Privacy policy

1. Information we collect

1.1 Information you provide directly

When you register for or use BestScore, we may collect information such as:

• (a) Your name;
• (b) Date of birth;
• (c) Residential or correspondence address;
• (d) PAN or other information required for identity or credit bureau verification;
• (e) Email Address;
• (f) Mobile Number and other contact information;
• (g) Information provided by you for verification or authentication, where applicable; and
• (h) Information you voluntarily provide through customer support, feedback forms, surveys, or other communications.

1.2 Credit information

To provide the services offered through bestscore, we may, with your required consent, access and process:

• (a) Your credit score;
• (b) Your personalized credit report;
• (c) Credit account and repayment information contained in the applicable credit report;
• (d) Enquiries and other credit-related information reflected in the applicable credit report; and
• (e) Other credit-related information made available through the applicable authorised mechanism.

We will access and use such Credit Information only for the authorised purposes described in this Privacy Policy, the applicable consent terms, and our Credit Score Policy.

1.3 information collected automatically

When you use the Platform, we may automatically collect certain technical and usage information, including:

• IP address;
• Device type and characteristics;
• Operating system;
• Browser information, where applicable;
• Language preferences;
• Application usage information;
• Pages or screens viewed;
• Date and time of access;
• Referring URLs; and
• Technical logs and other information necessary for security and service operations.

We may collect such information through server logs, cookies, SDKs, and similar technologies.

1.4 information required for compliance

We may collect additional information where reasonably necessary to comply with applicable laws, regulatory requirements, fraud-prevention requirements, or to provide a particular feature of the Platform. Information that is not mandatory for a particular service may be optional, and we will communicate the same where appropriate.

All information described above may collectively be referred to as “Information” or “Personal Information”, as applicable.

2. Consent

Where required under applicable law, we will obtain your consent before collecting, accessing, or processing your Personal Information or Credit Information for the relevant purpose. In particular, access to your Credit Information through an authorised mechanism will be subject to the applicable consent requirements.

You may withdraw your consent were permitted by applicable law and through the applicable withdrawal mechanism. Withdrawal of consent will generally operate prospectively and will not affect processing lawfully undertaken before withdrawal or processing that we are required or permitted to continue under applicable law.

Withdrawal of consent may affect our ability to provide certain services to you.

3. How we use your information

We may use your Information for the following purposes:

• To register and maintain your account;
• To provide access to your personalized credit report and credit score;
• To retrieve, display, and, where permitted, refresh your Credit Information with your consent;
• To verify your identity and authenticate your account;
• To provide customer support and respond to queries and grievances;
• To maintain, operate, secure, and improve the Platform;
• To detect, prevent, and investigate fraud, misuse, unauthorised access, or other security incidents;
• To perform analytics and understand Platform usage;
• To communicate with you regarding your account, services, transactions, policy updates, and other service-related matters;
• To send promotional communications where permitted and subject to your applicable preferences or consent; and
• To comply with applicable laws, regulatory requirements, legal proceedings, governmental requests, or lawful orders.

We do not use your Credit Information for originating, underwriting, sanctioning, approving, or disbursing loans through bestscore.

bestscore does not provide credit-improvement plans or use your Credit Information to provide any guaranteed credit-improvement outcome.

4. Disclosure and sharing of Information

We may disclose or share your Information only where necessary and permitted under applicable law, including in the following circumstances:

4.1 Credit Information Providers and Verification Partners

We may share or provide necessary information with authorised credit information companies, identity verification providers, or other relevant service providers to obtain or verify Credit Information or identity information, subject to applicable consent and legal requirements.

4.2 Service Providers

We may engage trusted third-party service providers for functions such as:

• Hosting and cloud infrastructure;
• Technology and application support;
• Cybersecurity;
• Analytics;
• Customer support;
• Communication services; and
• Payment processing, where applicable.

Such service providers will be provided access only to information reasonably necessary to perform their services and will be subject to appropriate contractual or confidentiality obligations.

4.3 Legal and Regulatory Requirements

We may disclose Information where required or permitted by applicable law, regulation, court order, governmental authority, law-enforcement agency, or regulatory authority.

