Privacy Policy

1Who we are

The Debt Rescuers is a brand of The Debt Rescuers Advisory LLP, a limited liability partnership registered in India.

Under the DPDP Act, we are the Data Fiduciary for the personal data described in this policy. That means we decide why and how your data is used, and we are responsible for protecting it. You are the Data Principal.

This policy covers our website, the Debt Relief Finder, the Get Started and Contact Us forms, call bookings, the TDR Client Portal and app, Rescuer Assist, our WhatsApp, phone and email conversations with you, and our social media pages when you message us through them.

2The short version

• We collect only what we need to understand your situation and support you.

• We use your data to help you, not to sell to you. We never sell your data.

• We never share your information with your lenders or with recovery agencies unless you give us written consent.

• Your card details are handled by our payment gateway. We never see or store them.

• Your data is stored on cloud servers located in India.

• You can ask to see, correct or delete your data, withdraw consent or nominate someone, at any time.

• If something worries you, write to grievance@thedebtrescuers.com. We respond within 30 days.

3The personal data we collect

We collect personal data in the following ways.

We do not ask for your bank passwords, OTPs or card details through the Finder, our forms, WhatsApp or Rescuer Assist. If anyone claiming to be from The Debt Rescuers asks for an OTP or password, do not share it and tell us at once.

We do not pull your credit report ourselves. If a credit report helps your case, we will ask you to download it from a credit bureau and share it with us.

4Why we use your data

We use your personal data only for these purposes:

1. To respond to you. To send your Debt Snapshot, call you back, answer your WhatsApp or email and book your private call.

2. To understand your situation. To prepare your Debt Health Score and resolution roadmap, which our team reviews before you see them.

3. To provide our advisory and coordination services. To manage your case, keep your case timeline and documents in one place, and prepare drafts for review.

4. To coordinate advocate support, when you want it. To share the relevant parts of your case with the independent panel advocate assigned to your matter, only with your consent.

5. To take payments and issue invoices. Including collecting the advocate professional fee on behalf of the assigned advocate and paying it to them in full.

6. To run Rescuer Assist. To give you general guidance, keep a record of the conversation and hand you to a person when needed.

7. To keep you informed. Service messages about your enquiry or case, by WhatsApp, SMS, email or phone.

8. To improve our service. To understand, in aggregate, how people use our site and tools. Where possible we use data that no longer identifies you.

9. To send you helpful content, only if you ask. Such as our newsletter or Life After Debt tips. You can unsubscribe at any time.

10. To meet legal duties and protect rights. Keeping accounting and tax records, responding to lawful requests, preventing fraud and keeping our systems secure.

We will not use your data for a new purpose without telling you and, where needed, asking for your consent again.

5Consent, and how to withdraw it

Most of what we do with your data is based on your consent. Every form on our site carries a consent line that is unticked by default. We ask for consent separately for different things, for example:

• to contact you about your enquiry;

• to send your Debt Snapshot on WhatsApp;

• to share your case with an engaged advocate;

• to share information with your lender or anyone else on your behalf (this always needs your written consent);

• to send you marketing or newsletter messages;

• to use non-essential cookies.

When we ask for consent, we tell you what data we need, why we need it, how to withdraw your consent and how to complain to the Data Protection Board of India.

Withdrawing consent is as easy as giving it. You can:

• use the “Manage consent” option in your Client Portal settings;

• reply “STOP” to any WhatsApp or SMS message from us;

• click “unsubscribe” in any email from us;

• change your choices at any time through the “Cookie settings” link in our website footer;

• write to grievance@thedebtrescuers.com.

Once you withdraw consent, we stop using your data for that purpose within a reasonable time, and we ask our service providers to stop too. Withdrawal does not undo anything we lawfully did before. If you withdraw consent that we need to run your case (for example, to hold your documents), we may not be able to continue helping you, and we will explain this to you first.

You may also give, manage or withdraw consent through a Consent Manager registered with the Data Protection Board of India, once such services are available.

6When we use data without asking for consent (legitimate uses)

The DPDP Act allows some limited uses of personal data without separate consent. We rely on these only where they genuinely apply:

• Data you give us voluntarily for a specific purpose, where you have not said you object. For example, if you email us a document and ask a question about it, we will use it to answer you.

• To comply with the law, such as keeping tax and accounting records, or responding to an order of a court, tribunal or authority.

• In a medical emergency or a threat to someone’s life or safety. For example, if you tell us you or someone else is in immediate danger.

7Who we share your data with

We share your data only with people who need it to help you, and only as much as they need.

Every service provider that processes your data for us (a “Data Processor”) works under a written contract that requires them to keep it secure, use it only on our instructions and delete it when the work is done.

WHAT WE WILL NEVER DO

• We will never sell your personal data.

• We will never share your information with your lenders, banks, NBFCs, Asset Reconstruction Companies or recovery agencies without your written consent for that specific purpose.

