Privacy Policy

Right Card (“Right Card”, “we”, “us”), operated by ZAP Private Limited (a subsidiary of Finance Buddha), is a channel partner (Direct Selling Agent) that helps you discover and apply for credit card products offered by partner banks and financial institutions. We are committed to protecting your personal data and handling it responsibly in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws.

1. Information we collect

• Details you may share: if and when you choose to share them, we may collect your name, mobile number, email, city, and employment or income details to help match a card. We collect such information only where required for the relevant purpose and through the applicable data collection/consent process. We do not collect these on the website today.
• Technical data: IP address, browser type, pages visited and device information, collected via standard web analytics.
• Credit-bureau information only if and when you expressly consent to a credit check.
• We do not store card numbers, CVV, OTP, UPI IDs or bank account details.

2. How we use your data

• To understand your requirement and suggest suitable credit card products.
• To refer or forward your application to the bank or financial institution you choose.
• To respond to your queries and provide support.
• To send updates, offers and service messages where you have consented.
• To improve our services (in aggregated, anonymised form only) and to meet legal obligations.

3. Legal basis for processing

We process your data on the basis of your consent, where required, or as necessary to provide requested services, comply with applicable law, or for other purposes permitted under the DPDP Act. Where processing is based on consent, you may withdraw it at any time.

4. How we share your data

• With the issuing bank or financial institution you choose to apply to, to process your application.
• With service providers who help us operate (such as hosting and communications), under confidentiality obligations.
• With regulatory or statutory authorities where required by law.
• We do not sell your personal data; we share personal data with our partner institutions only for the purposes disclosed to you or otherwise permitted by applicable law.

5. Consent and communication

Where we collect personal data directly from you, we will provide a notice explaining the data collected and its purpose. Where consent is required, you will be given a clear mechanism to provide or withdraw it at any time.

By submitting your details or clicking “Apply”, you authorise Right Card and its partner banks to contact you by phone call, SMS, WhatsApp and email regarding your enquiry, in accordance with your applicable consent and relevant telecom and Do-Not-Disturb requirements. You may withdraw consent or opt out at any time by writing to us (see Contact).

6. Data retention

We retain your personal data only for as long as necessary for the purposes described above and as required under applicable law, after which it is deleted or anonymised.

7. Your rights under the DPDPA

Subject to applicable law, you have the right to access the data we hold about you, request correction of inaccurate or incomplete data, request erasure of your data, seek grievance redressal, and nominate an individual to exercise your rights in the event of your death or incapacity. To exercise any of these rights, email care@card.itsright.me with the subject line “Data Rights Request”.

We may take reasonable steps to verify your identity before acting on a request and will process your request in accordance with applicable law.

8. Data security

We use reasonable technical and organisational measures — including encryption of data in transit and of sensitive data at rest, access controls, and periodic reviews — to protect your information. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities as required under applicable law.

9. Cookies and analytics

We use essential cookies for functionality and analytical cookies to understand usage. You can control non-essential cookies through your browser settings; disabling them will not affect your ability to use the website.

10. Children’s privacy

Our services are intended for adults (18 years and above). We do not knowingly collect personal data from individuals under 18 years of age.

11. Third-party websites

Links and applications on our website may take you to bank or partner websites governed by their own privacy policies. We are not responsible for their privacy practices.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page, and material changes will be communicated through a prominent notice on our website.

13. Grievance Officer / Contact

ZAP Private Limited (Right Card)
Email: care@card.itsright.me (subject line “Privacy Grievance”)
We will respond within the timelines prescribed under applicable law.

Where your query or complaint relates specifically to a bank or financial institution that has received your application or personal data, we may direct you to the relevant institution's applicable grievance mechanism.