Privacy Policy
1. Introduction
Bajaj Auto Foundation (“BAF,” “we,” “our,” “us”), the corporate social responsibility arm of the Bajaj Auto Group companies, is committed to safeguarding the privacy and protecting the Personal Information of all individuals who interact with our website, BAF Platforms, or participate in our programmes. This includes visitors, applicants, beneficiaries, partners, volunteers, vendors, implementing agencies, and any other stakeholders who engage with us through our digital or offline channels.
We follow the principles of privacy-by-default, transparency, fairness, accountability, and compliance with applicable laws in India governing the collection, use, storage, disclosure, and processing of Personal Information. We design our processes, platforms, and programme systems to minimise data collection, limit use to legitimate programme purposes, and protect information through appropriate organisational and technical safeguards.
You can access our website by clicking the link here: https://www.bajajautofoundation.org By accessing our website, using any BAF Platform, interacting with our Services, or submitting Personal Information to us in any manner, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your information as described herein. If you do not agree with the practices described in this Privacy Policy, you should refrain from using the Site or providing any Personal Information.
This Privacy Policy should be read together with the Terms & Conditions governing use of the Site and BAF Platforms.
2. Scope
2.1 Applicability
This Privacy Policy (“Policy”) applies to the collection, use, storage, disclosure, and processing of Personal Information obtained through the Bajaj Auto Foundation (“BAF”) website, any BAF-owned or BAF-managed digital platform, and all associated online interfaces that link to or reference this Policy (collectively, the “Site”). This includes, without limitation:
- online forms, submissions, and enquiries;
- programme application systems and beneficiary-facing portals;
- volunteer, partner, or vendor engagement platforms;
- subscriptions, newsletters, and communication interfaces;
- CSR-related digital tools, services, or programme-specific platforms; and
any other online or digital Services made available by or on behalf of BAF (collectively, the “Services”).
2.2 Covered Users
This Policy applies to all individuals who access, visit, use, or interact with the Site or any aspect of the Services, including but not limited to:
- website visitors,
- applicants and beneficiaries,
- participants in BAF programmes,
- partners and implementing agencies,
- volunteers and vendors,
- representatives of institutions or organisations engaging with BAF, and
- any other stakeholders who submit Personal Information through BAF Platforms or Services.
2.3 Third-Party Websites and External Platforms
This Policy does not apply to third-party websites, applications, platforms, or services (“Third-Party Sites”) that may be linked from, integrated with, or accessible through the Site. BAF does not control, endorse, or assume responsibility for the privacy practices, content, or policies of such Third-Party Sites. Users are encouraged to carefully review the privacy notices and terms applicable to any Third-Party Site they choose to access.
For clarity, BAF Platforms are not considered Third-Party Sites, and this Policy continues to apply to Personal Information collected or processed through all BAF-owned and BAF-managed platforms.
3. Information We Collect
BAF may collect different categories of Personal Information from and about you when you access the Site, use any BAF Platform, engage with our Services, or participate in our Programmes. This information may be collected directly from you, automatically through your use of the Site, or from authorised third-party sources, as described below.
3.1 Information You Provide Voluntarily
We may collect Personal Information that you voluntarily provide when interacting with the Site or BAF Platforms, submitting applications or forms, communicating with us, or participating in our Programmes. This may include additional information such as disability‑related information, socio‑economic or community‑based classification, income‑related details, and other vulnerability or eligibility indicators that may be required under specific CSR Programmes or for compliance with BRSR or other reporting obligations. Such Personal Information may include, without limitation:
- Name
- Email address, postal or mailing address
- Telephone or mobile number
- Organisational or institutional affiliation, where applicable
- Demographic information, as required for programme eligibility, reporting, or statutory obligations
- Disability status or related information, where required for programme eligibility, affirmative‑action objectives, accessibility support, or regulatory/CSR reporting
- Socio‑economic category, including indicators such as caste/community classification or other categories relevant to CSR Programme targeting or reporting
- Household or individual income details, where required for eligibility assessment, verification, or programme impact measurement
- Application, eligibility, and supporting details submitted for scholarships, skilling initiatives, community outreach projects, assessment results or certification-related information or other CSR Programmes
- Any other information requested as part of eligibility verification for scholarships, skilling initiatives, financial‑need‑based programmes, or other CSR interventions
- Documents or information submitted for verification, assessment, or due-diligence purposes
- Feedback, enquiries, grievance submissions, or other correspondence shared with us
- Communication preferences, such as choices regarding newsletters, updates, notifications, or engagement with our Services
We collect this information to:
- administer and manage Programmes and Services,
- verify eligibility and process applications,
- communicate with you,
- maintain records and ensure programme integrity,
- comply with reporting or legal requirements, and
- improve our website, Platforms, and Service delivery.
