Modernizing Credit Decisioning: A Practical Guide to Deploying a Standalone Business Rules Engine
As lending models evolve and borrower expectations rise, BFSI institutions face growing
Discover all →Wonderlend Hubs Private Limited (and/or its affiliates) (“Company”, “we”, “us”, “our” and their respective connotations) operates the website located at www.wonderlendhubs.com and such other websites, applications, products and services as may be provided by us from time to time (collectively, the “Platform”) for providing the Services (defined below). The Platform gathers certain information with prior consent from (a) persons who visit, access or use the Platform or any of the services we provide through the Platform, and (b) any other visitors of the Platform (collectively, “Users”, “you” and their respective connotations).
We are engaged in the business of developing and providing various information technology products and services, including the managed services (“Services”).
This privacy policy (“Policy”) governs your visit to and access to our Platform, and explains how we collect, safeguard, use and disclose information that results from your use of our Platform. We use your data to provide and improve our Platform and Services. By using the Platform, you agree to the collection and use of information, including personal data (defined below), in accordance with this Policy.
By using the Platform, you agree to the collection and use of information and personal data (defined below) in accordance with this Policy. Unless otherwise defined in this Policy, terms used in this Policy have the meanings given to them in our terms and conditions (“Terms”) which, together with this Policy, constitute your agreement with us (“Agreement”).
1. Definitions
For the purposes of this Policy:
“Cookies” are small files that a site or its service provider transfers to your device (computer or mobile device) or its hard drive through your web browser, only if you allow the same. They enable the site’s or service provider’s systems to recognise your browser and capture and remember certain information.
“Data Controller” means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. Depending on the context (for example, marketing, website analytics, account administration), WonderLend Hubs may act as a Data Controller. Our enterprise customers typically act as controllers of the data they provide to the Platform, with the Company acting as a processor on their behalf.
“Data Processor” means any natural or legal person who processes data on behalf of a Data Controller. We may use Service Providers to process data more effectively (e.g., hosting, analytics, email delivery).
“Personal Data” / “Personal Information” means any information that relates to an identified or identifiable individual and that is protected as personal data or personal information under applicable data protection laws, including identifiers such as name, email address, phone number, online identifiers, and other information as described in this Policy.
2. Scope of this Policy
This Policy applies to all the Company websites that link to it, and to the products and services provided by us through these websites, our web-based dashboards and applications, and any other tools that we make available as part of our Platform.
This Policy applies to Personal Data and content we collect:
- based on your use of the Platform and Services; and
- in communications (including email, text, and other electronic messages) between you and us through or in relation to the Services, such as web forms or chat on the Platform, and through social media/comment features that link to this Policy.
This Policy does not apply to information collected by:
- us offline or through any other means, including on any other website or app operated by us or any third party; or
3. Your Consent
You will be deemed to have read, understood and agreed to the terms of this Policy once you provide your consent or continue using the Platform after this Policy is presented to you. By granting your assent to this Policy, you consent to the collection, use, processing, storage and disclosure of Personal Data as described in this Policy.
We reserve the right to update or change this Policy at any time, and you should review this Policy periodically. To inform you of any material change in the way we collect or process your information, we will post the updated Policy on the Platform, indicating the date on which it was updated, and we will endeavour to notify you by email and/or a prominent notice on the Platform on a best-efforts basis. Continued use of the Platform and/or Services after such changes will constitute your acknowledgment of, and your consent to abide and be bound by, the modified Policy.
4. Opt-out
Continued use of the Platform and access to the Services will constitute the Users’ acknowledgment of, and their consent to abide and be bound by, this Policy, as amended by us from time to time. Users have the right to opt out of the Platform and discontinue to use the Services at such time as they deem fit. In addition, the Users can, by sending an email to sales@wonderlendhubs.com], inquire whether the Company is in possession of their Personal Data, and they may also require the Company to delete and destroy all such information, upon request.
5. Information We Collect
We collect information from and about Users of our Platform in three main ways: (a) information you provide to us, (b) information collected automatically, and (c) information we receive from third parties. Some of this information will be Personal Data.
5.1. Information you provide to us
- Account Information. Users who choose to register on the Platform will be required to provide a valid email address or phone number. You may also choose to provide your name, organisational affiliation, role/designation, and/or add a profile picture that will be used to represent you within the Platform. If you choose to sign up or log in using an external authentication service (for example, single sign-on), we may fetch and store your email address, name and/or profile image URL from such service, as permitted by that service.
- Customer Data (Client-Provided Data). Our customers and their authorised users may upload, submit or otherwise process through the Platform various data relating to their internal processes and workflows, which may include identifiers and records relating to their employees, agents, intermediaries, partners, customers and prospects, and similar business data as determined by such customers. In relation to such data, those customers generally act as controllers and the Company acts as a processor on their behalf, in accordance with applicable law and our contracts with those customers.
- Communications. If you contact us (for example, for support, sales or general enquiries), we may receive additional information about you such as your name, email address, phone number, the content of the message and any attachments you send us, and other information you choose to provide.
- Feedback and Content. You may also provide information to us through your use of the Services, including feedback, survey responses, comments, configuration preferences, and other information in your account profile.
5.2. Information collected automatically
- Usage and Log Information. We may collect information about your interactions with the Platform and Services, including the pages or content you view, features you use, the date and time of your visits, the frequency and duration of your activities, and other usage data. This information helps us understand how the Platform is used and to improve them, including by displaying analytics where relevant.
- Device and Technical Information. We may collect information about the device you use to access the Platform, such as IP address, browser type, operating system, device identifiers, language preferences and other technical data.
- Cookies and Similar Technologies. Third parties may collect certain information by way of cookies and similar technologies through our Platform, for purposes including advertising, marketing and data analytics. Cookies help us recognise you, remember your preferences, and improve user experience.
5.3. Information from third parties
- Enterprise Customers and Organisations. Our customer organisations may provide us with information about you in order to create or manage your account, configure roles and permissions, or set up workflows on the Platform.
- Service Providers. We may receive information about you from our Service Providers who assist us in providing the Services (for example, analytics providers, hosting providers or identity providers), in accordance with their privacy policies and our agreements with them.
If we suspect that the information provided by any User is misleading, inaccurate, obsolete or incomplete, we reserve the right to refuse provision of the Services to such User at our sole discretion without incurring any liability. We will not be liable for reliance on or consequences of any misleading, inaccurate, obsolete or incomplete information provided by Users.
6. How and Why We Use Your Personal Data
We collect and process Personal Data only where necessary and for the purposes described in this Policy or otherwise notified to you. In particular, we use your Personal Data for the following purposes:
- To provide, operate, maintain, secure and improve the Platform and Services, and to enable our customer organisations and their authorised users to configure and use the Platform as intended.
- To create and manage your account, authenticate your access, maintain records, and provide you with an efficient, safe and customised experience while using the Platform.
- To communicate with you about the Services you use, including sending transactional messages, updates about changes to this Policy or the Terms, security alerts and other important notices; and, where permitted, to keep you posted on new products and services, upcoming events, offers, promotions and other information we think will be of interest to you or your organisation.
- To ask you to participate in surveys, or to solicit feedback on our products and services, and to use such feedback (“Feedback”) to improve and develop our offerings.
- To analyse overall trends and usage patterns to help us improve the Platform, including displaying analytics where applicable; and to develop new features and capabilities.
- To verify your identity; detect, prevent and respond to fraud, abuse, security incidents and other harmful or unlawful activity; and to investigate and remediate such issues.
- As we believe necessary or appropriate and only as permitted under applicable law:
- to comply with legal process;
- to respond to requests from public and government authorities, including those outside your country of residence;
- to protect our operations;
- to protect our rights, privacy, safety or property, and/or that of our customers and Users; and
- to transfer data and associated rights to a third party as part of a reorganisation or sale of assets of any division of the Company.
- We may use Personal Data, including sensitive information, to create non-identifiable “aggregate data” or de-identified data for purposes of research, analysis and marketing. This Policy does not apply to our use of aggregated or de-identified information that no longer identifies any individual.
- In any other way consistent with this Policy and to support the above activities, or for any other purpose disclosed to you at the time we collect your Personal Data or otherwise with your consent where required by law.
We normally collect or use Personal Data from you or others only where we have your consent to do so, where we need the Personal Data to perform a contract with you or your organisation, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may have a legal obligation to collect or retain Personal Data or may need it to protect your vital interests or those of another person.
