Privacy Policy

This Privacy Policy describes how BigFootRental ("we", "us", "our") collects, processes, stores, and protects personal data and commercial information when you interact with our heavy equipment rental platform, website, mobile apps, customer portals, or partner APIs.

We are dedicated to maintaining the confidentiality, integrity, and security of all user data in strict compliance with applicable data protection laws.

Depending on how you use our platform, we collect the following categories of information:

• Account & Profile Information: First and last name, business email address, verified mobile phone number, login credentials, company name, and role.
• KYC & Business Verification Data: For equipment vendors and corporate renters, we collect company registration certificates, GSTIN / Tax identification numbers, PAN records, and director identification documents.
• Rental & Transaction Details: Machinery requested, rental duration, delivery yard locations, digital handover checklist photos, condition inspection reports, and rental agreement signatures.
• Payment & Escrow Information: Invoicing details, bank account details for vendor payouts, transaction reference codes, and escrow deposit records (processed via certified PCI-DSS payment gateways; we do not store full payment card numbers).
• Communications: Support tickets, messages exchanged via site coordinators, and customer service call notes.

We use your data for the following operational purposes:

• Facilitating equipment hire bookings between Renters and verified Vendors.
• Generating verified digital handover checklists and condition baseline reports.
• Managing security deposit escrow allocations, refunds, and damage adjustments.
• Coordinating emergency breakdown mechanics and on-site machine logistics.
• Sending transactional SMS alerts, dispatch confirmations, and booking status updates.
• Preventing fraud, platform circumvention, and unauthorized machinery transfers.

We process your personal information under the following legal bases:

We do not sell, rent, or trade your personal information. We share data only with:

• Rental Counterparties: Contact information and site delivery addresses are shared with the matching Vendor or Renter once a booking is confirmed to enable handover.
• Certified Service Providers: Cloud hosting infrastructure, SMS gateway carriers (for OTP authentication), and payment gateways.
• Logistics & Inspection Teams: Field site coordinators dispatched for machine inspections and breakdowns.
• Legal & Regulatory Authorities: Where mandatory by applicable law or court order.

Certain heavy equipment listed on the platform is equipped with IoT telematics and GPS tracking units installed by fleet owners. Telematics data (including real-time location, operating hours, engine status, and diagnostic error codes) is processed solely for safety monitoring, verifying rental hours against contracts, preventative maintenance, and recovery in the event of unauthorized transit.

We use essential cookies and session tokens to keep you signed in, remember your equipment filter preferences, and secure transactions. You can control cookie preferences in your browser settings, though disabling essential cookies may impact platform functionality.

We implement industry-standard technical and organizational security controls:

• HTTPS/TLS 1.3 encryption for all data in transit.
• AES-256 database encryption at rest for sensitive records and media attachments.
• Cryptographic hash-chained audit logging for all transactional modifications.
• Strict role-based access control (RBAC) ensuring staff access data only on a need-to-know basis.

We retain personal data only as long as necessary to provide platform services, maintain active accounts, resolve disputes, and fulfill statutory legal and financial audit requirements (typically 7 years for commercial booking and tax records).

Under applicable data protection laws, you are entitled to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or rectify incomplete or inaccurate profile details in your Account settings.
• Deletion: Request erasure of your account and personal data, subject to statutory retention obligations.
• Data Portability: Obtain your rental history and invoices in a structured, machine-readable format.

The Platform is strictly intended for commercial heavy machinery hire and is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.

We may update this Privacy Policy from time to time to reflect technological changes or regulatory requirements. Any material changes will be notified via our website or via email prior to becoming effective.

If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact our Privacy & Compliance Officer: