Privacy Policy 

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. 

1. Introduction 

All Utility Collection (“we,” “our,” or “us”) provides debt collection and recovery services to businesses. In doing so, we act as a data fiduciary and/or data processor, handling personal data on behalf of and under the instruction of our clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. 

2. Our Role and Responsibilities 

As a debt collection agency, we operate in two capacities: 

  • Data Fiduciary: When we determine the purpose and means of processing personal data for our own business operations. 
  • Data Processor: When we process personal data provided by our clients (the data controllers) solely to fulfil their instructions regarding debt recovery. 

Our clients remain responsible for ensuring they have a valid legal basis for sharing personal data with us and that their own data collection practices comply with applicable laws. 

 

3. Legal Basis for Processing 

We process personal data under one or more of the following lawful grounds: 

  • Consent of the data principal where required. 
  • Performance of a contract to which the data principal is a party. 
  • Compliance with a legal obligation under Indian law. 
  • Legitimate interests pursued by us or our clients, provided such interests are not overridden by the rights and interests of the data principal. 

 

4. Data We Collect and Process 

The categories of personal data we may process include, but are not limited to: 

  • Contact details: full name, residential or business address, email address, phone number. 
  • Financial information: outstanding debt amounts, payment history, account details. 
  • Identity information: PAN card, Aadhaar number (where legally required), date of birth. 
  • Communication records: correspondence and call records related to debt recovery. 
  • Contractual information: details of the agreement between the client and the debt account holder. 

 

5. How We Use Personal Data 

We use personal data strictly for the following purposes: 

  • To contact debt account holders on behalf of our clients and communicate repayment options. 
  • To verify the identity of individuals in relation to a debt. 
  • To facilitate resolution of outstanding balances. 
  • To prepare reports and updates for our clients. 
  • To comply with legal, regulatory, and court-ordered requirements. 
  • To prevent fraud and ensure the security of financial transactions. 

We do not use personal data for marketing purposes or for any purpose outside the scope defined by our clients. 

 

6. Sharing of Personal Data 

We may share your information with: 

  • Service providers and business partners 
  • Payment processors 
  • Legal and regulatory authorities where required by law 
  • Professional advisers including accountants and solicitors 

We do not sell personal information to third parties. 

7. Data Retention 

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Upon completion of our engagement with a client, personal data is securely deleted or returned in accordance with our contractual agreements and applicable legal obligations. 

 

8. Rights of Data Principals 

Depending on applicable law, you may have rights to: 

  • Access your personal information 
  • Correct inaccurate data 
  • Request deletion of your information 
  • Restrict or object to processing 
  • Withdraw consent where applicable 
  • Lodge complaints with the relevant authority 

9. Data Security 

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include: 

  • Encryption of sensitive data in transit and at rest. 
  • Access controls and role-based permissions for employees. 
  • Regular security audits and staff training on data protection. 
  • Secure disposal of data no longer required. 

 

10. Cookies and Website Usage 

Our website (website) may use cookies and similar technologies to improve user experience. By using our website, you consent to our use of cookies in accordance with this policy. You may disable cookies in your browser settings; however, this may affect the functionality of certain website features. 

 

11. Sub-Processors and Third-Party Partners 

To deliver our services effectively, we may engage the following categories of sub-processors: 

  • Legal service providers and panel solicitors. 
  • IT support and software providers. 
  • Credit information companies and bureaus. 
  • Process servers and field agents. 
  • Cloud storage and communication service providers. 

All sub-processors are bound by appropriate data processing agreements and required to comply with applicable data protection laws. 

12. Changes to this Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be published on our website with the revised effective date. We encourage you to review this policy periodically.