Privacy Policy

Yamaha Motor Solutions India Pvt. Ltd. (“YMSLI”, “we”, “us”, “our”) respects your privacy and is committed to protecting your digital personal data. This Privacy Policy (“Policy”) explains how we collect, use, share, store and protect your personal data when you interact with our website, mobile application(s), enterprise and IT services, software solutions and other business activities in India. By accessing, interacting with, or using our platforms, services, or engaging with us through any other means as described in this Policy, you acknowledge and consent to the collection and use of your personal data in accordance with this Policy and applicable laws.

Scope and Applicability
1. Who this Policy applies to: This Policy applies to users, customers, visitors, employees, vendors, business partners and any other individuals whose personal data is processed by YMSLI in connection with our business and services in India.
2. Services covered: This Policy covers personal data collected through our website (www.ymsl.in) and web portals, our mobile and web applications, IT and software services including development, implementation, maintenance, support, and related consulting, as well as business operations such as sales, marketing, customer support, events and corporate functions.
3. Privacy by Design and Privacy by Default: We are committed to privacy by design and privacy by default principles per ISO/IEC 27701, integrating data protection into our processes, services, and systems from the outset, minimizing data collection and ensuring highest privacy settings by default.
Personal Data We Collect
1. Data you provide directly: We collect personal data that you voluntarily provide to us, for example when you register or create an account on our website or application(s), use our services or submit inquiries, forms or feedback, participate in surveys, events or marketing activities, or interact with us through email, phone, or other communication channels for the specified purpose. The types of data may include identity details such as name, title and contact details, contact information such as email address, phone number and postal address, professional information such as company name, job title and business contact details, payment and billing information where you supply goods/services, make purchases or paid subscriptions, and any other information you choose to share with us in your communications.
2. Data collected automatically: When you visit our website or use our application(s), we may automatically collect certain technical information, such as IP address, device identifier, browser type and version, operating system and device information, usage information such as pages viewed, features used, time spent and links clicked, and approximate location derived from your IP address or device settings, where permitted. This information is used mainly for security, service improvement, analytics and troubleshooting.
3. Data from services, devices and integrations: When you use our IT or software solutions, we may collect and process information such as application usage data, system or server logs, diagnostic data, and technical details generated through the operation of our services. We may also process data transmitted or received through integrations, APIs, or interfaces with third-party platforms, systems, or devices, solely to the extent necessary to deliver, maintain, secure, or improve our services and comply with legal obligations.
4. Data of children: Our services are not designed for children under 18 years of age. We do not knowingly process children’s personal data without verifiable consent of a parent or lawful guardian, where required. If you believe a child has provided personal data to us without such consent, please contact us and we will take appropriate steps.
Purpose and Legal Basis of Processing
1. Service delivery and operations: We process personal data to provide, operate and maintain our websites, applications and IT services, create and manage your accounts and user profiles, respond to your queries, requests and support tickets, and provide technical support, maintenance and troubleshooting. The legal basis is performance of contract, taking steps at your request before entering into a contract, or legitimate interests in operating our business.
2. Business and commercial purposes: We use personal data to plan, manage and improve our IT, software, ERP, and related consulting services, develop new features, products, solutions and enhancements, conduct analytics, quality checks, monitoring and reporting, and manage relationships with customers, vendors and partners. The legal basis is legitimate interests in developing and improving our business, balanced with your rights and reasonable expectations.
3. Legal and regulatory compliance: We process personal data to comply with obligations under the applicable Indian laws, including but not limited to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), respond to lawful requests from government or regulatory authorities and courts, and maintain records, logs and documentation for audits, dispute resolution or enforcement of our terms. The legal basis is compliance with legal obligations and protection against legal claims.
4. Marketing and communication: We may use your personal data to send service-related notifications and updates, and inform you about events, webinars, offers, or new services that may be relevant to you. We will obtain your consent for marketing communications where required, and you may opt out of marketing at any time through the unsubscribe link or contact details given in this Policy.
5. Consent-based processing: We will seek your free, specific, informed and unambiguous consent, allow you to withdraw your consent easily and at any time, and process your personal data only for the purpose for which consent was given. If you withdraw consent, we will stop the related processing going forward, subject to retention obligations. We assure that your personal data will not be processed for any purpose incompatible with those stated in this Policy or the specific purpose for which consent was obtained, unless required by law or with your further consent.
6. Automated Decision-Making and Profiling: We do not engage in automated decision making, including profiling, that produces legal or similarly significant effects on you.
Consent Management
1. How we obtain consent: We obtain consent through clear actions, for example by online consent forms and checkboxes that are not pre-ticked, in-app prompts and settings within our application(s), and written or electronic acceptance for specific services or features. We present key information about what data we collect, for what purposes, the types of processing involved, and how you can withdraw consent.
2. Withdrawing consent: You can withdraw your consent by changing settings within your account or app (where available), using the unsubscribe link in marketing emails, or contacting us using the details in the “Contact Us and Privacy and Grievance Officer” section. Withdrawal of consent does not affect the lawfulness of processing before withdrawal. We may still retain and use certain data where required by law or necessary for legal claims.
Your Rights as a Data Principal
Subject to conditions under the DPDP Act and other applicable laws, you have the following rights:
1. Right to access: You may request the processing activities undertaken by us and seek a summary or copy of such data. This includes the names of all other person(s) (Data Fiduciaries and Data Processors) with whom we shared your personal data, a simple description of what data was shared, and why it was shared.
2. Right to correction, updating and completion: You may request correction, updating of inaccurate data or completion of incomplete data relating to you.
