Privacy Policy - globalgas.co.in

JMS Global Gas India Limited

Last Updated: 8 June 2026

This Privacy Policy explains how JMS Global Gas India Limited (“Company”, “we”, “us” or “our”) collects, uses, shares, stores and protects personal data, and the rights available to individuals under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws of India. We act as a Data Fiduciary in respect of the personal data we determine the purpose and means of processing.

Applicability and Scope
1. This Privacy Policy applies to our website, our mobile application made available through the Google Play Store and other application stores, our enquiry forms, dealership and distributorship application forms, customer support channels and other digital platforms operated by the Company (collectively, the “Platform”).
2. It applies to all personal data collected through the Platform, in the same manner across the website, the mobile application and other channels.
3. By accessing the Platform or submitting any information, you confirm that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Platform or submit any information to us.
Platform Intended for Adults Only
1. The Platform is intended for, and made available solely to, adults who are eighteen (18) years of age or older. It is not designed for, directed at, or intended to be used by any person under the age of eighteen (18).
2. By accessing the Platform or submitting any information, you represent and confirm that you are eighteen (18) years of age or older and that you are competent to contract under applicable law.
3. We do not knowingly collect or process the personal data of any individual under the age of eighteen (18). We do not undertake any tracking, behavioural monitoring or targeted advertising directed at children.
4. Under the DPDP Act, the personal data of a child (a person below eighteen years of age) may be processed only with verifiable consent of a parent or lawful guardian. As the Platform is meant only for adults, we do not seek to process children’s data.
5. If we become aware, or are notified, that the personal data of a person under eighteen (18) has been provided through the Platform, we will take steps to delete such data promptly. If you believe that a child’s personal data may have been submitted to us, please notify our Grievance Officer using the contact details set out in this Policy, and we will remove it.
Information We Collect
1. Personal and business information that you voluntarily provide, including your name, mobile number, email address, postal address, city and state, business details, proposed location, investment capacity, customer, dealer or distributor enquiry details, GST and PAN details, and any other information you choose to submit.
2. KYC documents and identity information (such as government-issued identity documents) submitted for identity verification, which are collected and processed through our third-party KYC service provider as described in the “Third-Party Service Providers” section below.
3. Technical and usage information collected automatically, such as IP address, device details, browser type, cookies, usage logs and interaction data, used for security, analytics and improvement of the Platform.
Purposes for Which We Process Personal Data
1. Responding to enquiries and providing customer support.
2. Evaluating dealership and distributorship applications, including eligibility assessment, document verification, site feasibility, regulatory checks and commercial evaluation.
3. Carrying out KYC verification, business due diligence, fraud prevention and safety checks.
4. Communicating with you regarding our services, your applications, documentation, approvals and operational requirements.
5. Maintaining internal records and complying with our legal, regulatory, tax and statutory obligations, and establishing, exercising or defending legal claims.
6. We process personal data only for lawful purposes and limit our processing to what is necessary for the purposes described above.
Legal Basis and Consent
1. We process personal data on the basis of your consent and, where applicable, for legitimate uses permitted under the DPDP Act, such as where you voluntarily provide information for a specified purpose, or where processing is necessary to comply with law.
2. By submitting information through the Platform, you consent to the collection, storage, verification, processing and use of such information for the purposes described in this Policy.
3. Where processing is based on consent, you may withdraw your consent at any time, and withdrawing consent shall be as easy as giving it. You can withdraw consent by contacting our Grievance Officer using the details in this Policy. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, and may affect our ability to process your requests, applications or provide certain services.
Third-Party Service Providers and Data Processors
1. To provide our services, we engage reputable third-party service providers who process certain information on our behalf, as Data Processors. In particular, KYC documents, identity verification data and related information are collected, verified, processed and stored by our third-party KYC and digital documentation service provider, Digiotech Solutions Private Limited (operating as “Digio”), through its own platform, systems and infrastructure.
2. Where KYC documents and identity information are submitted, collected or verified through Digio, such collection, verification, storage, retention, archival and processing are carried out on Digio’s platform and are governed by Digio’s own terms of service and privacy policy. Digio is responsible, as the entity operating its platform, for maintaining appropriate administrative, physical and technical safeguards in respect of the data processed and stored on its systems, and for the security and integrity of the data residing within its environment. We do not control, and are not responsible for, the internal systems, security architecture or data centres of Digio. We remain responsible for taking reasonable security safeguards in respect of personal data within our own control.
3. Digio’s services may further depend on independent third parties, including the Unique Identification Authority of India (UIDAI), Certifying Authorities and e-Sign service providers, the National Payments Corporation of India (NPCI), banks, networks and device manufacturers. We are not responsible for the acts, omissions, performance, downtime or availability of any such independent third party.
4. We advise you to review Digio’s privacy policy, available at https://www.digio.in/privacy-policy/, to understand how your KYC and identity data is collected, used, retained and protected by Digio in its capacity as the operator of the KYC platform.
5. By submitting KYC documents or identity information through the Platform, you acknowledge and consent that such information is collected, verified, stored and processed by Digio on its own platform, that you have been given the opportunity to review Digio’s terms of service and privacy policy, and that operational control over the technical environment in which such data is processed and stored rests with Digio.
How We Share Information
1. We may share personal data with authorised employees, officers, consultants, dealers, distributors, logistics partners, technology vendors, payment and service providers, legal advisers, auditors and insurers, strictly on a need-to-know basis and for the purposes described in this Policy.
2. We may disclose personal data to statutory authorities, regulators, law enforcement agencies, courts, tribunals or government bodies where required under law or to protect our legal rights.
3. KYC documents and identity information are processed by Digio as our Data Processor for the purpose of identity verification and KYC compliance, in accordance with Digio’s privacy policy.
4. We do not sell personal data.
Hosting and Cloud Infrastructure
1. Our mobile application and associated digital platforms are hosted on cloud infrastructure provided by Amazon Web Services (“AWS”), a third-party cloud infrastructure provider that supplies the underlying computing, storage and network infrastructure on which the application operates.
2. AWS operates on a “shared responsibility” model, under which AWS is responsible for the security of the underlying cloud infrastructure (the security “of” the cloud), including the physical integrity, availability and resilience of its data centres, while configuration and use of that infrastructure is managed at the application level. We do not own or operate, and are not responsible for, the physical data centres or the underlying cloud infrastructure operated by AWS. AWS’s handling of infrastructure-level data is governed by AWS’s own privacy notice and terms, available on the AWS website.
