Privacy Policy
At Policy Kholo ("we", "our", or "us"), your privacy is not a disclaimer; it is a core part of our promise to you. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have. By using our website (www.policykholo.com) or any of our services, you agree to the practices described in this document.
If you have any questions, contact us at: service@policykholo.com
1. Information We Collect
1.1 Information You Provide Directly
- Contact details: name, mobile number, WhatsApp number, email address, and city.
- Insurance-related details: age, date of birth, gender, smoker status, income range, and sum assured requirement.
- Query or message content submitted through our contact forms, WhatsApp flows, or chatbots.
- Feedback, reviews, or testimonials you voluntarily submit.
1.2 Information Collected Automatically
- Device and browser information: IP address, browser type, operating system, screen resolution.
- Usage data: pages visited, time spent, links clicked, referring URL.
- Cookies and similar tracking technologies (see Section 6).
1.3 Information from Third Parties
- If you interact with us via WhatsApp through tools like WATI, AiSensy, or Interakt, those platforms may share interaction data with us in accordance with their own privacy policies.
- If you arrive from a referral partner or comparison platform, we may receive limited context about your query.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide instant quotes, plan comparisons, and personalised insurance recommendations.
- To facilitate the WhatsApp-first lead flow, including sending quotes and follow-up messages.
- To connect you with our licensed insurance advisors if you have requested a consultation.
- To send you service-related communications, OTP verifications, quote confirmations, and policy reminders.
- To improve the performance, accuracy, and personalisation of our website and tools.
- To comply with applicable laws, IRDAI regulations, and regulatory reporting requirements.
- To detect and prevent fraud, misuse, or other harmful activity.
We do not sell, rent, or trade your personal information to any third party for marketing purposes. This is unconditional.
3. Our "No Spam Calls" Promise
We collect your mobile number for one reason only: to help you find the right insurance policy. We will never:
- Do not sell or share your number with external call centres or aggregators.
- Call you without your explicit prior consent.
- Enroll you in SMS or call campaigns you have not opted into.
- Any communication from Policy Kholo will come via the channel you chose: WhatsApp, email, or a scheduled callback you requested. If you ever receive an unsolicited call from someone claiming to be from Policy Kholo, please report it immediately to service@policykholo.com
4. How We Share Your Information
We share your information only in the following, limited circumstances:
4.1 With Insurance Partners
To generate quotes and enable policy purchases, we share the minimum required details (age, city, coverage requirement) with our partner insurers who are IRDAI-registered. These partners are contractually prohibited from using your data for any purpose other than servicing your quote or policy.
4.2 With Service Providers
We engage trusted technology vendors (e.g., WhatsApp automation platforms, analytics tools, hosting providers) who process data strictly on our behalf and under binding data processing agreements.
4.3 For Legal Compliance
We may disclose information if required to do so by law, court order, or a regulatory authority such as IRDAI or SEBI.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
5. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy or as required by applicable law. Typically:
- Lead and contact data are retained for up to 3 years from the date of last interaction.
- Policy-related data is retained for the duration of the policy plus a minimum of 5 years, as required by IRDAI regulations.
- Analytics and usage data are retained in anonymised form indefinitely.
You may request deletion of your data at any time (see Section 7).
6. Cookies and Tracking
We use cookies and similar technologies to improve your browsing experience and measure the performance of our content. The types of cookies we use include:
- Essential cookies: required for the website to function correctly, including form sessions and OTP flows.
- Analytics cookies: help us understand how users navigate our site (e.g., Google Analytics in anonymised mode).
- Marketing cookies: used to measure the effectiveness of our advertising campaigns. These do not track you across unrelated websites.
You can disable cookies through your browser settings. Note that disabling essential cookies may affect the functionality of our forms and calculators.
7. Your Rights
Under applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights:
- Right of Access: request a copy of the personal data we hold about you.
- Right to Correction: request that inaccurate or incomplete data be corrected.
- Right to Erasure: request deletion of your data, subject to legal retention requirements.
- Right to Withdraw Consent: withdraw consent for data processing at any time, without affecting the lawfulness of prior processing.
- Right to Grievance Redressal: Raise a complaint with our Data Protection Officer.
To exercise any of these rights, email us at Email ID with the subject line "Data Rights Request". We will respond within 30 days.
8. Data Security
We implement industry-standard security measures to protect your personal information, including SSL encryption, restricted access controls, and regular security audits. However, no method of transmission over the internet is 100% secure. We encourage you not to share sensitive financial information (such as full bank account details or Aadhaar numbers) through any channel unless specifically requested for a documented regulatory purpose.
9. Children's Privacy
Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last Updated" date at the top of this document and, where the changes are material, notify you via the email address or WhatsApp number on file.
11. Contact Us
For any privacy-related queries, complaints, or requests:
