What CarDekho holds on Indian residents
CarDekho typically holds the following data classes on Indian residents: phone, email. The exposure surface depends on how you came into contact with the platform, whether you signed up directly, were added by a third party, or had your details aggregated from another database.
Removal method, step by step
- Step 01Locate the public listing of your profile.
Search CarDekho for your phone number, email, or full name. Capture the URL and a screenshot. If you are running Vault.in, this is automated and the evidence is hash-stamped for you.
- Step 02Draft a DPDP Section 12 erasure notice.
Identify yourself with sufficient (but minimal) detail to verify the profile is yours. Cite Section 12 of the Digital Personal Data Protection Act, 2023, and Rule 14 of the DPDP Rules, 2025. Demand action within ninety days. Reference the captured URL and evidence.
Send to: [email protected] - Step 03Track the 90-day Rule 14 clock.
Set a calendar reminder for day thirty (polite follow-up), day sixty (formal escalation), and day ninety-one (DPB filing). Most reputable Indian fiduciaries act within thirty to sixty days. Some, including CarDekho, occasionally let it slide to the deadline.
- Step 04Verify removal and document the proof.
Re-check the original URL. If the page is gone, capture the 404 or replacement screenshot. Keep this for your records. About 28% of removals at CarDekho fail or reappear within ninety days; for those, escalate to the Data Protection Board under Section 27.
Sample DPDP Section 12 notice for CarDekho
To, The Grievance Officer / Data Protection Officer CarDekho [email protected] Subject: Notice of Erasure under Section 12, Digital Personal Data Protection Act, 2023. Dear Sir / Madam, I, [YOUR FULL NAME], write as the Data Principal in relation to personal data held about me on your platform. Acting under Section 12 of the Digital Personal Data Protection Act, 2023, read with Rule 14 of the DPDP Rules, 2025, I hereby request the erasure of the following personal data: 1. [Profile URL or record identifier] 2. Personal data exposed: phone, email. 3. Date captured: [DATE]. I do not consent to the continued processing of this data and withdraw any prior consent under Section 6(4). Please confirm completion within ninety (90) days as required by Rule 14. If you do not act within ninety days, I reserve my right under Section 27 to approach the Data Protection Board of India, and to seek penalties under Section 33 up to Rs 250,00,00,000. Sincerely, [YOUR NAME] Data Principal under DPDP Act, 2023.
When this becomes hard
- Vault.in handles all of the above automatically for CarDekho on the Personal plan onward.