMEA), our appointed CRM agency in India, and Salesforce CDP (for marketing communications by email, SMS and push notification)
● Web analytics providers, such as Google Analytics and Microsoft Clarity, to understand website usage and visitor behaviour
● Payment service providers, including Razorpay, our payment gateway partner
● Logistics and delivery partners, including Shipdelight, for courier orchestration and order delivery
● Banking institutions, for loan/EMI verification
● Affiliate marketing partners, to support lead generation and campaign optimisation
● Affiliates/Subsidiaries of Eicher Motors Limited, on a need-to-know basis for business operations
● IT service providers, cloud hosting partners, and other analytics vendors
● Connected-vehicle technology partners, where applicable
● Legal, audit, or regulatory authorities, where required by law

We ensure all third parties follow appropriate data-protection standards and process data only under our instructions.

6. Data Storage

Royal Enfield may store your personal data on secure systems hosted by us or authorized service providers.

Appropriate organizational and technical measures are used to ensure the security and integrity of your personal data.

7. Cross-Border Transfers

Your personal data may be transferred to trusted third-party partners located outside India.

We ensure that such transfers comply with DPDPA requirements and that adequate protection measures are in place.

For example, our marketing, analytics and CRM technology partners - including Meta, Google, Google Analytics, Microsoft Clarity and Salesforce - may process personal data on servers located outside India.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this notice or as required by applicable laws, whichever is longer. When data is no longer needed, we securely delete or anonymize it.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or loss.

These include encryption, access controls, secure storage, monitoring, and vendor security assessments.

10. Children’s Data

Royal Enfield does not knowingly collect personal data from children below the age threshold defined under applicable law (an individual under 18 years of age) without verifiable parental consent.

11. Grievance Redressal Mechanism

If you have any concerns, complaints, or questions about how your personal data is processed, you may contact our Grievance Officer:

Grievance Officer
Email -grievance.officer.India@royalenfield.com
Office No. 1111, 11th Floor, Ashoka Estate, Plot No. 24, Barakhamba Road, New Delhi-110001.

If you are unsatisfied with our response, you may escalate your grievance to the Data Protection Board of India in accordance with DPDPA procedures.

12. Updates to This Privacy Notice

We may update this Privacy Notice periodically to reflect legal, operational, or technological changes.

Updated versions will be posted on our website with the date of revision.

13. AI Usage Clause

The Royal Enfield AI Chatbot may use artificial intelligence to generate automated responses. While it is designed to provide accurate assistance, the responses may not always be complete or up to date.

Information provided by the chatbot does not constitute legal, technical, or professional advice. Users should independently verify critical information. Royal Enfield is not responsible for actions taken based on chatbot responses.

14. Language Preferences

Data Principal may choose to receive this Privacy Notice and relevant privacy-related information in a language listed in the Eighth Schedule to the Constitution of India.

22 Language Options: Assamese, Bengali, Bodo, Dogri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Maithili, Malayalam, Manipuri, Marathi, Nepali, Odia, Punjabi, Sanskrit, Santhali, Sindhi, Tamil, Telugu, and Urdu

Please mail your request on privacy.india@royalenfield.com