3.2 Information Collected Automatically
When you access, use, or interact with the Site or any BAF Platform, we may automatically collect certain information through cookies, server logs, web beacons, analytics tools, and similar technologies. Such automatically collected information may include, without limitation:
- Internet Protocol (IP) address and general geolocation inferred from it
- Browser type, version, language, and device characteristics, such as operating system, hardware model, and unique device identifiers
- Activity data, including pages viewed, access times, session duration, navigation paths, download activity, and interactions with Site features
- Referring and exit pages, URLs, clickstream data, and linked page interactions
- Cookie identifiers, analytics tags, pixels, and other tracking technologies used to understand usage patterns
- Engagement metrics, such as scroll depth, form interactions, button clicks, and digital behaviour insights relevant to improving user experience
This information is collected to:
- ensure the functionality, performance, stability, and security of the Site and BAF Platforms;
- analyse usage trends and measure effectiveness of Services;
- detect and prevent fraud, abuse, or technical issues;
- customise and improve Site functionality and user experience; and
- support overall enhancement of our Programmes, Services, and digital operations.
For additional details on cookies and tracking technologies, please refer to our Cookies and Similar Technologies section.
3.3 Information from Third Parties
We may receive certain categories of Personal Information about you from authorised third-party sources, where permitted by Applicable Law and necessary for delivering our Programmes, operating our Services, or verifying information you have submitted. Such third-party sources may include, without limitation:
- Partner organisations, NGOs, implementing agencies, training institutes, or skill development centres engaged by or associated with BAF for CSR Programmes;
- Educational institutions, assessment bodies, verification agencies, or credentialing organisations providing eligibility, enrolment, or outcome-related information;
- Service providers acting on behalf of BAF, including analytics providers, hosting partners, communication platforms, verification service providers, or application-processing vendors;
- Government bodies, public authorities, statutory databases, or official records providing identity, eligibility, demographic, or other verification‑related information; and
- Publicly available sources, such as public registries, government portals, directories, or open databases used for lawful verification or Programme administration.
Any Personal Information received from such third‑party sources will be processed by BAF in accordance with this Privacy Policy, contractual assurances in place with such partners, and Applicable Law governing transparency, purpose limitation, data minimisation, and security.
For clarity, where third parties collect Personal Information on behalf of BAF or for BAF Programmes, such collection is deemed to be undertaken under BAF’s direction, and BAF remains responsible for ensuring compliance with Applicable Law for such processing.
However, BAF is not responsible for the privacy practices or data‑collection methods of third parties that collect Personal Information independently for their own purposes and relies on such third parties to have the authority to share such information with us.
4. How We Use Your Personal Information
BAF undertakes various forms of processing of Personal Information—in accordance with Applicable Law and the purposes described below—to administer Programmes, operate Services, and fulfil its CSR objectives.
BAF may use the Personal Information collected—whether provided directly by you, collected automatically through your use of the Site or BAF Platforms, or obtained lawfully from authorised third-party sources—for one or more of the following purposes:
4.1 Program Administration and Service Delivery
We use Personal Information to administer, deliver, and support our Programmes and Services, including to:
- process, review, and evaluate applications for scholarships, skilling initiatives, community outreach projects, and other CSR-related Programmes;
- verify eligibility, conduct due-diligence checks, complete enrolment, and manage participation in Programmes;
- issuing, managing, validating, and verifying certifications, acknowledgements, transcripts, or similar programme-related credentials, including maintaining certification records and enabling access to such credentials in digital or physical form;
- administer and support ongoing Programme operations, including training, capacity-building, events, beneficiary services, and partner-supported activities;
- determine suitability and ensure appropriate targeting of CSR interventions based on Programme criteria, socio-economic indicators, or vulnerability-related information;
- measure Programme progress and provide necessary facilitation, support, or services.
