1. Scope and Data Fiduciary
This Privacy Policy explains how ConsoleWale collects, uses, stores, shares, protects, and deletes personal data when you use the website, create an account, submit a PS5 rental booking, pay, receive delivery or pickup, contact support, or otherwise interact with us.
- ConsoleWale determines the purposes and means of processing personal data for this rental service and acts as the data fiduciary or equivalent controller where applicable.
- This policy applies to digital personal data collected online and to offline information that is later digitised for booking, payment, support, security, accounting, or legal purposes.
- This policy should be read with our Terms & Conditions. Booking-specific notices, invoices, payment pages, emails, or handover records may provide additional details for a specific transaction.
- This notice is provided in English. Contact us if you need assistance understanding this notice in Hindi or another language listed in the Eighth Schedule to the Constitution of India.
2. Personal Data We Collect
- Account data: full name, email address, mobile number, WhatsApp number, password hash, email verification status, session records, and account timestamps.
- Booking data: selected rental plan, booking dates and times, delivery or pickup preference, address, map pin, latitude and longitude, preferred games, controller count, notes, coupon codes, booking status, and rental history.
- Payment and invoice data: payment method, payment status, provider references, Cashfree order identifiers, invoice number, amount due, amount paid, line items, refund or settlement status, and payment-related timestamps. We do not store full payment credentials.
- Identity and handover data: confirmation that valid ID proof is available, handover records, inspection notes, photos or videos where reasonably needed, and ID details if collected for security, fraud prevention, legal claims, or compliance.
- Support and communication data: calls, WhatsApp messages, emails, SMS, forms, complaints, feedback, delivery coordination, dispute details, and admin notes.
- Technical data: IP address, device/browser information, cookies or similar identifiers, analytics events, page visits, referrers, marketing attribution, error logs, security logs, and approximate location inferred from usage.
- Return, damage, and dispute data: return timing, equipment condition, missing items, repair estimates, photos, videos, payment disputes, chargebacks, deductions, and claim records.
3. How We Collect Data
- Directly from you when you register, log in, book, pay, call, message, email, request delivery, share ID proof, return equipment, or raise a complaint.
- Automatically through the website, cookies, payment callbacks, analytics tags, security logs, and browser/device signals.
- From service providers such as payment gateways, email providers, hosting/database providers, maps/geocoding providers, marketing tools, and support/communication channels.
- From operational records created by our staff during booking confirmation, handover, delivery, pickup, inspection, repair, refund, and dispute handling.
4. Why We Process Personal Data
- To create and secure customer accounts, verify email addresses, authenticate sessions, prevent unauthorised access, and support account recovery.
- To check availability, allocate PS5 inventory, price the rental, apply coupons, create bookings, issue invoices, process payments, coordinate delivery or pickup, and manage returns.
- To verify identity, collect or refund security deposits, prevent fraud, assess rental risk, protect equipment, investigate loss or damage, and resolve disputes.
- To provide support, send transactional messages, maintain service records, improve the website, debug technical issues, monitor performance, and protect the service from abuse.
- To comply with accounting, tax, consumer protection, data protection, payment, law-enforcement, court, regulator, and other legal obligations.
- To send offers or marketing updates where permitted by law and your preferences. You can opt out of marketing, but transactional messages may still be sent.
Where consent is the basis for processing, your consent should be free, specific, informed, unconditional, and unambiguous. Certain processing may also be required for booking fulfilment, legal compliance, fraud prevention, claims, or other permitted uses under applicable law.
5. Payments and Financial Data
- Online checkout is handled by third-party payment providers such as Cashfree. Their checkout page or SDK may collect payment credentials directly from you.
- We receive payment status, order identifiers, reference numbers, amounts, currency, timestamps, and webhook updates needed to confirm or reconcile payment.
- Do not share CVV, OTP, UPI PIN, card PIN, netbanking password, wallet password, or similar credentials with ConsoleWale staff. We will not ask for them.
- Refunds, chargebacks, failed payments, expired sessions, duplicate payments, and payment disputes may require us to retain payment records and communicate with the payment provider, bank, or competent authority.
6. Delivery Location and Maps
- If you choose delivery, we collect address, landmark, map pin, latitude, longitude, distance estimate, and related notes needed to decide serviceability, calculate charges, and complete delivery or pickup.