• We will never share your data with anyone who wants to market loans, credit cards, investments or insurance to you.

If The Debt Rescuers is ever merged, sold or restructured, your data may pass to the new owner, who must continue to protect it under this policy and the law. We will tell you before that happens.

8Where your data is stored

We store your data on cloud servers located in India. Some of our service providers, such as WhatsApp or email providers, may process limited data outside India. We only use such providers where the transfer is allowed under the DPDP Act, and we require them to protect your data to the same standard.

9Children

Our services are meant for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18, and our forms ask you to confirm you are an adult.

If you are a parent or guardian and believe a child has shared data with us, please write to grievance@thedebtrescuers.com and we will delete it.

10How long we keep your data

We keep your data only as long as we need it for the purpose you gave it, or as long as the law requires. After that, we delete it or make it permanently anonymous.

If you ask us to delete data we are legally required to keep, we will keep only what the law requires, restrict its use to that legal purpose and delete it when the period ends.

Where we are going to erase data because the purpose is over, and the DPDP Rules require notice, we will tell you before we delete it so you can ask for a copy.

11Documents you upload

Your documents are among the most sensitive things you share with us. Here is how we handle them.

• Where: documents uploaded through the Client Portal or app are stored in an encrypted document vault on servers in India.

• Who can see them: only you, the members of your case team working on your matter and, with your consent, the independent advocate engaged on your matter. Every access is logged.

• What to upload: only what your case needs. Please do not upload your card details, bank passwords, OTPs or anything we have not asked for. You can blur account numbers and other details that are not relevant.

• Documents about other people: if a document includes someone else’s details (for example a co-borrower or guarantor), only upload it if it is needed and you are entitled to share it.

• Deleting a document: you can ask us to remove any document at any time. If it forms part of a closed client file we must keep, we will tell you.

• Documents sent by WhatsApp or email: we move them into your secure vault as soon as possible and delete them from the messaging channel.

• Downloads by advocates: advocates view documents inside the portal. If an advocate needs a copy for a court or forum, they must keep it confidential under their professional duties and our Partner Agreement.

12How we protect your data

We use reasonable security safeguards, as the DPDP Act and Rules require, including:

• encryption of data in transit (HTTPS) and at rest;

• OTP-based login for the portal, so there are no passwords to steal;

• role-based access, so staff and advocates see only what their work needs;

• access logs, monitoring and regular reviews;

• regular backups;

• confidentiality undertakings from our team and written contracts with every service provider;

• training for our team on handling personal data with care.

No system is completely secure. If a personal data breach happens that affects you, we will tell you without delay in plain language: what happened, what data was affected, what it may mean for you, what we are doing about it and what you can do to protect yourself. We will also report it to the Data Protection Board of India as the law requires.

13Your rights

Under the DPDP Act, you have the right to:

1. Access: ask for a summary of the personal data we hold about you, what we do with it, and who we have shared it with.

2. Correction and completion: ask us to correct information that is wrong, complete what is incomplete, or update what has changed.

3. Erasure: ask us to delete your data when it is no longer needed or you withdraw consent, except where the law requires us to keep it.

4. Withdraw consent: at any time, as explained in clause 5.

5. Grievance redressal: complain to us about how we have handled your data, and get a response.

6. Nominate: name another person who can use your rights on your behalf if you die or become unable to act. You can add or change a nominee through the Client Portal or by writing to us.

How to use your rights: write to grievance@thedebtrescuers.com from the email or mobile number you used with us, or use the “My data” option in the Client Portal. We may ask you to confirm your identity with a one-time code before we act, so that nobody else can get your data. We respond within 30 days.

You also have some duties under the DPDP Act: please give us accurate information, do not impersonate anyone, and do not make false or frivolous complaints.

14Data Protection and Grievance Officer

If you have any question or complaint about your personal data, please contact our Grievance Officer.

If the law ever requires us to respond sooner, we will meet that shorter time. You can read about the full process on our Grievance Redressal page.

15Data Protection Board of India

If you are not satisfied with our response, or we do not respond within 30 days, you can complain to the Data Protection Board of India, set up under the DPDP Act. The Board accepts complaints through its digital platform. Please raise your concern with us first, as the law expects you to use our grievance process before going to the Board.

16Links to other websites

Our site may link to websites we do not control, such as the RBI, credit bureaus or government portals. Their privacy practices are their own. Please read their policies before sharing your data with them.

17Changes to this policy

We may update this policy when our services or the law change. We will change the “Last updated” date at the top and, if the change is significant, tell clients through the portal, WhatsApp or email before it takes effect. If a change needs your fresh consent, we will ask for it.

18Contact

For anything about this policy, write to grievance@thedebtrescuers.com or to our office at A-230 A, Chhattarpur Enclave Phase-II, New Delhi 110074.