A. INTRODUCTION
Experian Services India Private Limited (hereinafter referred to as “ESIPL / we / our”) is committed to protecting the privacy of the users visiting the www.experiansolutions.in (“the Website”) and acknowledges the expectations of its consumers or customers of its clients (hereinafter referred to as “Consumer / you / your”) regarding privacy, confidentiality and security of personal information that resides with ESIPL. Keeping personal information of the Consumer secure and preventing any misuse is a top priority of ESIPL.
ESIPL is strongly committed to protect the privacy of its Consumers and has taken all necessary and reasonable measures in line with applicable laws and regulations as well as the best industry practice to protect the confidentiality of your personal information.
This Privacy Policy outlines the detailed workflow on what type of information is gathered and tracked, how the information is used, and with whom the information is shared.
B. PERSONAL INFORMATION
Personal Information (“PI”) means any information that relates to a natural person, which either directly or indirectly in combination with other information available with ESIPL, that can identify such person.
C. APPLICABILITY
This Policy applies to the PI such as details pertaining to your name, parentage, marital status, nationality, state/city of residence, residential address, e-mail address, date of birth, gender, contact number/mobile number, user ids, passwords, recent photograph, signature image, income proof, PAN, and such other Know Your Customer (KYC) documents like address proof, identity proof, officially valid documents/details which may be shared / uploaded by you, as and when you avail any of our products, services either directly from us or through our client either through our website / application or our client’s website or application where this Policy or a link to this Policy is displayed.
By visiting and/or using our Website, you agree to this Policy. Further, this Policy applies to all current and former visitors to the Website. ESIPL may also make available other privacy policies or information notices in relation to specific products or business functions. These will apply in conjunction with this Privacy Policy; so please ensure that you review each document, as applicable. It is strongly recommended for you to return to this page periodically to review the most current version of the Policy.
D. WHAT PERSONAL INFORMTION ABOUT YOU WE GATHER:
The information we learn from You helps us personalize and continually improve your experience at the Website.
Here are the types of PI we gather:
- We receive and store any PI you enter on our Website or via any other channel. You can choose not to provide certain information but then you might not be able to take advantage of many of our services and features.
- We receive and store certain types of information whenever you interact with us. For example, we use “cookies”, and we obtain certain types of information when your web browser accesses the Website or advertisements and other content served by or on behalf of the Website on other websites. We may also receive/store information about your location and your mobile device, including a unique identifier for your device.
- We might receive information about you from other sources and add it to our account information.
E. HOW WE USE YOUR PERSONAL INFORMATION:
We process your PI for purposes in connection with:
- your use of our Website;
- any services / product(s) offered by us;
- your communications with us;
- developing and / or improving our products / services;
- any other engagements you may have with us; and
- the management and administration of our business.
When you register on the Website, you are not anonymous to us. Also, you are asked for your name, contact number and other details during registration and may be sent via SMS, electronic mails (“e-mails”), notifications, WhatsApp messages about our services to your wireless device.
F. COLLECTION AND PROCESSING OF PI:
ESIPL endeavors to take all reasonable steps to protect your personal information. All the data collected by us is stored on a secure server. ESIPL has adopted procedures and measures in relation to its daily operations to safeguard and protect the PI maintained, against any unauthorised access to or misuse of the same, including but not limited to, adopting standards for physical and operational security, appropriate instructions for removing, labelling and securing electronic storage media, securing all paper based records, documentation and backup data containing all confidential information, adequate procedure to ensure access only by authorized persons on ‘need to know’ basis, creation of firewalls and stress testing of systems, taking necessary steps while handing over systems for maintenance to prevent unauthorized access or loss of data, information and PI maintained by ESIPL.
ESIPL also ensures utmost care in collection of Your PI and ensures that Your PI is properly and accurately recorded, collated and processed and protected against loss, unauthorised access, modification or disclosure.