4.2 Communication and Engagement
We use Personal Information to communicate with you and enable meaningful engagement, including to:
- respond to inquiries, requests, grievances, or correspondence submitted by you;
- send Programme-related updates, reminders, notifications, administrative messages, certificates, outcome information, newsletters, or event communications;
- provide communication preference management, including opt-in or opt-out choices where required;
- engage with you about Programme opportunities, events, surveys, feedback mechanisms, or relevant initiatives.
4.3 Website, Platform, and Service Improvement
We use Personal Information and automatically collected data to operate, secure, and improve the Site, BAF Platforms, and Services, including to:
- maintain, manage, and enhance the functionality, performance, stability, and security of our digital systems;
- improve content relevance, accessibility, user experience, and service delivery;
- analyse usage patterns, conduct analytics, measure reach and impact, and generate technical insights;
- address technical issues, troubleshoot errors, and improve digital operations;
- develop new features, tools, Programme interfaces, or Services.
4.4 Monitoring, Evaluation, and Reporting
We use Personal Information to meet monitoring, evaluation, learning, and reporting obligations, including to:
- assess Programme effectiveness, outputs, and outcomes;
- conduct internal reviews, audits, and quality assessments;
- prepare statutory, regulatory, CSR, or BRSR-related reports and disclosures;
- generate analytics, dashboards, or consolidated insights to improve transparency, accountability, and Programme design;
- comply with donor, regulatory, or organisational reporting requirements.
4.5 Record-Keeping and Operational Requirements
We use Personal Information to support operational and administrative needs, including to:
- maintain internal records, databases, and documentation relating to applications, participation, and Services;
- support internal planning, budgeting, forecasting, and decision-making;
- manage partnerships, vendor onboarding, volunteer interactions, and institutional engagements;
- maintain verifiable records for compliance, audit, and programme integrity.
4.6 Security, Fraud Prevention, and Compliance
We use Personal Information to protect users, systems, Programmes, and organisational operations, including to:
- verify identity, authenticate users, and prevent impersonation or misrepresentation;
- detect, investigate, and prevent fraud, misuse, wrongful activity, or security threats;
- safeguard the integrity and security of the Site, BAF Platforms, digital services, and Programme systems;
- comply with legal, regulatory, or contractual obligations, including responding to lawful requests from authorities;
- ensure adherence to Applicable Law, including data protection, CSR governance, Programme guidelines, and reporting obligations.
4.7 No Sale of Personal Information
BAF does not sell or rent Personal Information under any circumstances. Personal Information is used strictly for the purposes described in this Policy and in alignment with BAF’s CSR objectives, Programme requirements, and lawful obligations.
5. Legal Bases for Processing
BAF processes Personal Information only where such processing is lawful, fair, and necessary, and in accordance with Applicable Law in India. Depending on the nature of the interaction, Programme, or Service, the processing of your Personal Information is carried out on one or more of the following legal bases.
The applicable legal basis for processing may vary depending on the nature of the Personal Information, the context of collection, and the specific Programme or Service involved.
5.1 Consent
BAF may process Personal Information based on your explicit or implicit consent, as applicable, including where you:
- access or use the Site or any BAF Platform;
- submit an application, registration, or form;
- provide information voluntarily through correspondence, enquiries, surveys, or feedback; or
- participate in a Programme, event, or Service offered or administered by BAF.
Where processing is based on consent, you may withdraw your consent at any time in accordance with the procedures described in this Privacy Policy. Withdrawal of consent will apply prospectively and will not affect the lawfulness of processing carried out prior to such withdrawal, nor processing required for compliance with legal obligations, Programme records, or reporting requirements.
Upon withdrawal of consent, BAF will cease processing your Personal Information for the purposes for which consent was withdrawn, unless such processing is required under Applicable Law or is necessary for Programme records, audit, dispute resolution, fraud prevention, or compliance obligations.
Where applicable, identifiable Personal Information will be securely deleted, anonymised, or de-identified in accordance with this Privacy Policy. Aggregated or anonymised information that does not directly or indirectly identify an individual may continue to be retained and used, including for analytics, reporting, system performance monitoring, and Programme improvement purposes.
Further details regarding retention and deletion practices are set out in the Clause 9 – Data Retention section of this Privacy Policy.
BAF may process Personal Information to the extent such processing is allowed under applicable data protection laws.
