Privacy Policy
This Privacy Policy governs the collection, use, storage, processing, disclosure, and protection of personal data of all users who access or use bestcreditcardindia.com and all related services operated by BesCa, owned and operated by Acoresolve Solutions ("we", "us", "our"). By accessing or using our website, you consent to the practices described in this Policy.
About Us
BesCa (bestcreditcardindia.com) is a credit card comparison and information platform owned and operated by Acoresolve Solutions, an Indian organisation. For corporate information, please visit acoresolve.com.
Applicability and Scope
This Policy applies to all individuals who visit, browse, register on, or otherwise interact with our website, including:
- General members of the public aged 18 years and above
- Students and young adults seeking financial literacy and credit card education
- Business professionals and high-net-worth individuals
- Non-Resident Indians (NRIs) and international visitors
This Policy applies to all personal data collected through our website, mobile-optimised interfaces, emails, SMS communications, advertisements, and any other digital touchpoints associated with BesCa.
Information We Collect
3.1 Information You Provide Directly
- Full name and email address (for account registration, newsletters, and contact forms)
- Mobile phone number (for SMS alerts, OTP verification, and marketing communications)
- Self-declared financial profile including estimated income range, existing credit cards, credit score range, and spending patterns, provided voluntarily for personalised card recommendations
3.2 Information Collected Automatically
- Device information: type, model, operating system, browser type and version
- IP address and approximate geolocation derived from IP
- Precise or approximate location data if permission is expressly granted by you
- Pages viewed, links clicked, search queries entered, and time spent on each page
- Click-through patterns on credit card listings and advertisements
- Cookie identifiers, pixel tags, and similar tracking technologies
3.3 User-Generated Content (when enabled)
- Reviews, ratings, comments, and feedback submitted by registered users
- Username or display name associated with such content
- Timestamps and metadata associated with published content
3.4 Information from Third Parties
- Advertising partners and analytics providers (e.g., Google Analytics, Meta Pixel)
- Bank and financial institution affiliate partners when you are referred via our platform
- Publicly available sources for fraud prevention and compliance purposes
Purpose and Legal Basis for Processing
Provision of Services
- To display, compare, and recommend credit card products listed on our platform
- To personalise content and recommendations based on your stated financial profile
- To enable user account registration, login, and profile management
Communication and Marketing
- To send transactional emails and SMS communications related to your account
- To send promotional, educational, and marketing communications, subject to your consent and opt-out rights
- To serve targeted advertisements on our platform and on third-party platforms using your browsing data and profile
Analytics and Improvement
- To analyse user behaviour, traffic patterns, and platform performance
- To conduct A/B testing, improve user experience, and develop new features
Legal and Compliance
- To comply with the IT Act, 2000, the IT (SPDI) Rules, 2011, and the Digital Personal Data Protection Act, 2023
- To detect, investigate, and prevent fraudulent transactions and abuse of the platform
Data Monetisation (Future)
We may in future share anonymised, aggregated, or individually identified data with third-party commercial partners for marketing or research purposes. Where required by law, we will seek your explicit consent, and a clear opt-out mechanism will be provided at that time.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes set out in this Policy. Factors we consider include:
- The nature and sensitivity of the data collected
- The purposes for which data was collected and whether those purposes have been fulfilled
- Legal obligations under Indian law, including tax, financial, and regulatory record-keeping requirements
- Whether you have an active account or have engaged with the platform within the preceding 36 months
Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data.
Your Rights Under the DPDPA, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access: obtain information about the personal data we hold and how it is processed
- Right to Correction and Erasure: correct inaccurate data and request erasure of data no longer necessary
- Right to Grievance Redressal: access an effective mechanism to raise complaints
- Right to Nominate: nominate another individual to exercise your rights in the event of death or incapacity
- Right to Withdraw Consent: withdraw consent at any time without affecting the lawfulness of prior processing
- Right to Opt Out of Direct Marketing: opt out of marketing communications at any time
To exercise any of these rights, contact our Grievance Officer using the details in Section 13. We will respond within the timeframe prescribed under applicable law.
Data Security
Acoresolve Solutions implements reasonable technical, administrative, and physical safeguards to protect your personal data, including:
- Encryption of data in transit using industry-standard SSL/TLS protocols
- Access controls limiting personal data to authorised personnel on a need-to-know basis
- Regular review of data collection, storage, and processing practices
- Measures to detect, respond to, and notify you of personal data breaches as required under applicable law
No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and disclaim liability for breaches that occur despite reasonable security measures, to the extent permitted by applicable law.
Children and Minors
BesCa is not directed at children below the age of 18 years. While the platform is accessible to students for educational and financial literacy purposes, we do not process personal data of individuals below 18 years without verifiable parental or guardian consent, in compliance with the DPDPA, 2023.
If we become aware that we have inadvertently collected data from a minor without such consent, we will take prompt steps to delete such data.
Third-Party Links and Advertisements
Our platform contains links to third-party websites, including banks and financial institutions, and displays advertisements served by third-party ad networks. This Policy does not apply to the privacy practices of such third parties. BesCa and Acoresolve Solutions are not responsible for the privacy practices or content of third-party websites.
Third-party advertisers may use their own cookies and tracking technologies to collect information about your interaction with their advertisements, governed by their respective privacy policies.
Cross-Border Data Transfers
Where Acoresolve Solutions transfers your personal data to third parties located outside India (e.g., analytics or advertising partners), we ensure such transfers are carried out in compliance with the DPDPA, 2023 and any applicable rules notified by the Government of India. This section will be updated as cross-border transfer rules under the DPDPA are notified.
Grievance Officer
In accordance with the IT Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the DPDPA, 2023, the Grievance Officer for BesCa / Acoresolve Solutions can be reached as follows:
Amendments to This Policy
BesCa / Acoresolve Solutions reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or the services we offer. The revised Policy will be posted on bestcreditcardindia.com with the updated effective date.
Your continued use of the platform following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Policy periodically.
Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the IT Act, 2000, the DPDPA, 2023, and all rules and regulations made thereunder.
Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts of competent jurisdiction in Mumbai, Maharashtra, India.