Privacy Policy
Effective Date: July 29, 2025 Last Updated: July 29, 2025
Mandala Global LLC (“Company,” “we,” “our,” or “us”) operates mobile and web services for electric bicycles, including rentals and sales (the “Services”). This Privacy Policy explains what we collect, how we use and disclose information, and your choices.
Notice at Collection (California): We collect personal information, including precise geolocation of vehicles/bicycles for rentals and, for purchased vehicles/bicycles, only with your express consent (see Section 3). We do not sell personal information and do not share personal information for cross-context behavioral advertising as defined by the CPRA.
Information We Collect
Account & Identity. Name, email, mobile number, mailing address, date of birth, government ID where required by law or program policy.
Payment & Transactions. Payment method tokens from our PCI-compliant processor, billing address, invoices, deposits/refunds, chargeback data.
Device & Usage. Device identifiers, IP address, app version, logs, diagnostics, and in-app events.
Vehicle/Bicycle & Operations. Vehicle/bicycle ID/VIN/IMEI, battery/health metrics, lock/unlock events, maintenance/incident logs.
Location (GPS).
Rentals: Real-time and historical vehicle/bicycle location to operate the rental, prevent loss/theft, and enforce payment terms (including remote immobilization consistent with safety controls).
Purchased Vehicles/Bicycles: The GPS module is enabled by default; we will not access your vehicle/bicycle’s location unless you give express, revocable consent in the App (except for theft recovery you initiate or where required by law).
Communications. Support emails/chats and, where permitted, call recordings; SMS logs for service notices (see Section 6).
How We Use Information
Provide, secure, and improve the Services (onboarding, identity checks, plan management, diagnostics).
Operate rentals (availability, loss/theft detection and recovery, audits).
Enforce agreements (fees, deposits, and—if materially overdue—safe remote immobilization; see Section 3).
Process payments and manage billing.
Provide customer support and safety measures.
Comply with legal obligations (tax, accounting, lawful requests).
Conduct marketing with consent (you may opt out at any time).
Location & Immobilization Safety
No-motion lock. We do not immobilize a vehicle/bicycle while it is moving or when doing so would likely create an unsafe condition.
Advance notices. Before immobilization for non-payment, we send at least two payment reminders and a final 24-hour notice via in-app, SMS, and email.
Emergency override. In emergencies or safety risks, we may defer or reverse immobilization.
Purchased vehicles/bicycles. We only access GPS with your consent (except theft recovery you request or where legally required). You may revoke consent in the App; some support features may be limited.
Disclosure of Information
We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose information to:
Service Providers / Processors (cloud hosting, analytics, payment, SMS/email, customer support) under binding contracts.
Authorized partners (e.g., service centers) to fulfill support/warranty work.
Law enforcement/regulators when required, or to protect rights, safety, or property.
Corporate transactions (merger/acquisition) subject to this Policy.
Retention
We retain data only as long as needed for the purposes above and legal requirements. Typical periods:
Account & transactional records: up to 7 years (tax/claims).
Usage logs: up to 2 years.
GPS logs: 1 year (365 days), longer only for investigations, disputes, or legal obligations. We securely delete or de-identify data when no longer required.
Communications (SMS/Email/In-App)
By providing your phone/email, you consent to receive service communications, including payment reminders and safety notices. You may opt out of marketing SMS/email (reply STOP for SMS); service messages (e.g., safety, billing) are integral to the Services and may continue as permitted by law.
Your Rights & Choices
Access, correction, deletion. Request access/correction/deletion subject to legal and contractual obligations.
Opt-outs. Opt out of marketing; adjust app permissions (some features may not work without them).
Appeals. If we deny a request, you may appeal by writing to business@hmpbikes.com.
Security
We use administrative, technical, and physical safeguards (e.g., access controls, encryption in transit/at rest where appropriate, monitoring). No method is 100% secure; protect your credentials.
Children
The Services are not intended for children under 13 (or 16 where applicable). We do not knowingly collect such data.
International Users
Your data may be processed in the U.S. and elsewhere. We implement appropriate safeguards where required.
California Privacy Disclosures (CCPA/CPRA)
See the California Privacy Notice & Disclosure Table below for categories, purposes, retention, and disclosures. We do not sell or share personal information for cross-context behavioral advertising. We process precise geolocation (considered Sensitive Personal Information) only for limited, permitted purposes (service delivery, security, fraud prevention, short-term transient use), and we do not use it to infer characteristics. California residents may exercise rights to know/access, delete, correct, and opt out of sale/share (not applicable here), and limit the use of Sensitive Personal Information where applicable.
How to Exercise Rights (California):
Email business@hmpbikes.com with subject “California Privacy Request” (and specify: Access / Delete / Correct / Limit SPI / Appeal). We will verify your request (and your agent, if any) as required by law.
Changes
We may update this Policy; material changes will be notified in-App or via email with the new effective date.
Contact
Mandala Global LLC
Address: 261 6th Street, San Francisco, CA 94103, USA Email: business@hmpbikes.com
Phone: +1 (916) 926-3649