6. Sharing and Disclosure of Personal Information
BAF does not sell or rent Personal Information under any circumstances.
We may share, disclose, or make available Personal Information only where such sharing is necessary, lawful, and proportionate to the purposes described in this Privacy Policy and in accordance with Applicable Law. Any sharing or disclosure is subject to appropriate contractual, technical, and organisational safeguards.
6.1 Service Providers, Partners, and Programme Implementing Agencies
We may share Personal Information with trusted third-party entities that provide services to or act on behalf of BAF in connection with the operation of the Site, BAF Platforms, or delivery of Programmes and Services. Such entities may include, without limitation:
- Programme implementing partners, NGOs, training institutes, skilling centres, and other organisations engaged by BAF for administering or delivering CSR Programmes;
- Service providers supporting application processing, beneficiary management, assessments, certifications, or programme administration;
- Technology and infrastructure providers, including IT, hosting, cloud services, analytics providers, and platform support vendors;
- Communication and engagement partners, providing email, SMS, helpdesk, grievance redressal, or support services.
Where third parties process Personal Information on behalf of BAF, such processing is undertaken under BAF’s direction and control. These entities are required to:
- process Personal Information only for the purposes specified by BAF;
- adhere to strict confidentiality obligations;
- implement appropriate technical and organisational security measures; and
- comply with Applicable Law and contractual data-protection requirements.
6.2 Legal and Regulatory Requirements
We may disclose Personal Information to government authorities, regulators, courts, law-enforcement agencies, or other third parties where such disclosure is necessary to:
- comply with Applicable Law, court orders, subpoenas, or legal processes;
- fulfil statutory or regulatory reporting obligations, including those relating to CSR governance, BRSR disclosures, audits, or inspections;
- respond to lawful requests, directions, or inquiries from public authorities; or
- protect BAF’s legal rights or comply with dispute-resolution or enforcement mechanisms.
6.3 Prevention of Fraud, Misuse, and Protection of Interests
We may disclose Personal Information where reasonably necessary to:
- investigate, detect, prevent, or respond to fraud, impersonation, security incidents, misuse, or unlawful activities;
- protect the rights, safety, and security of beneficiaries, users, partners, employees, volunteers, or the public;
- safeguard the integrity, effectiveness, and lawful operation of BAF’s Programmes, Platforms, and systems; or
- support internal audits, risk management, and compliance functions.
6.4 Organizational Changes and Administrative Transitions
In the event of any internal restructuring, reorganisation, merger, amalgamation, asset transfer, or other organisational or administrative transition involving BAF, Personal Information may be shared with relevant internal or external entities, provided that:
- such sharing is subject to appropriate confidentiality, security, and data-protection safeguards; and
- the continued processing of Personal Information remains consistent with this Privacy Policy and Applicable Law.
6.5 No Sale or Commercial Exploitation
BAF does not sell, rent, trade, or commercially exploit Personal Information, and does not permit its service providers or partners to do so.
7. Third-Party Websites, Independent Services, and External References
This Privacy Policy applies solely to the collection, use, storage, disclosure, and processing of Personal Information through the Bajaj Auto Foundation (“BAF”) website, BAF Platforms, and Services that are operated by or on behalf of BAF and that expressly reference or incorporate this Privacy Policy.
This Privacy Policy does not apply to websites, applications, platforms, digital services, or offerings that are operated by third parties or individuals, even where such third-party services:
- reference, mention, display, or otherwise use the name, logo, branding, or Programmes of BAF;
- appear in search results, directories, advertisements, or listings related to BAF or its Programmes; or
- link to the BAF website or any BAF Platform.
BAF does not control, endorse, supervise, or assume responsibility for the privacy practices, content, data-collection methods, cookies, tracking technologies, advertising practices, or information-handling activities of such third parties. Any Personal Information collected by those third parties is governed by their respective privacy policies and terms, and not by this Privacy Policy.
This Privacy Policy also does not govern the information practices of organisations or entities that advertise, promote, partner with, or otherwise reference BAF or its Programmes through their own websites, platforms, or applications, where such services are independently operated.
Users are encouraged to carefully review the privacy policies and terms of use of any third-party website, application, or service before providing Personal Information or engaging with such platforms.
8. Cookies and Similar Technologies
The Site and BAF Platforms may use cookies and similar technologies to support functionality, enhance user experience, analyse usage, and improve the delivery of our Services. Cookies are small data files stored on your device when you visit a website or interact with online platforms.
