Privacy policy.

1. Who we are

This policy applies to Cred Sec Solutions (“we”, “us”, “our”), operating this website and providing debt recovery, repossession, legal management support, call centre and consulting services.

We act in two distinct capacities. As a data fiduciary, we decide how personal data collected through this website and in our own business dealings is handled. As a data processor, we handle debtor and portfolio data strictly on the documented instructions of the client who engaged us, under a written services agreement.

India

2. What we collect

Information you give us

• Name, email address and phone number submitted through our enquiry form.
• The service you select and the details you choose to write in your message.
• Correspondence with us by email, phone or messaging channels.

Information collected automatically

• A session identifier used to count each article read only once per browser session.
• Standard server log data — IP address, browser type, referring page and timestamps — retained for security and diagnostics.
• Analytics data, but only where you have accepted analytics cookies.

Client and debtor data

Where a client engages us for recovery, we process the personal data contained in the portfolio they transfer to us — such as borrower contact details, account and repayment history. We process this only for that engagement, and never for our own marketing.

3. How we use it

• To respond to your enquiry and provide the services you ask for.
• To perform a contract with you, or take steps at your request before entering one.
• To meet legal, regulatory, audit and record-keeping obligations.
• To secure, maintain and improve this website.

We do not sell personal data. We do not use the details you send through this website for unrelated marketing, and we do not make decisions producing legal effects about you by automated means alone.

4. Cookies and analytics

We set a small number of strictly necessary cookies so the site functions — maintaining your session and protecting forms against cross-site request forgery. These cannot be switched off without breaking the site.

Analytics cookies are optional and load only after you accept them. If you decline, no analytics script is loaded at all. You can change your choice at any time using cookie settings, or by clearing this site's data in your browser.

5. Sharing and disclosure

We share personal data only where there is a clear reason to:

• Service providers — hosting, email and analytics providers acting on our instructions under confidentiality obligations.
• Clients — where we act as processor, reporting recovery activity back to the client who engaged us.
• Professional advisers — lawyers, auditors and insurers where necessary.
• Authorities — where disclosure is required by law, court order or a lawful regulatory request.

6. Retention

Enquiry records are kept only as long as needed to deal with your enquiry and for a reasonable period afterwards for audit purposes. Engagement records are kept for the term of the agreement and any statutory retention period that follows. When data is no longer needed it is securely deleted or returned to the client.

7. Security

We apply organisational and technical safeguards proportionate to the sensitivity of the data — encrypted transport, access controls on a need-to-know basis, staff confidentiality obligations and logging of access to recovery systems. No system is perfectly secure, and we will notify affected parties and the relevant authority where the law requires it.

8. Your rights

Subject to applicable law, you may ask us to:

• confirm what personal data of yours we hold, and give you access to it;
• correct data that is inaccurate, incomplete or out of date;
• erase data where we no longer have a lawful reason to keep it;
• withdraw a consent you previously gave, without affecting prior processing;
• nominate another person to exercise your rights if you are unable to.

Where we hold your data as a processor for a client, we will refer your request to that client and support them in answering it.

9. Grievance redressal

To exercise a right, or to raise a concern about how we have handled personal data, contact our grievance officer at hello@credsecintec.com. We acknowledge requests promptly and aim to resolve them within the timeframes set by applicable law. If you are not satisfied with our response, you may escalate to the relevant data protection authority in India.

10. Changes to this policy

We update this policy when our practices or the law change. The current version always appears on this page, with the last revision date shown above. Material changes will be brought to the attention of clients we have an active engagement with.