3. Right to erasure: You may request that we delete your personal data.
4. Right to withdraw consent: You may withdraw consent at any time for consent-based processing.
5. Right to nominate: You may nominate one or more individual for exercising your rights.
6. Right to grievance redressal: You may raise any concerns about our handling of your personal data with us. To exercise any of your rights, simply contact us using the details in the “Contact Us and Privacy and Grievance Officer” section. We will verify your identity and provide a response without any delay. If you are not satisfied with the response, you can escalate the matter to the Data Protection Board of India.
While we strive to maintain the accuracy of your personal data, you are expected to ensure that any information provided to us is accurate and updated timely.
Data Sharing and Third Parties
1. Affiliates and group entities: We may share your personal data with our group companies and affiliates, including entities within the Yamaha group, for purposes consistent with this Policy such as service delivery, support, analytics, or centralized operations etc. Such sharing will be subject to appropriate safeguards and contractual arrangements.
2. Service providers and processors: We may engage third-party service providers to support our business, such as cloud hosting and data center providers, IT infrastructure and security providers, analytics and monitoring tools, and professional advisers such as auditors or consultants. These service providers process personal data only under our instructions, are bound by confidentiality, and shall implement reasonable security measures.
3. Legal and regulatory disclosures: We may disclose personal data to government authorities, regulators, courts or other entities where necessary to comply with legal obligations, enforcing any rights or claim or respond to lawful requests.
4. Business transfers: If we are involved in a merger, acquisition, restructuring, sale of assets, or other corporate transaction, your personal data may be transferred to the relevant third party, subject to compliance with applicable law and protection of your rights.
Cross-Border Transfers
1. Where we transfer your personal data outside India, for example to affiliates or service providers located in other countries, we will ensure that such transfers are permitted under the DPDP Act and applicable Rules, put in place appropriate contractual or other safeguards where required, and ensure that the recipient implements reasonable security practices and processes personal data only for lawful purposes. We will avoid transfers to any country or territory that is restricted under applicable Indian regulations, unless an applicable exemption or approval is available.
Data Security
1. We implement reasonable security practices and procedures, consistent with industry standards, to protect personal data against unauthorized access, disclosure, alteration or destruction. Measures may include technical safeguards such as encryption, obfuscation, masking, tokenisation, firewalls, intrusion detection and access controls, organizational and administrative controls such as defined policies, role-based access, need-to-know principles, background checks where appropriate and incident response procedures, and regular security assessments, audits and training for personnel handling personal data.
Data Breach and Incident Management
1. In case of a personal data breach, we will notify each affected individual promptly clearly via their user account or registered contact details. This notice will cover: the breach details (what happened, scope, and timing); possible impacts on you; steps we have taken or are taking to address risks; precautions you can take (like changing passwords or monitoring accounts); and contact details for our response team.
2. We will promptly contain and investigate the incident, assess risks and impacts, notify the Data Protection Board as required by law within set timelines, and implement fixes to prevent recurrence.
Data Retention and Deletion
1. We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including for the duration of the specified purpose for which it was obtained and for any period thereafter for the period required to comply with applicable law. When personal data is no longer required, we will delete, anonymise or de-identify it in a secure manner. If you request deletion, we will act on your request in accordance with applicable law and subject to any necessary retention.
Cookies and Similar Technologies
1. Our website and application(s) may use cookies, tags, pixels and similar technologies to enable basic functionality and security, remember your preferences, and measure website performance and usage patterns. Non-essential cookies, such as analytics or personalization cookies, may be used with your consent where required. You can manage cookie preferences through your browser settings or cookie banners where available. Disabling certain cookies may affect your experience of our services.
Links to Other Websites
1. Our website or application(s) may contain links to third-party websites or services. This Privacy Policy does not apply to such third parties, and we are not responsible for their privacy practices. You are encouraged to review the privacy policies of any third-party sites or services you visit.
Updates to this Privacy Policy
1. We may update or modify this Privacy Policy from time to time to reflect changes in law, technology, our practices, or other reasons. When we make material changes, we will take appropriate steps to inform you, such as posting a prominent notice on our websites or sending you a communication and will indicate the effective date at the top of the Policy. Your continued use of our services after the updated Policy becomes effective, will mean that you accept the revised Policy.
Know your Rights
1. To enable you to easily exercise your rights under the DPDP Act, you may submit a request through our dedicated online form or by writing to us at YMSLI_DPO@yamaha−motor−india.com, together with the particulars required to identify you, such as your username, registered email address, mobile number, customer ID or enrolment ID, as applicable.
2. You may contact us through these channels to submit your rights request. Our team will promptly verify your identity and respond without undue delay to requests relating to access, correction, erasure, withdrawal of consent, nomination and other rights available to you under the DPDP Act.
Contact Us and Privacy and Grievance Officer
1. If you have any questions, concerns, requests regarding this Policy or our handling of your personal data, you may contact Ms. Pavneet Kaur, Manager, at Yamaha Motor Solutions India Pvt. Ltd., Office Address: 6th Floor, L&T Business Park, near Sarai Khawaja Metro Station, 12/4, Mathura Rd, Sector 27D, Faridabad, Haryana 121003, Email: YMSLI_DPO@yamaha−motor−india.com.
2. For any grievances relating to the processing of your personal data, you may contact our Privacy and Grievance Officer at YMSLI_DPO@yamaha−motor−india.com. We are committed to addressing all grievances in a fair, transparent, and timely manner and will make every effort to resolve your concerns to your satisfaction. If you are not satisfied with our resolution, you may seek further recourse before the Data Protection Board of India, as applicable.