7. How Long We Retain Your Personal Data
We keep your Personal Data for no longer than necessary for the purposes for which it is processed, taking into account the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal, regulatory, contractual or operational retention requirements.
Please note that we may hold anonymized data, that at one point originated from you, but as the data is truly anonymized it no longer constitutes Personal Data and we can keep it for as long as it is relevant to our business purposes.
8. How We Protect Your Personal Information?
The security of Personal Data is important and we have implemented reasonably sufficient means to protect the same, including access controls and data encryption. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure and we cannot guarantee its absolute security. We have implemented best industry practices and security policies, rules and technical measures to protect the data, including Personal Data, that is under the Company’s control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. However, for any data loss or theft due to unauthorized access to the Users’ electronic devices through which the Users avail the Services, we shall not be held liable for any loss whatsoever incurred by the Users or any third-party.
9. Disclosure of the Information Collected
We may disclose Personal Data that we collect or that you provide as described in this Policy to the following categories of recipients:
- Customer Organisations. If you access the Platform and Services as an authorised user of a customer, we may share certain information with that customer organisation, such as your account information, usage logs and analytics, as necessary to provide the Services and to enable your organisation to manage its use of the Platform.
- Service Providers. We may employ third-party companies and individuals to facilitate the Services, provide services on our behalf, perform Service-related ancillary services or assist us in analysing how the Services are used (“Service Providers”). These Service Providers may include hosting and infrastructure providers, analytics providers, logging and error monitoring tools, communication tools and other technology platforms. The Service Providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Professional advisers. We may disclose information to our professional advisers, such as lawyers, auditors and consultants, where necessary for them to provide their services to us and subject to appropriate confidentiality obligations.
- Authorities. We may disclose information to law enforcement, governmental authorities, regulators or courts where we believe disclosure is necessary or appropriate to comply with applicable law or legal process, to respond to valid requests, or to protect the rights, property or safety of the Company, our customers, Users or others.
- Business transfers. In connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, reorganisation, or other business transaction involving the Company, Personal Data may be disclosed or transferred to a third party as part of that transaction, subject to the continuation of protections substantially similar to those described in this Policy.
10. Service Providers
We use third-party Service Providers to support the operation, development and improvement of our Platform and Services, including hosting and infrastructure, deployment, monitoring, logging, analytics, crash/error reporting, and similar functions.
These Service Providers may process limited Personal Data in connection with their services to us, in accordance with their privacy policies and our agreements with them. We encourage you to review and confirm your acceptance of the latest terms and privacy policies of such Service Providers, where you interact with them directly, as available on their respective websites or platforms.
11. Payments
We may provide paid products and/or services, including payment-based subscription models for access to certain features of the Platform or to certain Services, or to the entire Platform. In that case, we may use third-party services for payment processing (for example, payment processors).
When payment information is being transmitted on or through the Platform, it will be protected by encryption technology of a third-party payment services providers, including payment gateways. You agree, acknowledge and consent to such sharing of your information with third party service providers to process payments and manage your payment-related information. We do guarantee that the transmissions of your payment-related information or other information will always be secure.
12. Your Rights and Choices
12.1. Control over your information
You have control over the Personal Data you submit to us, subject to our role and our contractual obligations to customer organisations. Depending on applicable laws, you may have the following rights:
- Right of Access. You have the right to request that we provide you with a copy of your Personal Data that we hold, and information about: (a) the categories and specific pieces of Personal Data we process about you; (b) the purposes of the processing; (c) the categories of recipients of your Personal Data; and (d) where applicable, the legal bases for processing.
- Right to Rectification. You have the right to rectify inaccurate Personal Data and, considering the purposes of the processing, to have incomplete Personal Data completed, including by providing a supplementary statement. We may seek to verify the accuracy of the data before rectifying it.
- Right to Deletion / Erasure. You may request that we delete your Personal Data in certain circumstances (for example, when it is no longer necessary for the purposes for which it was collected or when you withdraw consent where consent was the legal basis), subject to applicable legal obligations.
- Right to Restrict or Object to Processing. You may have the right to restrict or object to certain types of processing, particularly where we rely on legitimate interests as the legal basis.
- Right to Data Portability. Where technically feasible and required by law, you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format and to transmit it to another controller.