8.1 Types of Cookies and Technologies Used
BAF may use the following categories of cookies and similar technologies:
- Essential cookies, which are necessary for the operation of the Site or BAF Platforms and enable core functions such as page navigation, security, and access to restricted areas;
- Functional cookies, which allow the Site or BAF Platforms to remember user preferences and settings to provide enhanced features and a more personalised experience;
- Analytics and performance cookies, which help us understand how users interact with the Site and Services by collecting aggregated and anonymised information about usage patterns, page interactions, and system performance; and
- Similar technologies, such as temporary cache storage, log files, web beacons, pixels, or tags, used to support analytics, security monitoring, performance optimisation, and system administration.
Where feasible, analytics data collected through such technologies is aggregated or anonymised and does not directly identify individual users.
Temporary cache data is used solely to improve performance, reduce load times, and support efficient operation of the Site and BAF Platforms, and does not directly identify individual users.
8.2 Purpose of Use
Cookies and similar technologies are used to:
- ensure the proper functioning, security, and reliability of the Site and BAF Platforms;
- analyse usage trends and measure engagement with content, features, and Services;
- improve site design, accessibility, and overall user experience;
- diagnose technical issues, prevent misuse, and support security monitoring; and
- support Programme delivery, reporting, and continuous service improvement.
8.3 Third-Party Cookies and Technologies
In some cases, cookies or similar technologies may be placed by third-party service providers engaged by BAF (such as analytics or hosting providers) to support Site functionality, analytics, or infrastructure services. Such third-party technologies are used only in accordance with BAF’s instructions and Applicable Law.
BAF does not control cookies or tracking technologies deployed by independent third-party websites or services that are not operated by or on behalf of BAF. The use of such technologies is governed by the privacy policies of those third parties, and not by this Privacy Policy.
8.4 Managing Cookies
You may manage or disable cookies through your browser settings or device controls. Most browsers allow you to refuse or delete cookies, or to be notified when cookies are being placed. Please note that disabling certain cookies may affect the functionality or availability of parts of the Site or BAF Platforms.
Further details regarding the specific cookies used and available controls may be provided through cookie banners, preference tools, or related notices on the Site.
For more detailed information about the cookies and similar technologies used on the Site and BAF Platforms, including their categories, purposes, and retention periods, please refer to our Cookies Policy, which forms part of this Privacy Policy and is available on the Site.
8.5 Consent and Lawful Use
Where required under Applicable Law, BAF will obtain your consent for the use of non-essential cookies and similar technologies. By continuing to use the Site or BAF Platforms, subject to applicable consent mechanisms, you acknowledge the use of cookies and similar technologies as described in this Policy.
9. Data Security
BAF takes the security of Personal Information seriously and implements reasonable administrative, technical, and organisational safeguards to protect Personal Information against unauthorised access, disclosure, alteration, loss, or destruction. These measures are designed taking into account the nature of the Personal Information processed, the purposes of processing, and the risks involved.
9.1 Security Measures
The safeguards implemented by BAF may include, without limitation:
- access controls and authentication mechanisms to restrict unauthorised access to systems and data;
- role-based access management to ensure that Personal Information is accessible only to authorised personnel on a need-to-know basis;
- secure storage, encryption, and transmission practices where appropriate;
- monitoring of systems and platforms for security vulnerabilities, incidents, or suspicious activity;
- periodic review of security practices and internal procedures; and
contractual and organisational controls requiring service providers and Programme partners acting on BAF’s behalf to implement appropriate data-protection and security measures.
9.2 Security Across BAF Platforms and Programme Operations
BAF applies security safeguards to Personal Information processed through the Site, BAF Platforms, and Programme-related systems, including during collection, storage, access, transmission, and deletion. Where Personal Information is processed by partners or service providers acting on behalf of BAF, such processing is subject to contractual obligations requiring confidentiality, security controls, and compliance with Applicable Law.
9.3 Limitations and User Responsibility
While BAF endeavours to use reasonable and appropriate security measures, no method of transmission over the internet or method of electronic storage is entirely secure. Accordingly, BAF cannot guarantee absolute security of Personal Information.
Users are encouraged to take reasonable steps to protect their own information, including safeguarding login credentials (where applicable) and using secure devices and networks when accessing the Site or BAF Platforms.
