Privacy Policy

4. Cookies and similar storage

Essential (always on). Your login is kept in the page’s memory, not in a cookie. The site stores a few small items in your browser that it needs to work: your cookie choice (for 12 months), the one-time Thank You page token for the current tab, and the marketing source of your visit for the current tab session (for example “Google” or “Facebook”, no personal data).

Optional (only with your consent). Google Analytics sets the first-party cookies _gaand _ga_<ID>; Google Ads may set _gcl_au; the Meta Pixel sets _fbp(and _fbc when you arrive from a Facebook or Instagram link). They identify a browser, not a person, and are kept for the periods set by Google and Meta (up to two years for _ga, about three months for _gcl_au and _fbp). Refusing a category removes its cookies from our site.

5. Analytics and advertising measurement

With your consent, on our public website pages (nammagrab.com) we use:

• Google Analytics (GA4), loaded directly and through Google Tag Manager, provided by Google (Analytics category);
• Google Ads conversion tracking (account AW-18507566280), through Google Tag Manager, to measure how many enquiries come from our Google ads (Advertising category);
• Meta Pixel, provided by Meta Platforms (Facebook and Instagram), to measure how well our advertisements work (Advertising category).

No measurement cookies before you choose. When you first visit, a banner asks for your choice: “Accept all”, “Reject non-essential”, or “Manage” to choose Analytics and Advertising separately. Google’s tools follow Google Consent Mode, set to “denied” by default. Until you accept Analytics, Google Analytics runs only in its cookieless mode: it sets no cookie and sends no identifier, only an anonymous signal that a page was viewed or an enquiry was submitted (with the usual technical details of a web request, and with ad click codes removed from the page address), which Google uses for statistical modelling. Google Tag Manager, Google Ads conversion tracking and the Meta Pixel are not loaded at all until you accept their category.

What is sent: page views of public pages, and one “enquiry submitted” event when you raise a new enquiry, with the trip type and vehicle category only. Together with these, the tools receive the usual technical details of a web request: the page address, your browser and device type, and your IP address.

Enquiry confirmation from our server to Meta. When you raise a new enquiry on our website, our server may tell Meta (Meta’s Conversions API) that an enquiry was made, so that Meta counts it once for our advertisements: a random event number, the time, the Thank You page address, your browser type and your IP address. Only if you accepted Advertising cookies does it also include the Meta browser and click identifiers (_fbp, _fbc).

What is never sent: your phone number, name, OTP, KYC documents, enquiry reference, addresses or the details of your trip are never sent to Google or Meta. We do not use Meta’s advanced matching or Google’s automatic collection of user-provided data.

Pages that are never measured: the Partner pages (/partner), the Super Admin panel (/admin) and your own enquiry pages (/track), which are behind OTP login. The OTP login itself runs in a dialog and sends nothing to these tools.

Your choices: you can change or withdraw your consent at any time through “Cookie settings” at the bottom of every page. You can also block or delete cookies in your browser settings, use Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout), manage Google ad personalisation at adssettings.google.com, and manage how Meta uses this information for ads in your Facebook or Instagram Ad preferences (Settings › Accounts Centre › Ad preferences). Refusing them does not affect raising or tracking an enquiry.

7. Services we plan to introduce

App notifications (planned). The Namma Grab apps will use Google Firebase Cloud Messaging to deliver notifications about your enquiries or leads. For this, your device receives a notification token that we store with your account; the notification content is about your own enquiries or leads.

Partner payments (planned). Partner subscription payments will be processed by Razorpay. You enter your payment details on Razorpay’s secure checkout; we receive the payment reference and status, never your full card or bank details. Razorpay’s privacy policy applies to its processing.

We will update this policy before either service goes live if it works differently from what is described here.

8. How long we keep data

• OTP records: 7 days.
• Login sessions: up to 90 days after they expire or are ended.
• Partner on-duty location records: 90 days.
• Records of messages sent to you (SMS, WhatsApp): message content and address up to 180 days.
• Account, enquiry, lead and partner verification records: while your account is active and afterwards for as long as needed to resolve disputes, prevent fraud and meet legal obligations.
• Security and audit logs: at least 3 years.
• Your cookie choice: 12 months in your browser, then we ask again.
• Analytics and advertising data held by Google and Meta: according to the retention settings of our accounts with them and their own policies.