Last updated: May 17, 2025 | Compliant with: DPDPA 2023 & DPDP Rules 2025
This Privacy Policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA) and the DPDP Rules, 2025 notified by the Ministry of Electronics and Information Technology (MeitY) on 13 November 2025.
1. Who We Are
KarjBazaar ("we", "our", "us") operates the websites karjbazaar.com and karjbazaar.in — a free online financial calculator platform for Indian borrowers and investors. Under the DPDPA 2023, KarjBazaar acts as a Data Fiduciary, determining the purpose and means of processing your personal data.
Grievance Officer / Data Protection Contact:
📧 privacy@karjbazaar.com
Response time: Within 72 hours of receipt of complaint.
2. What Data We Collect & Why (Purpose Limitation)
Under DPDPA Section 6, we collect only the minimum data necessary for specified purposes:
| Data Collected | Purpose | Legal Basis (DPDPA) |
|---|---|---|
| IP address, browser & device type | Website security & analytics | Legitimate use (Section 7) |
| Pages visited, time on site | Improve user experience | Consent (Section 6) |
| Name & email (contact form only) | Responding to your queries | Consent (Section 6) |
| Cookie preferences | Remembering your settings | Consent (Section 6) |
✅ Calculator Data: All values entered into our EMI, home loan, personal loan, car loan, SIP, and mortgage calculators are processed entirely within your browser. This data is never transmitted to, stored on, or accessed by our servers.
3. Your Rights as a Data Principal (DPDPA Chapter III)
Under the DPDPA 2023, you have the following rights as a Data Principal:
- Right to Access (Section 11): Request a summary of personal data we hold about you and how it is being processed.
- Right to Correction & Erasure (Section 12): Request correction of inaccurate data or erasure of data that is no longer needed for the purpose it was collected.
- Right to Grievance Redressal (Section 13): File a complaint with our Grievance Officer and receive a response within 72 hours.
- Right to Nominate (Section 14): Nominate another individual to exercise your rights in the event of your death or incapacity.
- Right to Withdraw Consent (Section 6): Withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to Approach the Data Protection Board: If unsatisfied with our response, you may escalate your complaint to the Data Protection Board of India.
To exercise any of these rights, contact us at privacy@karjbazaar.com. We will respond within 72 hours.
4. Consent
Where we collect your personal data, we obtain your free, specific, informed, and unambiguous consent as required under DPDPA Section 6. You may withdraw consent at any time by contacting us or adjusting your cookie preferences. Withdrawal of consent will not affect any processing done prior to withdrawal.
5. Data Retention & Deletion
We retain your personal data only as long as necessary for the specified purpose or as required by applicable law:
- Contact/enquiry data: Retained for up to 1 year from last interaction, then deleted.
- Analytics data: Retained for up to 26 months (Google Analytics default), then auto-deleted.
- Consent records: Retained for 7 years as required under DPDP Rules 2025.
- Calculator inputs: Never stored — deleted immediately from browser memory when you close the tab.
Upon withdrawal of consent or on your request, we will delete your personal data within 30 days and direct our data processors to do the same.
6. Data Security & Breach Notification
We implement reasonable technical and organisational security safeguards to protect your personal data, including HTTPS encryption, access controls, and regular security reviews.
In the event of a personal data breach, we will:
- Notify the Data Protection Board of India within 72 hours of becoming aware of the breach.
- Notify affected Data Principals without undue delay as required under DPDPA.
- Document the breach and remedial steps taken.
7. Children's Data (DPDPA Section 9)
KarjBazaar does not knowingly collect personal data from individuals under the age of 18 years. Under DPDPA Rule 10, processing of a child's data requires verifiable parental consent. If we become aware that we have inadvertently collected data from a minor without parental consent, we will delete it immediately. Parents or guardians may contact us at privacy@karjbazaar.com.
8. Third-Party Data Processors
We engage the following third-party data processors who process data on our behalf under contractual obligations consistent with DPDPA requirements:
- Google Analytics – website usage statistics (anonymised)
- Google AdSense – contextual advertising
- Cloudflare – website security and performance (CDN)
Each processor is bound by contractual obligations to process data only as instructed by us and in compliance with applicable law.
9. Cross-Border Data Transfers
Some of our third-party processors (such as Google) may process data outside India. Such transfers are made only to countries not restricted by the Central Government under DPDPA Section 16, and are governed by appropriate data processing agreements.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via a notice on our website. The updated policy will be effective from the date of publication.
11. Contact & Grievance Redressal
For any privacy concerns, data requests, or complaints:
📧 Grievance Officer: privacy@karjbazaar.com
⏱ Response within: 72 hours
🌐 karjbazaar.com
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India at www.meity.gov.in.