4.4 Business Transfers

In the event of a merger, restructuring, acquisition, financing, or transfer of all or part of our business or assets, Information may be transferred to the relevant successor or acquiring entity, subject to applicable legal and privacy requirements.

4.5 Aggregated or Anonymised Information

We may use or share aggregated or anonymised information that does not identify an individual for legitimate purposes such as analytics, research, reporting, and improvement of our services.

We do not sell your Credit Information or Personal Information for the purpose of loan origination.

5. Data Storage, Retention and Deletion

We will retain your Information only for as long as reasonably necessary to provide the relevant services, fulfil the purposes described in this Policy, comply with contractual obligations, or meet applicable legal and regulatory requirements.

Credit Information will be retained in accordance with applicable laws, regulatory requirements, contractual obligations, and the terms governing access to such information.

When Information is no longer required for the relevant purpose and there is no legal, regulatory, or contractual requirement to retain it, we will take reasonable steps to delete, securely dispose of, or anonymise such Information in accordance with our applicable retention practices.

You may request deletion of your Personal Information by contacting us through the details provided in this Policy, subject to applicable legal and regulatory retention requirements.

6. Cookies and Similar Technologies

We may use cookies, SDKs, pixels, and similar technologies to:

• Enable essential Platform functionality;
• Maintain security;
• Remember preferences;
• Understand Platform usage;
• Analyse performance; and
• Improve our services.

Where applicable, you may manage certain cookie or device permissions through your browser or device settings. Disabling certain technologies may affect the availability or functionality of some Platform features.

7. Information Security

We implement reasonable technical, administrative, and organisational safeguards designed to protect your Information against unauthorised access, use, disclosure, alteration, loss, or destruction.

These measures may include access controls, encryption or other appropriate security measures, monitoring, security assessments, and internal controls, as appropriate to the nature of the Information and the risks involved.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

8. Your rights and choices

Subject to applicable law, you may have rights and choices relating to your Personal Information, including:

• Access: request access to Personal Information held by us;
• Correction: request correction or updating of inaccurate or incomplete information;
• Deletion: request deletion of Personal Information, subject to applicable retention requirements;
• Withdrawal of consent: withdraw consent where processing is based on consent;
• Marketing preferences: opt out of promotional communications; and
• Grievance: raise a complaint regarding the handling or processing of your Personal Information.

Requests may be subject to applicable verification requirements to protect your account and information.

9. Third-party services

The Platform may contain integrations, links, or references to third-party websites, applications, services, or platforms. This Privacy Policy does not govern the privacy practices of independent third parties.

Users are encouraged to review the privacy policies and terms of such third parties before providing information to them.

Where a third party processes information on our behalf, we will take reasonable steps to ensure that such processing is carried out in accordance with applicable requirements.

10. Eligibility

The bestscore Platform is intended for individuals who are 18 years of age or older. We do not knowingly permit individuals below the applicable age of eligibility to use the Platform. If we become aware that Personal Information has been collected from an individual who is not eligible to use the Platform, we may take reasonable steps to delete such information, subject to applicable law.

11. Policy updates

We may revise this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal and regulatory requirements. Any revised Policy will be made available through the bestscore Platform. The updated Policy will be effective from the date specified therein.

12. Grievance Redressal and contact

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your Personal Information, you may contact our designated Grievance Officer through the details provided below:

• Grievance Officer: [insert name]
• Email: [insert grievance email]
• Contact Number: [insert contact number]
• Address: Unit 1205, Gera’s Imperium Rise, Hinjawadi Phase II, Pune – 411057, Maharashtra, India

We will endeavour to acknowledge and address grievances in accordance with our Grievance Redressal Policy and applicable laws.

13. Withdrawal of consent

13.1 Subject to applicable legal and regulatory requirements, you may withdraw your consent to the collection, access, or processing of your Personal Information where such processing is based on consent.

13.2 Withdrawal of consent may affect or prevent our ability to provide certain services, including access to your personalized credit report or credit score where such access requires your consent.

13.3 Withdrawal of consent will not affect the lawfulness of processing undertaken before such withdrawal and will not prevent us from retaining or processing information where required or permitted under applicable law.

14. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Subject to applicable law, the courts at Pune, Maharashtra shall have jurisdiction over disputes arising in connection with this Privacy Policy or the use of the Platform.