9.4 Data Breach and Incident Response
In the event of a suspected or confirmed personal data breach, BAF will take reasonable steps to assess, contain, and mitigate the impact of the incident, and will implement corrective measures as necessary. Where required under Applicable Law, BAF will notify affected individuals and relevant authorities in accordance with statutory obligations.
10. Data Retention
BAF retains Personal Information only for as long as necessary to fulfil the purposes for which it was collected and processed, as described in this Privacy Policy, and to comply with Applicable Law, contractual obligations, and legitimate organisational requirements.
Retention periods may vary depending on the nature of the Personal Information, the context of collection, the specific Programme or Service involved, and applicable legal or reporting requirements.
10.1 Purpose-Based Retention
Personal Information may be retained for durations necessary to:
- administer, operate, and complete CSR Programmes, including scholarships, skilling initiatives, training, certifications, and beneficiary engagements;
- verify eligibility, participation, assessments, outcomes, and Programme completion;
- maintain Programme records, outcome documentation, and certifications issued;
- respond to enquiries, grievances, audits, inspections, or dispute-resolution requirements;
- support Programme monitoring, evaluation, reporting, and learning; and
- ensure continuity, integrity, and lawful operation of Services and BAF Platforms.
10.2 Legal Regulatory, and Reporting Obligations
Certain categories of Personal Information may be retained for longer periods where retention is required or permitted under Applicable Law, including to:
- comply with CSR-related record-keeping, reporting, audit, or inspection obligations;
- support BRSR, sustainability, or governance disclosures;
- retain records for statutory audits, regulatory reviews, or governmental inquiries;
- satisfy legal defence, fraud prevention, or risk-management needs.
10.3 Withdrawal of Consent and Deletion
Where processing of Personal Information is based on consent and such consent is withdrawn, BAF will cease further processing of the affected Personal Information for the purposes for which consent was withdrawn, unless retention or continued processing is required under Applicable Law or for legitimate organisational purposes (such as Programme records, audits, grievance handling, fraud prevention, or legal compliance).
Subject to such requirements, BAF will take reasonable steps to securely delete, anonymise, or de‑identify Personal Information in accordance with this Privacy Policy and its internal data‑retention practices.
Requests relating to deletion or retention are addressed in Clause 11.
10.4 Anonymisation and Aggregated Data
BAF may retain anonymised or aggregated information that does not directly or indirectly identify an individual beyond the retention periods applicable to Personal Information. Such information may be used for analytics, statistical analysis, reporting, Programme evaluation, system improvement, and research purposes.
10.5 Secure Disposal
When Personal Information is no longer required for the purposes described in this Privacy Policy and is not subject to any legal or contractual retention obligation, BAF will take reasonable measures to ensure that such information is securely deleted, destroyed, or irreversibly anonymised.
Retention, deletion, anonymisation, and disposal of Personal Information are carried out in accordance with Applicable Law and BAF’s internal data-retention and deletion practices.
11. Your Rights (Data Principal Rights)
Subject to Applicable Law, you have certain rights in relation to the Personal Information processed by Bajaj Auto Foundation (“BAF”). You can exercise these rights at any point, once the relevant provisions of the Digital Personal Data Protection Act, 2023 (“DPDPA”) are in force. These rights may vary depending on the nature of the Personal Information, the context of processing, and the applicable legal or regulatory requirements. Certain rights are available only when we process your Personal Information based on your consent or voluntarily provided Personal Information. These include the right to access, right to withdraw consent, right to correction, updation and erasure of Personal Information.
11.1 Right to Access
You may request access to the Personal Information held by BAF about you and obtain information regarding:
- a summary of the Personal Information processed, and the processing activities undertaken in relation to such Personal Information;
- details of the third parties with whom your Personal Information has been shared, along with a description of the Personal Information so shared; and
- any other information relating to your Personal Information and it’s processing that we may be required to disclose under Applicable Law.
11.2 Right to Correction and Updating
You may request correction, updating, or completion of Personal Information where you believe such information is inaccurate, incomplete, or outdated.
11.3 Right to Deletion
You may request erasure of Personal Information processed by BAF, subject to Applicable Law. Please note that BAF may retain certain Personal Information where retention is necessary for:
- compliance with Applicable Laws;
- necessary for specified purposes for which we have collected your Personal Information based on your consent.
11.4 Right to Withdraw Consent
Where processing of Personal Information is based on consent, you have the right to withdraw such consent at any time. Withdrawal of consent will apply prospectively and will not affect the lawfulness of processing carried out prior to such withdrawal, nor processing that is otherwise permitted or required under Applicable Law. You may withdraw your consent at any time by contacting our Grievance Redressal Officer at the details set out in Clause 14 below. Upon withdrawal, services provided by BAF to you may be discontinued, as certain data processing is essential.
The effect of withdrawal of consent on retention and deletion of Personal Information is set out in Clause 10 (Data Retention) of this Privacy Policy.
11.5 Right to Grievance Redressal
If you have concerns regarding the processing of your Personal Information you may raise a grievance in accordance with the Grievance Redressal mechanism set out in this Privacy Policy. BAF will make reasonable efforts to address such grievances in a timely and fair manner, as per applicable law. You must exhaust the opportunity of redressing your grievance through our internal grievance redressal mechanism before approaching the Data Protection Board of India.
11.6 Right to Nominate
You have the right to nominate another individual to exercise your rights above in the event of your death or incapacity. For this purpose, "incapacity" means the inability to exercise your rights under the applicable law due to unsoundness of mind or infirmity of body. To exercise your right to nominate an individual, you may:
- Access the nomination feature through [insert means, e.g., your dashboard/online portal];
- Provide the following particulars of the nominee: [insert required particulars, such as name, contact details, relationship, identification proof];
- You may nominate one or more individuals in accordance with applicable law.
12. Children’s Privacy
BAF recognises the importance of protecting the privacy and Personal Information of children and persons with disabilities and is committed to ensuring that such information is handled with appropriate care, safeguards, and responsibility.
12.1 Applicability to Children and Persons with Disabilities
For the purposes of this Privacy Policy, a “child” means a person who has not attained the age specified under Applicable Law (currently, a person below eighteen (18) years of age in India).
Certain Programmes, initiatives, or Services offered or supported by BAF—particularly in the areas of education, skilling, scholarships, or community development—may involve the collection and processing of Personal Information relating to such children or minors. In such cases, BAF processes such Personal Information solely for legitimate Programme-related purposes and with enhanced safeguards.
12.2 Applicability to Children
Where required under Applicable Law or applicable Programme guidelines, BAF will seek consent from a parent before collecting or processing Personal Information relating to a child. Such consent shall be obtained directly from the parent.
12.3 Limited Use and Protection
Personal Information relating to children is used only to the extent necessary for Programme administration, eligibility assessment, delivery of benefits, certifications, reporting, or compliance with legal and regulatory obligations. BAF applies appropriate technical and organisational safeguards to protect children’s Personal Information from unauthorised access, misuse, or disclosure.
12.4 Inadvertent Collection
In the event that BAF becomes aware that Personal Information relating to a child has been collected inadvertently and without the required parental or guardian authorisation, BAF will take reasonable steps to address such collection, which may include deletion, anonymisation, or restriction of processing, in accordance with this Privacy Policy and Applicable Law.
12.5 Applicability to Persons with Disabilities
If the individual is a person with disabilities, this consent must be given by a lawful guardian. You, as the legal guardian, must submit accurate legal proof of your appointment by law as the lawful guardian of the individual for verification purposes.
For the purposes of this Notice, a “person with disability” means: (i) an individual who has long term physical, mental, intellectual or sensory impairment which, in interaction with barriers, hinders her full and effective participation in society equally with others and who, despite being provided adequate and appropriate support, is unable to take legally binding decisions; and (ii) an individual who is suffering from any of the conditions relating to autism, cerebral palsy, mental retardation or a combination of any two or more of such conditions and includes an individual suffering from severe multiple disability and who, despite being provided adequate and appropriate support, is unable to take legally binding decisions.
12.6 Rights of Parents and Guardians
Parents or legal guardians of children whose Personal Information is processed by BAF may exercise the rights set out in Clause 11 (Your Rights / Data Principal Rights) on behalf of the child or person with disabilities, subject to verification and Applicable Law.
13. Cross-Border Transfers of Personal Information
We primarily process and store Personal Information within India. However, in certain circumstances, your Personal Information may be transferred to, stored in, or accessed from locations outside India, including jurisdictions that may have different data-protection standards from those applicable in India.
