In short
- We collect only what the bank needs to issue and service your FASTag, and what we need to deliver it and contact you.
- We share it with State Bank of India to process your tag. We never sell it or use it for advertising.
- Please send a masked Aadhaar. We do not keep full Aadhaar numbers.
- We keep the record of your request for 2 years after it is done, the time within which a consumer complaint can be made, and then delete it.
- This website uses no cookies, no analytics and no advertising trackers.
- You can ask to see, correct or delete your data, or withdraw consent, on WhatsApp or by email.
01Who is responsible for your data
CareAll Digital Services, No. 51/72-74, First Floor, K.A.P Complex, Trivandrum Road, Palayamkottai, Tirunelveli – 627002, Tamil Nadu, decides how your personal data is used for our services.
Today we follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. The duties of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) apply to businesses from 13 May 2027. Under that Act we are the Data Fiduciary, and this policy is already written to meet it.
Once your details reach State Bank of India to issue or service your FASTag, SBI also handles them under its own privacy policy, as the bank that issues and runs your FASTag account.
02What we collect
| Data | Examples | Why we need it |
|---|---|---|
| Identity | Name, date of birth, photograph, identity document (masked Aadhaar, PAN, driving licence or passport) | The bank’s KYC for issuing a FASTag |
| Contact | Mobile number, email, delivery address | To link alerts to the tag, keep you updated, and deliver the tag |
| Vehicle | Vehicle number, RC details (chassis and engine numbers, class, make, model), vehicle and tag photos | Issuing the correct tag class, and the bank’s vehicle (KYV) checks |
| Payment | Amount, date, UPI or bank reference | Receipts, accounts, refunds |
| Messages | Your WhatsApp messages, calls and the documents you send | Handling your request and any complaint |
We do not ask for, and do not want, your UPI PIN, card number, CVV, banking passwords or payment OTPs. If an SBI or NHAI step sends a verification code to your mobile while we handle your request, we use it only for that step and do not keep it.
03Aadhaar
Please share a masked Aadhaar, which shows only the last four digits. You can download one from the official UIDAI website. We do not store full Aadhaar numbers. If you send an unmasked copy by mistake, we delete it once your request is done.
04How we use it
- to apply for, issue, deliver and service your SBI FASTag;
- to complete the KYC and vehicle checks the bank requires;
- to contact you about your request, a payment or a problem with your tag;
- to keep receipts and accounts as tax law requires;
- to handle complaints and prevent fraud, including misuse of your documents;
- to follow the law, for example a lawful request from the police or a court.
We do not sell your data, share it for advertising, or send you marketing messages unless you have asked for them. You can stop them at any time.
05Your consent
We use your data because you give it to us to get a service. That is your consent, and it covers only that purpose. Some records, such as receipts and accounts, we must keep by law even after you withdraw consent.
You can withdraw consent at any time by message or email, as easily as you gave it. We then stop using your data for anything that relies on consent. Withdrawal does not undo an application already submitted to the bank, and the bank keeps its own records under its policy.
07How long we keep it
| Record | How long |
|---|---|
| Copies of your documents and photos, and the chat about your request | 2 years after your request is completed, the time within which a consumer complaint can be made. Then deleted, unless a complaint or dispute is still open |
| Receipts, invoices and accounts | As long as tax law requires (currently up to 8 years) |
| Complaint records | 3 years after the complaint is closed |
Paper copies are returned to you or shredded. Digital copies are deleted from our phones, computers and email.
08How we protect it
- Only our staff who handle FASTag requests can see your documents, and only to do that work.
- Our phones and computers are locked with a password or PIN. Documents are not kept in public or shared links.
- This website is served over an encrypted (HTTPS) connection.
- If a breach puts your data at risk, we will tell you without delay, and report it to the authorities the law names, including the Data Protection Board of India once the DPDP Act applies.
09Your rights
You can already use these rights with us today. They become legal rights under the DPDP Act from 13 May 2027. You can:
- ask what data we hold about you and who we shared it with;
- have it corrected, completed or updated;
- have it deleted when it is no longer needed for your request or by law;
- withdraw your consent;
- name another person to exercise these rights if you die or cannot act yourself;
- complain to us, and, once the DPDP Act applies, to the Data Protection Board of India if our answer does not settle it.
To use any of these rights, message us on WhatsApp at +91 73737 10180 or email sbifastag2000@gmail.com. We may ask you to confirm who you are. We reply within 30 days.
10Children
Our services are for adults. We do not knowingly collect data from anyone under 18. If a vehicle is registered to a minor, a parent or legal guardian must apply on their behalf.
11This website: no cookies, no tracking
- This website sets no cookies and uses no analytics or advertising trackers.
- Text fonts are loaded from Google Fonts, so Google receives your device’s IP address when the page loads.
- Like any web server, our host keeps basic access logs (IP address, browser, pages requested) for security.
- The WhatsApp buttons open WhatsApp. What you send there is covered by WhatsApp’s own privacy policy as well as this one.
12Changes to this policy
If we change how we use your data, we will update this page and the date at the top. If a change affects data you have already given us, we will tell you before it applies.
13Contact and grievance officer
For privacy questions or complaints, contact our Grievance Officer, CareAll Digital Services:
We acknowledge complaints within 48 hours and resolve them within 30 days. See Complaints & Grievances for the full process.