In this regard, ESIPL ensures that no person has any access to your PI in the possession or control of ESIPL who is not required to or needs to access your PI. All ESIPL employees, managers, officers, authorized personnel, agents, sub-contractors, vendors and other persons who deal with or have right to access PI are essentially required to comply with confidentiality covenants in this regard.
G. LENGTH OF PRESERVATION OF PI:
ESIPL endeavours to take steps to retain Your data/Personal Information for a period not exceeding 36 (thirty-six) months from the date of termination of your relationship with ESIPL. Thereafter, we shall take reasonable steps to destroy or permanently de-identify PI that is no longer needed.
H. SHARING YOUR PI:
We have summarised below the categories of recipients with whom we are likely to share your personal data.
Affiliates and Third Parties: ESIPL may share your information with its affiliates i.e. companies that control or are controlled by or under common control with ESIPL as well as selected third parties with whom ESIPL works. These recipients within and outside our group, may be processing your personal data on our behalf as a Service Provider (see below).
Service Providers: ESIPL may share your personal data with entities that provide services to it, such as vendors and suppliers that provide ESIPL with technology, services, and/or content for the operation and maintenance of the Website. Access to your personal data by these service providers is limited to the information reasonably necessary for the Service Provider to perform its limited function. ESIPL takes reasonable steps to help ensure that Service Providers keep your personal data confidential and comply with ESIPLs privacy and security requirements.
Disclosure for Legal Reasons or as is necessary to protect ESIPL: ESIPL may release personal data to other parties: (1) to comply with valid legal requirements such as laws, regulations, search warrants or court orders; (2) in special cases, such as a physical threat to you or others, a threat to public security, or a threat to ESIPL’s system or network; or (3) cases in which ESIPL believes it is reasonably necessary to investigate or prevent suspected or actual harm, abuse, fraud, or illegal conduct.
Changes in ESIPL’s corporate structure: If all or any part of ESIPL is sold, merged or otherwise transferred to another entity (including a transfer of ESIPL’s assets), the personal data you have provided to ESIPL may be transferred as part of that transaction.
I. DATA SECURITY AND PROHIBITION FROM UNAUTHORIZED ACCESS OR USE OR DISCLOSURE:
ESIPL has adopted procedure and measures in relation to its daily operations to safeguard and protect the PI collected/stored/accessed/maintained with it, against any unauthorized access to or misuse of the same, including but not limited to, adopting standards for physical and operational security, appropriate instructions for removing, labelling and securing electronic storage media, securing all paper based records, documentation and backup data containing all confidential information, adequate procedure to ensure access only by authorized persons on ‘need to know’ basis, creation of firewalls and stress testing of systems, taking necessary steps while handing over systems for maintenance to prevent unauthorized access or loss of data, information and PI maintained by ESIPL.
J. SECURITY ASPECTS:
ESIPL has security protocols and measures in place to protect from unauthorized access or alteration, the PI, and other information ESIPL maintains. These measures include internal and external firewalls, physical security and technological security measures, and encryption of certain data. When PI is disposed of, it is disposed of in a secure manner.
K. PURPOSE AND USAGE:
ESIPL will not sell, rent or exploit your PI to anyone for any illegal or unlawful purposes in a way that is contrary to the commitments made and/or other than as set forth in this Privacy Policy.
We may share your PI to our business partners/subcontractors/service providers or group companies located within or outside India, provided that they also comply with applicable laws.
ESIPL may also share, sell, and/or transfer your personally identifiable information to any successor-in-interest as a result of a sale of any part of our business or upon the merger, reorganization, or consolidation of it with another entity on a basis that it is not the surviving entity.
Access to your account information and any other personal identifiably information is strictly restricted and used only in accordance with specific internal procedures, and for the purposes set out in this Privacy Policy. We may use third party service providers to enable you to provide with our services.
We may also share your information, with government agencies mandated under the law to obtain information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences, or where disclosure is necessary for compliance of a legal obligation. You agree and consent for the Website to disclose your information, if so required, under applicable law.
Please note that during our use of your PI, if you choose not to provide the relevant personal data, we may not be able to enter into or continue our arrangement with you.
