Privacy Policy

How we collect, use, store and protect your personal data — written in plain language.

Baap of Recovery respects your privacy. This notice explains, in simple words, what personal data we collect through this website and our services, why we collect it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its Rules.

1. Who we are

Baap of Recovery (“BOR”, “we”, “us”) runs the website baapofrecovery.com and provides debt settlement consultation, recovery harassment support and legal notice reply services across India. For the personal data described here, we are the Data Fiduciary.

Contact: allen@baapofrecovery.com · WhatsApp / Phone: 7718970312

2. Personal data we collect

  • Contact form: your name, email address, subject and message.
  • Payment confirmation: your name, WhatsApp number, email (optional), the plan you chose, the amount, and your UPI transaction ID.
  • Your case details that you share with our experts (on WhatsApp, calls or email): for example your loan and credit card accounts, lender names, outstanding amounts, legal notices, court papers, and details of recovery calls or visits.
  • Data rights requests: your name, contact details and what you are asking for.
  • Consent records: what you agreed to, when, the notice version, and a scrambled (one-way hashed) form of your IP address — so we can prove your choice.
  • Technical data: server logs (IP address, browser type, pages visited, date and time) kept for security and to prevent misuse.
  • Analytics data — only if you allow it: Google Analytics cookies that count visits and show which pages are useful.

We never ask for your UPI PIN, OTP, card number, CVV or net-banking password. Anyone asking for these in our name is not us.

3. Why we use your data

  • To reply to your enquiry.
  • To verify your payment and register you for the plan you paid for.
  • To deliver our services — consultation, handling recovery calls (including call forwarding), replying to legal notices, arranging advocates, and negotiating settlements with your lenders.
  • To keep the website secure, stop spam and fraud, and keep required records.
  • To comply with the law, court orders or requests from authorities.
  • To understand website visits (Google Analytics) — only with your consent.

We process your data on the basis of your consent, or for legitimate uses allowed by the DPDP Act — for example, where you have voluntarily given us your data for a specific purpose, or where the law requires it. We collect only what is needed for these purposes. We do not sell your data, and we do not use it for unrelated advertising.

4. Who we share it with

  • Our team and panel advocates working on your case.
  • Your lenders, their recovery agents, courts or authorities — only what is needed to represent you, negotiate, or respond on your behalf.
  • Service providers (Data Processors) that help us run the service, under contracts that require them to protect your data: our web hosting and email provider (Hostinger); Google (Analytics, only if you consent; YouTube videos, only if you play one); Meta (Facebook videos, only if you play one; WhatsApp, when you message us).
  • Government or law enforcement when required by law.

Some providers may store data on servers outside India. Any such transfer will follow the DPDP Act and any restrictions notified by the Government of India.

5. Cookies & videos

  • Essential: a small cookie (bor_consent) that remembers your privacy choice. Always on.
  • Analytics: Google Analytics cookies (_ga, _ga_*) — set only after you click “Accept” or switch Analytics on.
  • Media: Facebook and YouTube videos load only when you tap a video (or if you allowed Media). These providers may then set their own cookies.

You can change your choice any time using (also in the footer).

6. How long we keep your data

  • Website enquiries and data rights requests: deleted automatically about 12 months after they are received, unless they become part of an active case.
  • Payment records: kept for as long as required under tax and accounting laws.
  • Case details: kept while your case is active and for up to 12 months after it is closed, then deleted, unless the law requires us to keep them longer.
  • Consent records and security logs: kept for at least one year, as required by the DPDP Rules.

If you withdraw consent or ask us to erase your data, we will delete it unless we must keep it by law.

7. How we protect your data

We use reasonable security safeguards, including HTTPS encryption on the whole website, access limited to authorised team members only, strong passwords and two-step login for admin accounts, spam and abuse protection on forms, regular backups, and activity logs. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as required by law.

8. Your rights

Under the DPDP Act you have the right to:

  • Access — get a summary of your personal data we hold and what we do with it.
  • Correct, complete or update your data.
  • Erase your data when it is no longer needed.
  • Withdraw consent — as easily as you gave it. This does not affect what was done before you withdrew, and we may not be able to continue a service that needs that data.
  • Grievance redressal — raise a complaint with us and get a response.
  • Nominate someone to use these rights for you in case of death or incapacity.

To use any of these rights, fill the form on our Your Data Rights page or email our Grievance Officer. We will reply as soon as possible and in any case within 90 days.

9. Children

Our services are only for adults (18 years and older). We do not knowingly collect personal data of children. If we learn that we have, we will delete it.

10. Grievance Officer

Allen
Email: allen@baapofrecovery.com

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after first contacting us.

11. Changes to this notice

We may update this notice when our services or the law change. The date at the top shows the latest version. If a change affects how we use data you have already given us, we will ask for your consent again where required. This notice is in English; contact us if you would like it in another language listed in the Eighth Schedule of the Constitution.