Privacy Policy
FOR BLULOADS MOBILE APPLICATION
(Transporter App & Shipper / Customer App)
This Privacy Policy applies to the mobile application “bluloads” (the “App”), operated by The Blu World (“Company”, “we”, “us”, “our”).
Owned and Operated by:
The Blu World, a company incorporated under the Companies Act, 2013, having its registered office at Chennai, India (“Company”, “we”, “us”, “our”).
1. A legal status of this Privacy Policy
This Privacy Policy (“Policy”) explains how The Blu World collects, uses, stores, shares, and protects personal data of users (“User”, “you”, “your”) while accessing or using the Platform.
This Policy is published in compliance with:
-
Digital Personal Data Protection Act, 2023 (“DPDP Act”)
-
Digital Personal Data Protection Rules, 2025
-
Information Technology Act, 2000
-
Information Technology (Reasonable Security Practices and Procedures) Rules, 2011
-
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
By accessing, registering on, or otherwise using the Platform, you confirm that you have read and understood this Policy and expressly consent to the collection, processing, storage, and disclosure of your personal data for lawful purposes in a free, specific, informed, unconditional, and unambiguous manner, in accordance with applicable law. Such consent may be withdrawn in the manner prescribed under the DPDP Act, subject to applicable legal and contractual consequences.
2. Applicability
This Policy applies to:
-
Transporters
-
Shippers / Agents / Customers
-
Drivers (whose data is uploaded by Transporters)
-
Any person accessing the Platform
This Policy applies to both mobile application and website of the Platform, irrespective of the mode of access, including through Android and iOS devices.
3. What to include in the Privacy Policy
3.1 Personal Data (Directly Provided)
We may collect the following personal data that is voluntarily provided by you at the time of registration or use of the Platform:
-
Full name
-
Mobile number
-
Email address
-
Business name and details (if applicable)
-
Address / location details (where required)
3.2 KYC Data (For Verification and Compliances Purposes)
We collect Know Your Customer (KYC) information strictly for verification and compliance with applicable legal and regulatory requirement, including:
-
Government-issued ID documents
-
Self-photographs / selfies
-
Address proof
-
Vehicle Registration Certificate (RC)
-
Vehicle Images
-
Insurance, permits, fitness certificates
-
Driver license details (uploaded by Transporter)
KYC data is collected, processed, and stored strictly on a need-to-know basis and in accordance with applicable data protection laws.
4. Camera Access and Document Upload (Explicit Consent)
-
The Platform may request camera permission to:
-
capture KYC photos,
-
capture vehicle images,
-
capture document images.
-
-
You grant explicit, informed consent for such access at the time permission is requested.
-
Camera access is never used in the background and only upon user action.
-
Uploaded images and documents are:
-
stored securely,
-
access-restricted,
-
used strictly for verification, fraud prevention, and legal compliance.
-
-
You may deny or revoke camera access at any time through your device settings; however, certain features of the Platform may become unavailable as a result.
5. Automatically Collected Data
We may collect technical and usage data including:
-
Device type, OS version
-
IP address
-
App usage logs
-
Date/time stamps
-
Crash reports and diagnostics
Such data is collected through automated means and does not, by itself, directly identify you.
This data is used for security, debugging, analytics, and performance improvement.
Where third-party tools, software development kits (SDKs), or analytics services are used, such processing shall be subject to appropriate contractual and confidentiality safeguards.
6. Purpose Of Data Processing
Your data is processed for the following lawful purposes:
-
User onboarding and identity verification
-
Enabling transporter–shipper discovery and booking
-
Fraud detection and prevention
-
Compliance with legal and regulatory obligations
-
Platform safety and dispute handling
-
Subscription management
-
Customer support and grievance redressal
-
Platform improvement and analytics
All processing is limited to what is necessary and proportionate for the purposes stated above.
We do not process personal data for any purpose incompatible with the above.
7. Data Sharing and Disclosing
We do not sell personal data.
