Privacy Policy | Online Challan Pay

This Privacy Policy explains how MZT COMMERCE ("we", "us"), operating Online Challan Pay at onlinechallanpay.com.in, collects, uses, shares and protects your personal data. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and follow the Information Technology Act, 2000 and rules made under it.

1. Data we collect

Details you enter: vehicle registration number, mobile number, and for enquiries your name, email and message.
Verification data: a one-time password (stored only in encrypted, hashed form) and the time it was requested and used.
Challan data: challan number, offence, date, place, amount and status, fetched from authorised third-party data providers for the vehicle you enter.
Order and payment data: order ID, amounts, payment status and the reference number from the payment gateway. We do not receive or store your card number, CVV, UPI PIN or net-banking password.
Account data: if you create an account (automatically after OTP), your vehicles, saved challan records, payment history, support tickets and notification preferences. Passwords are stored only as secure hashes.
Technical data: IP address, browser type and the date and time of requests, used for security, fraud prevention and to keep a record of consent.

2. Why we use it

To verify your request with OTP and fetch challans for your vehicle.
To process your payment and settle the selected challans with the relevant authority.
To send receipts and status updates by SMS, WhatsApp, email or call.
To save challan records for your vehicles in your account, so you can see them again without a new search.
To remind you by WhatsApp or SMS about pending challans you have not paid yet. You can turn reminders off any time in Profile → Notifications.
To answer your enquiries, complaints and refund requests.
To prevent fraud and misuse, and to meet legal, tax and accounting obligations.

We process your data on the basis of the consent you give on the check form and for legitimate uses permitted by law, such as complying with tax laws. We do not use your data for advertising and we never sell it.

3. Who we share it with

Challan data providers authorised to access e-challan records, to fetch challans for your vehicle.
SMS / WhatsApp providers, to deliver OTPs and updates.
Payment gateway (regulated by the Reserve Bank of India), to process payments and refunds.
Traffic authorities or courts, only as needed to settle your challans.
Government or law-enforcement agencies, when required by law or a valid order.

Each processor receives only the data it needs and is bound to protect it.

4. How long we keep it

OTP records and challan check logs: up to 180 days, then deleted.
Saved challan records and vehicle links: while your account is active; removed from your account when you remove the vehicle or delete your account.
Support tickets: up to 180 days after closure.
Orders, invoices and payment records: for the period required under GST and income-tax laws (generally up to 8 years).

5. Your rights

Under the DPDP Act you can:

ask for a summary of the personal data we hold about you and how it is used;
ask us to correct, complete or update your data;
withdraw consent and ask us to erase your data, unless we must keep it by law;
nominate another person to exercise your rights in case of death or incapacity;
raise a grievance with us, and if not satisfied, with the Data Protection Board of India.

You can update your details, change notification preferences, remove vehicles or delete your account yourself from My account → Profile. To use any other right, email [email protected] from or mentioning the mobile number you used. We may verify your identity before acting.

6. Cookies

We use an essential session cookie to keep your request secure, and, only if you tick "Keep me signed in", a login cookie that keeps you signed in on that device for up to 30 days. We do not use advertising or cross-site tracking cookies. If we add analytics in future, we will update this policy.

7. Security

We use HTTPS encryption, hashed OTPs, access controls, request limits and logging to protect your data. No system is completely secure, but we take reasonable security practices as required under the IT Act and will notify you and the authorities of a personal data breach as required by law.

8. Children

This service is meant for vehicle owners and authorised users aged 18 or above. We do not knowingly collect data of children.

9. Changes

We may update this policy from time to time. The latest version will always be on this page with the "last updated" date.

10. Grievance Officer

Grievance Officer, MZT COMMERCE
House No. 09, Narayan Nagar, Bichpuri Road, Bodla, Agra – 282007, Uttar Pradesh, India
Email: [email protected] · Phone: +91 92868 66883

We acknowledge complaints within 24 hours and aim to resolve them within 15 days. See Grievance Redressal.