CardsGuruji

Privacy Policy

Last Updated: November 8, 2026

Welcome to CardsGuruji (referred to as "we", "us", "our", or "Data Fiduciary"). We are committed to protecting your personal information and your right to privacy in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India.

When you visit our website and use our credit card comparison and lead generation tools, you act as a "Data Principal" trusting us with your personal data. This privacy notice clearly outlines what information we collect, the specific purpose for collecting it, and the rights you hold over your data.

1. Information We Collect

We operate on the principle of data minimization. We only collect the personal data strictly necessary to fulfill the service you explicitly requested, such as applying for a credit card.

  • Personal Identification Details: Full Name, Email Address, and Indian Mobile Number.
  • Financial & Professional Information: Monthly Income, Employment Status (Salaried, Self-Employed, etc.), and self-reported Credit/CIBIL Score.
  • Application Metadata: The specific bank, credit card name, and reference details associated with your request.
  • Log and Device Info: Internet Protocol (IP) address, browser details, and device information captured automatically to prevent fraud and bot abuse.

2. Purpose & How We Use Your Data

Under the DPDP Act, your data is processed only for the specified, clear, and lawful purpose to which you have consented:

  • To Facilitate Credit Card Applications: We share your eligibility profile with the respective Data Processors (card-issuing banks or financial institution partners) to process your application request.
  • To Pre-screen Eligibility: Evaluating your income and credit score to match criteria set by card issuers, reducing your chance of rejection.
  • Communication: Contacting you via email, SMS, or WhatsApp regarding updates on your application status, solely based on your explicit consent.

3. Consent & Data Sharing

We rely on your explicit, affirmative consent before sharing any data.

  • Partners and Card Issuers: Upon checking the consent box during application, you authorize us to forward your details to the respective bank partner (e.g., HDFC Bank, SBI Card, ICICI Bank, Axis Bank) for credit assessment.
  • Right to Withdraw Consent: You have the right to withdraw your consent at any time. Upon withdrawal, we will cease processing your data for future applications, though this will not affect the legality of processing performed prior to withdrawal.
  • No Third-Party Sale: We strictly do not sell, rent, or lease your personal information to third-party telemarketers or unrelated advertisers.

4. Security & Data Retention

All form submissions are transmitted securely via HTTPS. We implement appropriate technical and organizational security measures to protect your data in compliance with the DPDP Act and the Information Technology Act, 2000.

Data Retention: We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal/regulatory obligations. Once the purpose is served, your data is permanently erased or anonymized.

5. Children's Privacy

Our services are intended solely for individuals aged 18 and older. We do not knowingly collect personal data from children. If we become aware that we have processed data from a person under 18 without verifiable parental consent, we will take immediate steps to delete such information.

6. Your Rights as a Data Principal

Under the DPDP Act, you possess the following rights regarding your personal data:

  • Right to Access: Request a summary of the personal data being processed by us and the identities of all Data Fiduciaries/Processors it has been shared with.
  • Right to Correction & Erasure: Request the correction of inaccurate data or the deletion of your personal data when its retention is no longer necessary.
  • Right of Grievance Redressal: Register a complaint regarding our data processing practices.
  • Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.

7. Grievance Officer & Contact

To exercise any of your rights or raise concerns about how your data is handled, you may contact our appointed Data Protection / Grievance Officer:

Note: If your grievance is not resolved satisfactorily, you hold the right to escalate the matter to the Data Protection Board of India.