Data may be shared:
-
Between Users
-
Limited data (name, contact, vehicle details) is shared strictly on a need to know basis and only after booking or transaction has been accepted, to enable service fulfilment.
-
-
With Service Providers
-
With third party service providers, including Cloud hosting, KYC verification, analytics providers who acts as data processors and are contractually bound by confidentiality, data protection and security obligation consistent with applicable law.
-
-
With Government / Authorities
-
When required by law, regulation, or court order.
-
-
For Legal Protection
-
To investigate or prevent fraud, enforce Terms, or protect platform integrity.
-
All data sharing is limited to what is necessary for the stated purpose and is carried out in accordance with applicable data protection laws.
8. Data Retention
-
Data is retained only for:
-
as long as your account remains active, and/or
-
as required under applicable law.
-
-
KYC data may be retained even after account closure where such retention is necessary for:
-
statutory compliance,
-
dispute resolution,
-
fraud prevention.
-
9. Data Security Measures
We implement reasonable security practices including:
-
Encryption at rest and in transit (where applicable)
-
Role-based access controls
-
Secure cloud infrastructure
-
Internal confidentiality obligations
-
Periodic security reviews
While we take reasonable measures to safeguard personal data, no method of transmission or storage is completely secure, and we do not guarantee absolute security.
10. User Rights under DPDP Act
Subject to applicable law, you have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion of data, where legally permissible
-
Withdraw consent for processing, subject to the consequence provided under applicable law and platform terms.
Requests for exercising the above right shall be submitted to [support@thebluworld.com].
11. Consequences Of Withdrawal Or Non-Provision
If you refuse or withdraw consent for mandatory data (KYC, identity verification):
-
account creation may be denied,
-
access may be suspended or terminated,
-
certain features will be unavailable.
Such withdrawal shall not affect the lawfulness of any processing carried out prior to the withdrawal of consent.
12. Children's Data
The Platform is not intended for individuals under 18 years.
We do not knowingly collect children’s personal data.
If we become aware that children’s personal data has been collected inadvertently, reasonable steps shall be taken to delete such data.
13. Communication Consent
By registering, you consent to receive communications via:
-
phone calls,
-
SMS,
-
WhatsApp,
-
email,
-
push notifications,
solely for service related , security, and regulatory purposes.
Such communication shall not be treated as unsolicited under TRAI regulations.
14. Intermediary Status
The Blu World acts as an intermediary under the meaning of the Information Technology Act 2000 and the rules made there under.
User-generated content (profiles, reviews, listings) remains the responsibility of the respective users.
The Company does not initiate, select, modify, or control such user-generated content and shall not be liable for the same, except as required under applicable law.
15. Data Accuracy And User Responsibility
The users shall represent and warrant that all information including but not limited to personal data, license, and other documentation provided to the platform are true, accurate and not misleading. The company shall not be responsible for any loss, liability, or regulatory consequence arising from false, inaccurate, forged, or expired documentation uploaded by Users.
16. Force Majeure
The Company shall not be liable for any delay in performance caused due to any event that is beyond their control. (In case of natural disaster, cyber attack or server failure)
17. Limitation Of Lilability
To the maximum extent permitted by law, the Company shall not be liable for:
-
unauthorized access caused by user negligence,
-
third-party misuse beyond reasonable control,
-
losses arising from user-to-user interactions.
In no event shall the Company be liable for any indirect, incidental, consequential, or special damages, except where such liability cannot be excluded under applicable law.
18. Policy Updates
We may modify this Policy from time to time.
Updates will be posted on the Platform and continued use constitutes acceptance.
19. Governing Law & Jurisdiction
This Policy shall be governed by and construed in accordance with the laws of India.
Courts at Chennai shall have exclusive jurisdiction in respect of any dispute arising out of or in connection with this Policy .
20. Grievance Redressal
In accordance with applicable law, the Company has appointed a Grievance Officer for addressing concerns or complaints relating to personal data processing:
Email: support@thebluworld.com
Address: Chennai
Grievances shall be acknowledged and addressed within the timelines prescribed under applicable law.