3. KYC and identity data processed through Digio is stored within the territory of India in accordance with Digio’s representations to us.
Data Security
1. We take reasonable security practices and procedures to protect personal data within our control against unauthorised access, misuse, alteration, disclosure or destruction.
2. No digital platform or internet-based transmission can be guaranteed to be completely secure. Information submitted, transmitted or stored through third-party platforms and infrastructure (including Digio and AWS) is also subject to the security practices and controls of those third parties.
Personal Data Breach Notification
1. In the event of a personal data breach affecting your personal data, we will, in accordance with the DPDP Act, intimate the Data Protection Board of India and each affected individual without undue delay, providing the information required under applicable law, including the nature of the breach, its likely consequences and the measures taken or proposed.
2. Where a breach occurs within the systems or infrastructure of a Data Processor or cloud infrastructure provider, we will coordinate with that provider for prompt investigation and remediation, without prejudice to our own statutory notification obligations.
Retention of Data
1. We retain personal data only for as long as necessary for the purposes for which it was collected, including for business records, legal compliance, dispute resolution, audit, tax, regulatory and contractual purposes, or as required under applicable law.
2. We may retain limited records even after the closure or rejection of an enquiry or application where required for legal, compliance or legitimate business purposes. Where retention is no longer necessary and not required by law, we will erase the personal data.
3. KYC data processed through Digio is retained, archived and purged in accordance with Digio’s data retention practices and applicable law.
Your Rights
1. Subject to applicable law, you have the right to access information about the personal data we process about you and a summary of our processing activities.
2. You have the right to correction, completion, updating and erasure of your personal data, in accordance with applicable law and subject to any legal retention requirements.
3. Where processing is based on consent, you have the right to withdraw your consent at any time.
4. You have the right to grievance redressal in respect of the processing of your personal data, by contacting our Grievance Officer.
5. You have the right to nominate one or more individuals to exercise your rights under the DPDP Act in the event of your death or incapacity.
6. To exercise any of these rights, please contact our Grievance Officer using the details set out in this Policy. We may need to verify your identity before acting on a request.
Cookies and Analytics
1. Our website uses cookies and similar technologies to enable basic functionality, remember preferences, enhance security and analyse how the website is used. This section applies to our website only; our mobile application does not use website cookies, though it may collect technical and usage information as described in this Policy.
2. Our website uses Google Site Kit, which integrates Google services including Google Analytics. These services may set cookies and collect information such as your IP address, device and browser details, pages visited and interactions with the website, in order to provide traffic and usage analytics. This information is processed by Google in accordance with Google’s privacy policy, available at https://policies.google.com/privacy.
3. You can manage or disable cookies through your browser settings, and you can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. Disabling cookies may affect certain features of the website.
Accuracy of Information
1. You are responsible for ensuring that the information you submit to us is true, accurate, complete and up to date.
2. We shall not be responsible for consequences arising from inaccurate, incomplete, false or outdated information provided by you.
Use for Dealership and Distributor Applications
1. Information submitted for dealership, distributorship, Auto LPG or CNG station, bottling plant support or other business proposals may be used for eligibility assessment, document verification, site feasibility, regulatory checks, commercial evaluation and execution of definitive agreements.
2. Submission of information does not create any assured right to a dealership, distributorship, appointment or business relationship.
Third-Party Links
1. The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of such third-party platforms, except in respect of our own obligations as a Data Fiduciary.
2. We advise you to review the privacy policies of such third-party websites before sharing information with them.
Limitation of Liability
1. We take reasonable security practices and procedures to protect personal data within our own control. However, to the maximum extent permitted under applicable law, we shall not be liable for any loss, damage, unauthorised access, disclosure, corruption or compromise of data that occurs within the systems, platforms or infrastructure of third-party service providers, Data Processors or cloud infrastructure providers (including Digio and AWS), where such loss or compromise arises from the acts, omissions, security failures or breaches of such third parties and is not attributable to our own failure to take reasonable security safeguards.
2. To the maximum extent permitted under applicable law, we shall not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, profits or revenue, arising out of or in connection with the use of the Platform or the services of third-party providers.
3. Assumption of risk in respect of third-party platforms. You acknowledge that information submitted, transmitted, processed or stored through third-party platforms and infrastructure (including Digio and AWS) is subject to the security practices, systems and controls of those third parties. To the maximum extent permitted under applicable law, you assume the risks inherent in the use of such third-party platforms, save in respect of any liability arising from our own failure to take reasonable security safeguards.
4. No warranty in respect of third-party systems. Services, platforms and infrastructure operated by third-party service providers, Data Processors and cloud infrastructure providers are made available on an “as is” and “as available” basis. To the maximum extent permitted under applicable law, we make no representation or warranty in respect of the security, availability, uptime, accuracy or performance of any third-party platform or infrastructure not within our own control.
5. Events beyond control. To the maximum extent permitted under applicable law, we shall not be liable for any failure, delay, disruption, loss or compromise of data caused by events beyond our reasonable control, including any failure, outage, breach or security incident occurring within the systems or infrastructure of a third-party service provider, Data Processor or cloud infrastructure provider, acts of God, network or communication failures, or any order of any governmental, statutory or regulatory authority.
6. Indemnity by user. You agree to indemnify and hold the Company, its directors, officers and employees harmless from and against any loss, claim, liability, cost or expense arising from your submission of inaccurate, incomplete, false or outdated information, your misuse of the Platform, or your breach of this Policy or of any applicable law.
7. Nothing in this Policy shall operate to exclude or limit any liability or obligation that cannot be excluded or limited under applicable law, including our non-delegable obligations as a Data Fiduciary under the DPDP Act. The allocation of responsibility described above operates without prejudice to our rights of recourse and indemnity against our third-party service providers and Data Processors.
Grievance Redressal
1. If you have any privacy-related query, correction request, grievance or wish to withdraw consent, you may contact our Grievance Officer. We will respond to grievances within the timelines prescribed under applicable law, and in any case within ninety (90) days of receipt.