- Maps, places search, geocoding, and distance tools may be provided by third-party providers such as Google Maps. Their processing may be governed by their own terms and privacy notices.
- Incorrect address, wrong pin, inaccessible location, or customer unavailability may affect booking confirmation, delivery timing, charges, cancellation, or refund eligibility.
7. Cookies, Analytics, and Marketing
- We may use cookies, local storage, pixels, tags, and similar technologies for login sessions, booking drafts, payment flow, security, analytics, performance, conversion tracking, and marketing attribution.
- Analytics and marketing providers may process page views, events such as booking intent or checkout start, browser/device information, referrer, campaign data, and approximate location.
- You can control many cookies through your browser settings. Blocking necessary cookies may affect login, booking, payment, or saved draft functionality.
- Where marketing messages are used, you can opt out through the message mechanism or by contacting us. Operational and legal notices may still be sent.
8. Sharing and Processors
- We do not sell personal data.
- We may share personal data with payment gateways, banks, hosting/database providers, email providers, maps/geocoding providers, analytics/marketing providers, delivery/support tools, repair/service providers, insurers, professional advisers, auditors, and technology vendors.
- We may share information with police, courts, regulators, government authorities, consumer forums, payment networks, banks, or legal representatives where required or permitted by law, to enforce rights, prevent fraud, recover equipment, or respond to lawful requests.
- If the business is restructured, sold, merged, transferred, or financed, personal data may be shared as needed for diligence and continuity, subject to appropriate confidentiality and legal safeguards.
- Service providers should process data only as needed to provide services to us and must use reasonable security safeguards appropriate to their role.
9. Retention and Deletion
- We keep personal data only as long as reasonably needed for the purposes described in this policy, unless a longer period is required or permitted by law.
- Account and booking records may be kept while your account is active and afterwards for accounting, tax, warranty, security, fraud prevention, dispute, equipment recovery, and legal limitation periods.
- Payment, invoice, refund, and tax records may be retained for statutory accounting and compliance periods.
- Support, handover, damage, inspection, and dispute records may be retained until the matter is resolved and for any limitation period needed to defend or enforce claims.
- When data is no longer required, we will delete, anonymise, aggregate, or archive it in a restricted manner where reasonably practicable.
10. Security Safeguards
- We use reasonable technical and organisational safeguards to protect personal data, including access controls, password hashing, signed HTTP-only session cookies, server-side service-role secrets, payment-provider isolation, logging, and operational controls.
- No online service can guarantee absolute security. You should keep your password private, avoid sharing OTPs or payment credentials, use secure devices, and contact us immediately if you suspect misuse.
- Staff and service providers should access personal data only where needed for booking, payment, support, delivery, security, accounting, or legal purposes.
- If we become aware of a personal data breach, we will assess it and notify affected users and/or competent authorities where required by applicable law.
11. Your Privacy Rights
- You may request access to information about your personal data and how it is processed, subject to identity verification and legal limits.
- You may request correction of inaccurate or incomplete personal data.
- You may request deletion or erasure of personal data where continued retention is not required for booking completion, accounting, security, fraud prevention, legal claims, or compliance.
- Where processing is based on consent, you may withdraw consent. Withdrawal may affect account access, booking fulfilment, delivery, support, refund processing, or legal record keeping where the data is still needed.
- You may raise a grievance or complaint using the contact details below. If your grievance is not resolved as required by applicable law, you may have the right to approach the relevant data protection authority or board.
- You may nominate another person to exercise applicable rights in case of death or incapacity where such right is recognised by applicable law.
12. Children and Minors
- The rental service is intended for adults. Customers must be at least 18 years old to create a booking or accept handover.
- If a PS5 is used by children during a family event or household rental, the adult customer is responsible for supervision, age-appropriate games, parental controls, account access, safety, and compliance with these terms.
- We do not knowingly create rental contracts directly with children. If you believe a child has provided personal data without appropriate adult involvement, contact us so we can review and take appropriate action.
13. Storage, Transfers, and Third-Party Locations
- Our website, database, payment, email, analytics, maps, and support providers may store or process data in India or other countries, depending on provider infrastructure and configuration.
- Where cross-border transfer rules apply, we will take steps reasonably required by applicable law and provider contracts.
- Third-party services may have their own privacy notices. You should review those notices when interacting directly with payment pages, map tools, email providers, app stores, or platform accounts.
ConsoleWalePS5 rental service