Privacy and Policies

Privacy Policy

Rajasthan State Road Transport Corporation (RSRTC) respects the privacy of passengers, customers and visitors using its website, online reservation portal, mobile applications and other digital services.

This Privacy Policy explains how RSRTC collects, uses, processes, stores and protects personal information provided by users while accessing or using RSRTC digital services.

By accessing or using RSRTC's website or online services, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data in accordance with applicable laws.

1. Information We Collect

RSRTC may collect information necessary to provide bus reservation, ticketing and related services. Depending on the service used, this may include:

• Name of the passenger/user;
• Mobile number and email address;
• Age, gender and other passenger details, where required;
• Address and other contact information, where required;
• Journey, boarding, destination and seat details;
• Booking reference/PNR and ticket information;
• Cancellation, refund and transaction details;
• Payment status and transaction reference information;
• Login/account information;
• Customer complaints, feedback and correspondence; and
• Technical information such as IP address, browser/device information, access time, system logs and website usage information.

Payment information may be processed by authorized banks, payment gateways and payment service providers. RSRTC does not intend to store sensitive payment credentials such as card PIN, CVV or complete card details on its own systems where such information is processed directly by the authorized payment service provider.

2. Purpose of Collection and Use

RSRTC may collect and process personal data for legitimate and lawful purposes, including:

• Providing bus search, reservation and ticketing services;
• Creating and managing user accounts;
• Issuing and validating tickets;
• Processing payments, cancellations and refunds;
• Sending booking confirmations, e-tickets and journey-related notifications;
• Providing customer support and responding to complaints;
• Maintaining booking, financial, accounting and audit records;
• Preventing fraud, misuse and unauthorized access;
• Maintaining the security and reliability of RSRTC's website and digital systems;
• Improving website functionality, services and user experience;
• Conducting operational analysis and service improvement; and
• Complying with applicable laws, regulations, court orders and directions of competent authorities.

RSRTC will seek to limit collection and processing of personal data to what is reasonably necessary for the relevant purpose.

3. Sharing of Information

RSRTC does not sell or commercially trade users' personal information.

Personal data may be shared with authorized service providers and entities where necessary to provide RSRTC services or meet legal and operational requirements. These may include:

• Banks and payment gateways;
• Reservation and ticketing service providers;
• SMS, email and communication service providers;
• IT, cloud hosting and infrastructure providers;
• Cybersecurity and fraud-prevention service providers;
• Customer-support service providers; and
• Government departments, statutory authorities, courts or law-enforcement agencies where required or permitted by law.

RSRTC will take appropriate measures to ensure that authorized service providers process personal data only for legitimate and authorized purposes and maintain appropriate confidentiality and security safeguards.

4. Data Security

RSRTC takes reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, misuse or destruction.

Security measures may include encryption, secure communication protocols, access controls, authentication, monitoring, logging, vulnerability management, backups and other appropriate cybersecurity controls.

Online payment transactions are processed through authorized payment service providers using applicable security standards. RSRTC does not guarantee that any electronic system can be completely secure; however, reasonable measures are taken to protect personal information from foreseeable risks.

RSRTC also complies with applicable cybersecurity requirements and directions issued by competent authorities, including applicable requirements of the Indian Computer Emergency Response Team (CERT-In).

5. Cookies

RSRTC may use cookies and similar technologies to provide essential website functionality, maintain user sessions, remember preferences, improve website performance and understand website usage.

Cookies may also be used for security, analytics and service improvement purposes. Users may manage or disable cookies through their browser settings. However, disabling certain cookies may affect the availability or functionality of some RSRTC services.

Where required, RSRTC will provide appropriate information and controls regarding non-essential cookies in accordance with applicable law.

6. Data Retention

RSRTC will retain personal data only for as long as reasonably necessary for the purpose for which it was collected or as required or permitted by applicable law.

Certain records, including booking, ticketing, payment, refund, accounting, audit, security and transaction records, may be retained for the period required under applicable legal, regulatory, financial and operational requirements.

When personal data is no longer required and there is no legal obligation to retain it, RSRTC will take appropriate steps for deletion, anonymization or lawful disposal.

7. User Rights and Grievance Redressal

Subject to applicable law, users may have rights relating to their personal data, including the right to request access to information regarding processing, correction of inaccurate information, erasure where legally permitted, withdrawal of consent where processing is based on consent, and raising a grievance regarding the processing of personal data.

Requests may be subject to appropriate identity verification and applicable legal requirements. Certain information may be retained or processed where required or permitted by law.

RSRTC will endeavour to address privacy-related grievances within the time period prescribed under applicable law.

8. Third-Party Links and Services

The RSRTC website may contain links to third-party websites, applications or services. These third-party services may have their own privacy policies and terms of use.

RSRTC is not responsible for the privacy practices, content or security of third-party websites that are outside its control. Users are advised to review the privacy policies of such third parties before providing personal information.

9. Children's Personal Data

RSRTC may process information relating to children where such information is necessary for booking or providing transportation services.

Such processing will be carried out in accordance with the applicable provisions of the Digital Personal Data Protection Act, 2023 and rules made thereunder, including applicable requirements concerning children's personal data.

10. Personal Data Breach

In the event of a personal data breach, RSRTC will take appropriate steps to identify, contain and mitigate the incident and will comply with applicable legal and regulatory requirements concerning notification, reporting and remedial measures.

11. Changes to this Privacy Policy

RSRTC may update this Privacy Policy from time to time to reflect changes in applicable laws, regulations, technology, services or data-processing practices.

Any revised Privacy Policy will be published on the RSRTC website with the updated "Last Updated" date. Users are advised to periodically review this page for the latest version.

12. Applicable Law

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India, including the Digital Personal Data Protection Act, 2023, the rules made thereunder, and other applicable data protection, cybersecurity and information technology laws and regulations.

13. Contact Us

For questions or concerns regarding this Privacy Policy or the processing of personal data, please contact: