Privacy Policy

Right.Card (“Right.Card”, “we”, “us”), operated by ZAP Private Limited (a subsidiary of Finance Buddha), is a channel partner (Direct Selling Agent) that helps you discover and apply for credit card products offered by partner banks and financial institutions. We are committed to protecting your personal data and handling it responsibly in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable law.

1. Information we collect

• Details you may share: if and when you choose to share them, we may collect your name, mobile number, email, city, and employment or income details to help match a card. We do not collect these on the website today.
• Technical data: IP address, browser type, pages visited and device information, collected via standard web analytics.
• Credit-bureau information only if and when you expressly consent to a credit check.
• We do not store card numbers, CVV, OTP, UPI IDs or bank account details.

2. How we use your data

• To understand your requirement and suggest suitable credit card products.
• To refer or forward your application to the bank or financial institution you choose.
• To respond to your queries and provide support.
• To send updates, offers and service messages where you have consented.
• To improve our services (in aggregated, anonymised form only) and to meet legal obligations.

3. Legal basis for processing

We process your data on the basis of your consent (for sharing your details and for marketing communications), performance of the service you request from us, and compliance with legal obligations. You may withdraw consent for marketing at any time.

4. How we share your data

• With the issuing bank or financial institution you choose to apply to, to process your application.
• With service providers who help us operate (such as hosting and communications), under confidentiality obligations.
• With regulatory or statutory authorities where required by law.
• We do not sell your personal data, and our partners may not use it for their own marketing.

5. Consent and communication

By submitting your details or clicking “Apply”, you authorise Right.Card and its partner banks to contact you by phone call, SMS, WhatsApp and email regarding your enquiry, even if your number is registered under DND/NDNC. You may withdraw consent or opt out at any time by writing to us (see Contact).

6. Data retention

We retain your personal data only for as long as necessary for the purposes described above and as required under applicable law, after which it is deleted or anonymised.

7. Your rights under the DPDPA

Subject to applicable law, you have the right to access the data we hold about you, request correction of inaccurate or incomplete data, request erasure of your data, seek grievance redressal, and nominate an individual to exercise your rights in the event of your death or incapacity. To exercise any of these rights, email care@card.itsright.me with the subject line “Data Rights Request”.

8. Data security

We use reasonable technical and organisational measures — including encryption of data in transit and of sensitive data at rest, access controls, and periodic reviews — to protect your information. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities as required by law.

9. Cookies and analytics

We use essential cookies for functionality and analytical cookies to understand usage. You can control non-essential cookies through your browser settings; disabling them will not affect your ability to use the website.

10. Children’s privacy

Our services are intended for adults (18 years and above). We do not knowingly collect personal data from individuals under 18 years of age.

11. Third-party websites

Links and applications on our website may take you to bank or partner websites governed by their own privacy policies. We are not responsible for their practices.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page, and material changes will be communicated through a prominent notice on our website.

13. Grievance Officer / Contact

ZAP Private Limited (Right.Card)
Email: care@card.itsright.me (subject line “Privacy Grievance”)
We will respond within the timelines prescribed under applicable law.