13.1 Circumstances for Cross-Border Transfers
Cross-border transfers may occur when:
- Service providers, technology platforms, or cloud-hosting vendors located outside India assist us in delivering our Services
- Program administration, analytics, communication systems, or operational tools are supported from overseas locations
- International partners or collaborators require limited data access for legitimate program-related purposes
Any such transfer is undertaken only when necessary and in accordance with applicable legal requirements.
13.2 Safeguards for International Transfers
Where Personal Information is transferred outside India, we ensure that appropriate technical, contractual, and organizational safeguards are in place to protect the data, including:
- Contractual obligations requiring the recipient to maintain confidentiality and data security
- Use of standard contractual clauses or equivalent protections, where applicable
- Limiting access to Personal Information strictly to authorized personnel with a legitimate need
Our commitment is to ensure a level of protection for your Personal Information that is substantially similar to the protection available under applicable Indian laws.
13.3 User Rights for Transferred Data
Your rights with respect to your Personal Information—such as access, correction, deletion, or withdrawal of consent—continue to apply even when data is transferred across borders, subject to legal and operational feasibility.
13.4 Compliance with Applicable Laws
All cross-border data transfers are conducted in accordance with applicable Indian regulations and any sectoral, CSR-specific, or contractual requirements governing the handling of Personal Information.
14. Grievance Redressal and Contact Information
BAF is committed to addressing concerns and grievances relating to the processing of Personal Information in a fair, timely, and transparent manner.
14.1 Raising a Grievance
If you have any questions, concerns, or complaints regarding:
- the collection, use, storage, disclosure, or processing of your Personal Information;
- the exercise of your rights under this Privacy Policy; or
- any perceived infringement of Applicable Law,
- you may raise a grievance by contacting BAF using the details provided below.
14.2 Grievance Redressal Contact
Grievances and requests may be submitted by email or in writing to:csr@bajajautofoundation.co.in
Address: Bajaj Auto CSR, 1st Floor, Engineering Tool Room Building (B-20), Bajaj Auto Limited, Akurdi, Pune, Maharashtra - 411035
(Please include sufficient details to enable us to identify you and understand the nature of your request or concern.)
For general queries relating specifically to this Privacy Policy or the processing of Personal Information, you may contact BAF using the details provided above.
Requests will be addressed within reasonable timelines and in accordance with applicable law. If you are not satisfied with the resolution provided through the above mechanism, you have the right to escalate the matter to the Data Protection Board of India, in accordance with applicable law
14.3 Response and Resolution
BAF will acknowledge and make reasonable efforts to resolve grievances within a reasonable timeframe and in accordance with Applicable Law. Where additional information or verification is required to process a grievance, BAF may request such information before proceeding.
14.4 Escalation
If you are not satisfied with the resolution provided through the above mechanism, you may have the right to escalate the matter to the Data Protection Board of India, in accordance with Applicable Law.
Any disputes that are not resolved through the grievance redressal process described above shall be subject to Applicable Law and the jurisdiction set out in Clause 15.2 of this Privacy Policy.
15. Updates to this Privacy Policy and Governing Law
15.1 Updates to this Privacy Policy
BAF may update or revise this Privacy Policy from time to time to reflect changes in Applicable Law, regulatory requirements, Programme operations, technology, or data-handling practices. Any such updates will be effective upon publication of the revised Privacy Policy on the Site or BAF Platforms, unless stated otherwise.
Where material changes are made, BAF will take reasonable steps to provide notice, which may include posting a prominent notice on the Site or updating the “last updated” date of this Privacy Policy.
Your continued access to or use of the Site, BAF Platforms, or Services after any updates constitutes your acknowledgment and acceptance of the updated Privacy Policy.
15.2 Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to any conflict-of-law principles.
Subject to Applicable Law, the courts of Pune, Maharashtra shall have exclusive jurisdiction over any disputes arising out of or relating to this Privacy Policy.
16. Access Notice in another language
If you require this Notice to be made available in any of these 22 languages [Assamese, Bengali, Bodo, Dogri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Maithili, Malayalam, Manipuri (Meitei), Marathi, Nepali, Odia, Punjabi, Sanskrit, Santali, Sindhi, Tamil, Telugu, and Urdu], you may contact us at the contact details in Clause 14 above, stating your preferred language.