Grievance Officer / Contact Person: Inderjeet Sha

Email: support@globalgas.co.in

Phone: 9266310030

Address: 2-A/3, Second Floor, Front Side, Asaf Ali Road, Darya Ganj, Central Delhi, New Delhi, Delhi – 110002

You may also escalate your grievance to the Data Protection Board of India in accordance with the DPDP Act, after exhausting our grievance redressal mechanism.

Changes to this Privacy Policy
1. We may amend or update this Privacy Policy from time to time. Updated versions will be posted on the Platform with a revised effective date, and your continued use of the Platform after such posting constitutes acceptance of the revised Policy.
Governing Law and Jurisdiction
1. This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and other applicable laws.
2. Any dispute shall be subject to the jurisdiction of the competent courts at New Delhi, unless otherwise agreed in writing.
Severability and Survival
1. If any provision of this Policy is held to be invalid, unenforceable or unlawful by a court or authority of competent jurisdiction, that provision shall be severed and the remaining provisions shall continue in full force and effect. Each provision shall be enforced to the maximum extent permitted under applicable law, and where it cannot be so enforced, it shall be read down to the minimum extent necessary to render it valid and enforceable.
2. The provisions relating to third-party service providers and Data Processors, hosting and cloud infrastructure, limitation of liability, assumption of risk, disclaimers and indemnity shall survive any termination of your use of the Platform.