Privacy Policy

Last updated: [date] · Governed by the Digital Personal Data Protection Act, 2023 · Data Fiduciary: [Registered entity name]

Before anything else: KredExperts is a loan advisory and sourcing platform. We are not a bank or an NBFC. When you apply through us, your data is shared with the lenders you choose, and each of those lenders becomes an independent controller of that data under its own privacy policy.

1. Who we are

[Registered entity name], operating as KredExperts, with its registered office at [registered address], CIN [CIN], is the Data Fiduciary responsible for the personal data described in this policy. Contact details for our Grievance Officer are in section 10 and on the contact page.

2. What we collect

2.1 Information you give us

• Identity and contact details — name, mobile number, email address, city.
• Financial details — required loan amount, monthly income, existing EMI obligations, employment or business type.
• Where you proceed to an application: PAN, Aadhaar (where lawfully required by the lender), bank statements, payslips, ITRs, financial statements and property or asset documents.
• Anything else you choose to tell us in a free-text field or on a call.

2.2 Information collected automatically

• Device and browser type, IP address, and pages visited on this site.
• Cookies and similar technologies — see section 7.

2.3 Information from third parties

• Credit information from credit bureaus, only where you have specifically authorised it.
• Status updates from lenders about an application you have made through us.

3. Why we process it, and on what basis

Under the DPDP Act, 2023, we process your personal data on the basis of the consent you give when you submit an enquiry, and for the legitimate uses the Act permits. Specifically:

• To assess indicative eligibility — reading your profile against our lender panel's published and observed criteria before any formal application is made.
• To source and submit an application — sharing your documents with the specific lender or lenders you select.
• To communicate with you — about your enquiry, your application status, and requests we receive from a lender.
• To meet legal and regulatory obligations — including record-keeping and responses to lawful requests from authorities.
• To improve our service — using aggregated, de-identified data.

We do not sell your personal data. We do not share it with lenders you have not selected.

4. Who we share it with

• Lenders — banks, NBFCs and housing finance companies on our panel, limited to those you choose to apply through. Each processes your data under its own privacy policy as an independent controller.
• Credit bureaus — only where you have authorised a credit check.
• Service providers — hosting, communications and document-storage vendors bound by contract to process data only on our instructions.
• Authorities — where disclosure is required by law, regulation or a valid legal process.

5. How long we keep it

We retain enquiry data for [retention period] and application data for [retention period], or for as long as any applicable law requires us to, whichever is longer. When the purpose is served and no legal obligation requires retention, we erase it or irreversibly de-identify it.

6. Your rights

Under the DPDP Act, 2023, you have the right to:

• Obtain a summary of the personal data we process about you and the processing activities undertaken.
• Have inaccurate or incomplete data corrected, updated or completed.
• Have your data erased, where no legal obligation requires us to keep it.
• Nominate another person to exercise these rights in the event of your death or incapacity.
• Withdraw your consent at any time — though this does not affect processing already carried out, and may mean we can no longer progress an application.
• Have a grievance addressed through the process in section 10.

To exercise any of these, write to [privacy contact email]. We will respond within the timelines the Act prescribes.

7. Cookies

This site uses cookies that are strictly necessary for it to function, and [state whether analytics or marketing cookies are used, and name the providers]. You can block or delete cookies in your browser settings; strictly necessary cookies cannot be disabled without affecting the site.

8. Security

We apply reasonable technical and organisational safeguards — encryption in transit, access controls, and restricted internal access on a need-to-know basis — to protect your data against unauthorised access, disclosure, alteration or loss. No system is perfectly secure; in the event of a personal data breach we will notify the Data Protection Board and affected individuals as the Act requires.

9. Children

Our services are not directed at children under 18, and we do not knowingly process the personal data of a child without verifiable parental consent as the DPDP Act requires.

10. Grievance redressal

If you have a concern about how your data has been handled, contact our Grievance Officer:

• Name: [Grievance Officer name]
• Email: [grievance email]
• Address: [registered address]

If you are not satisfied with our response, you may escalate to the Data Protection Board of India. The full three-stage process, including complaints relating to a sanctioned loan, is set out on our grievance redressal page.

11. Changes to this policy

We may update this policy as our services or the law change. The revision date at the top of this page always reflects the current version, and material changes will be notified to you through the contact details we hold.

Note for publication: every field marked in this style is a placeholder. This document is a structural draft and must be reviewed and completed by qualified legal counsel before it is published.