L. YOUR CONSENT:
We are processing your personal data basis the consent you have provided by accepting this Privacy Policy or by agreeing to avail our services or our products.
We acknowledge your right to access, rectification, erasure, restriction of the processing, data portability and object to the processing of your PI. However, these rights are not absolute in nature and are subjected to contract, applicable legislation, record keeping requirement under applicable statutes, ongoing disputes or potential disputes ESIPL may foresee.
By accepting this Privacy Policy and our Terms, you expressly consent to our use and disclosure of your Personal Information in the manner prescribed in this Privacy Policy.
M. COOKIE STATEMENT:
What are cookies?
Cookies are text files stored on the device you use to visit our website. Some cookies are essential for our websites to work, others collect anonymous or personal information to allow us to improve our websites and to show you relevant content.
We may use different types of cookies and you can read more about some of these below.
How long are cookies stored on my device?
Two types of cookies can be stored:
Session cookies which are automatically deleted when you close your browser
Persistent cookies which remain on your computer until they are deleted or expire. Persistent cookies can keep your user preferences to help make future browsing easier and more relevant.
Types of cookies we may use
Essential cookies
Without these cookies, our website may not work properly. These cookies are strictly necessary for ESIPL sites to ensure security, ease of use and functionality. Others provide you with services available across our websites and are needed to use some of its features.
Analytics cookies
Analytics cookies are used to understand how visitors use our website. This includes capturing visitors’ location, how pages are browsed, patterns and preferences within their journey, time spent on site, and additional data that helps us improve your experience. Some of these include third party cookies, and are implemented to provide you with a quick and seamless personalized experience.
Performance and functional cookies
We use performance & functional cookies to further improve our website in order to provide you with the best possible online experience. For example, to ensure the speed of our web pages, enable video content and faster browsing. Without these cookies, certain website functionality may become unavailable. Some of these cookies may be third party cookies.
Advertising and marketing cookies
Advertising and marketing cookies are used to show you adverts relevant to you, your interests and your interaction with ESIPL and our websites. We use this data to improve our communications with you. They are used to show you relevant advertisements, and to help measure the effectiveness of our advertising campaigns.
These cookies can also remember that you have visited a website and collect information about your browsing habits in order to manage your preferences accordingly.
Some of these cookies can identify you as an individual based on IP address and connected identifiers. These cookies may also be third party cookies.
Social media cookies
Social media cookies may be placed on our website and, if you are logged into the social media platform, can identify your visit and collect information about your browsing habits. We may use these cookies to include or exclude you from social media advertising and to help measure the effectiveness of these advertising campaigns. These cookies may be third party cookies.
N. YOU ARE RESPONSIBLE FOR MAINTAINING THE CONFIDENTIALITY OF YOUR LOGIN ID AND PASSWORD:
You are responsible for maintaining the security of your login ID and Password and must not provide these credentials to any third party. If you believe that they have been stolen or been made known to others, you must contact us immediately at customer.support@in.experian.com.
We are not responsible if someone else accesses your account through the login credential they have obtained from you or through a violation by you of this Privacy or ESIPL Terms of Use.
If you have any security related concern, please contact us at customer.support@in.experian.com. We will work closely with you to ensure a rapid and personal response to your concerns
O. QUERIES AND GRIEVANCE REDRESSAL
Grievance Officer
In case of any feedback or grievance regarding data privacy, you may contact our customer support team. On receipt of the request, the team shall take necessary steps, within a reasonable time, to ensure that proper action is taken to redress the complaint (s). The email id for the customer support team is customer.support@in.experian.com.
P. CHANGES TO THIS DATA PRIVACY POLICY
ESIPL may make changes to this Privacy Policy from time to time. The revised policy will be posted on our Website and will mention the date of the changes in the ‘Last updated’ section below. Please access the Privacy Policy regularly to ensure your understanding of ESIPL latest policies. By using this website, you are agreeing to the latest Privacy Policy published here.
Last updated: November 2022