Legal
Privacy Policy
How we collect, use and protect your personal data, and your rights under India’s DPDP Act, 2023.
Last updated: 1 November 2026
This policy is pending final review and the addition of our registered business details.
1. Who we are
This Privacy Policy explains how Improve Credit Score ("we", "us") collects and uses personal data through www.improvecreditscore.in. We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. What we collect
We do not ask for, and you should never send us, OTPs, passwords, card PINs, CVVs or net-banking credentials.
- Enquiry details you submit: name, mobile number, optional email and city, the topic of your enquiry and any message
- Your consent record (time and the consent text you agreed to)
- If you become a client: the credit report(s) you choose to share with us and documents needed for disputes
- Basic technical data needed to run the website securely (e.g. server logs)
3. Why we use it
We do not sell your personal data and do not use it for unrelated marketing without separate consent.
- To respond to your enquiry and contact you about it
- To provide the service you request (report analysis, dispute assistance, consultation)
- To meet legal, accounting and regulatory obligations
- To keep the website secure
4. Legal basis and consent
We process your data based on the consent you give when submitting the form or engaging our services, and where otherwise permitted by law. You can withdraw consent at any time, as easily as you gave it, by contacting us. Withdrawal does not affect processing already carried out.
5. Sharing
We share data only with service providers who help us operate (for example, form-handling, email or hosting providers) under confidentiality obligations, and, at your direction, with credit bureaus or lenders when raising disputes on your behalf. We may disclose data where required by law.
6. Retention
Enquiry data is kept only as long as needed to handle your enquiry and for a reasonable period afterwards, unless you become a client. Client records are retained as required for legal and accounting purposes, then deleted.
7. Your rights
- Access a summary of your personal data we process
- Correction, completion or updating of your data
- Erasure of your data, subject to legal retention requirements
- Withdraw consent
- Nominate another person to exercise your rights
- Grievance redressal, and to complain to the Data Protection Board of India
8. Security
The website is served over HTTPS. We apply reasonable technical and organisational safeguards, limit access to those who need it, and collect only what is necessary.
9. Cookies
See our Cookie Policy. By default this website does not set advertising or tracking cookies.
10. Children
Our services are intended for adults. We do not knowingly collect data from children.
11. Contact & grievances
For privacy questions, to exercise your rights, or to raise a grievance, contact our Grievance Officer via the Contact page. You can also use the enquiry form on our Contact page.
12. Changes
We may update this policy. The "Last updated" date shows the latest version.