Privacy policy

LenderKart (“LenderKart”, “we”, “our” or “us”) is a decision engine for lending and debt-advice funnels. We are operated from Delhi, India by MediaMen Services, and we provide our software to agencies, brokers and lenders who use it to score and route loan enquiries.

This policy explains what we do with personal information when you visit lenderkart.com, when you contact us, and when personal information passes through the decision engine we run for a client.

The distinction matters, because it decides who you should contact about your data.

We are the controller for information about this website, our marketing and our client relationships. That means the enquiries you send us, the emails you exchange with our team and the analytics we collect on lenderkart.com.

We are a processor for the loan applicant data that flows through the engine. When you complete a form on a client’s website and that enquiry is scored and routed by LenderKart, the client, not LenderKart, decides why and how that data is used. We act only on their documented instructions under a data processing agreement. If you are an applicant asking about your enquiry, contact the company whose website you applied on. If you are not sure who that is, write to us and we will point you to them.

From visitors and prospective clients

• Contact details you give us: name, work email, phone number, company and role.
• The content of your enquiry and any subsequent correspondence with our team.
• Technical and usage data: IP address, browser and device type, referring page, pages viewed and time on page.

From our clients, as a processor

• Applicant details submitted to a client's form: name, contact details, address, date of birth, employment and income details, and the loan or debt amounts relevant to the enquiry.
• Decision data generated by the engine: scores, rule outcomes, which lenders were called, the offers returned and the route the lead took.
• Campaign metadata: lead source, campaign identifiers and timestamps.

Financial-circumstance data of this kind is sensitive in practice even where it is not a special category under data protection law, and we treat it accordingly. We do not knowingly ask for special category data such as health information, and clients should not send it to the engine.

As a controller, we use personal information to:

• Reply to your enquiry and run the commercial conversation that follows.
• Provide, support and improve the LenderKart platform for our clients.
• Keep the website secure, diagnose faults and understand which pages are useful.
• Meet our legal, regulatory, accounting and contractual obligations.

Our lawful bases are: legitimate interests in running and marketing a business-to-business software product; performance of a contract where you are a client; consent for any non-essential cookies and marketing email, which you can withdraw at any time; and legal obligation where a law requires us to keep or disclose records.

As a processor, we use applicant data solely to run the routing our client has configured: scoring the enquiry, calling the lender panel, returning offers and syncing the result to the systems the client has nominated. We do not use applicant data to train models for other clients, we do not sell it, and we do not use it for our own marketing.

We never sell or rent personal information. We share it only:

• With lenders and partners on a client's panel, where routing an enquiry to them is the whole point of the request.
• With the CRM and marketing systems a client has connected to their account.
• With service providers who host, secure, monitor or support the platform, under contracts that bind them to equivalent protections.
• With professional advisers such as auditors and lawyers, where necessary.
• Where the law requires it, or to establish, exercise or defend legal claims.

We operate from India and serve clients in the United Kingdom, the European Economic Area and elsewhere, so personal information may be transferred across borders. Where data is transferred out of the UK or the EEA, we rely on appropriate safeguards, including the UK International Data Transfer Addendum or the European Commission’s Standard Contractual Clauses, together with technical measures such as encryption. Clients can ask us for details of the safeguards applying to their account.

We keep information only as long as we have a reason to, then delete it or anonymise it.

• Website enquiries and marketing correspondence: up to 24 months after the last contact.
• Client account and contract records: for the life of the contract, then up to 7 years for tax and audit purposes.
• Applicant and decision data processed on a client's behalf: for the retention period that client sets in their configuration, and deleted or returned on termination of their contract.
• Server and security logs: typically 90 days.

Data is encrypted in transit with TLS and at rest in our databases. Access is restricted to the people who need it, protected by role-based permissions and multi-factor authentication, and logged. Environments are separated, credentials are rotated, and changes to the platform go through review before release. No system is perfectly secure, so we also maintain an incident response process and will notify affected clients and, where required, the relevant regulator without undue delay.

lenderkart.com uses a small number of cookies and similar technologies. Strictly necessary ones keep the site working and secure. Analytics cookies help us understand which pages people read, in aggregate.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site working. Where non-essential cookies are used, we ask for your consent first and you can withdraw it at any time.

Depending on where you live, you may have the right to ask us to:

• Give you a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete information where we no longer need it.
• Restrict or object to how we use it, including for direct marketing.
• Receive it in a portable format, or have it sent to another provider.
• Withdraw consent you have given, without affecting what we did before you withdrew it.

To exercise any of these, email aanand@lenderkart.com. We may need to verify your identity first. If your request concerns an enquiry you submitted on a client’s website, we will pass it to that client, who is the controller for it, and support them in answering you.

If you are in the UK you can complain to the Information Commissioner’s Office at ico.org.uk. In the EEA you can complain to your national supervisory authority. In India you may contact the Data Protection Board. We would rather hear from you first, so please give us a chance to put things right.

LenderKart is a business product and the funnels it supports are for adults seeking credit or debt advice. We do not direct our services to anyone under 18 and we do not knowingly collect their personal information. If you believe a child’s data has reached us, tell us and we will delete it.

We update this policy when our product or our obligations change. The date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell affected clients directly rather than relying on you to notice.

For anything in this policy, including data protection requests and processing agreements:

• Email: aanand@lenderkart.com
• Postal: LenderKart, Delhi, India