Withdraw Bureau Consent
You have the fundamental right to withdraw your consent for credit bureau data processing at any time. This page explains the purpose, legal basis, process, and consequences of consent withdrawal, and provides a secure form to submit your request.
What Is Bureau Consent?
Understanding what you agreed to and why
When you use InstaEMI's services to check your CIBIL score, apply for a loan, or compare credit products, you provide explicit consent allowing us to access your Credit Information Report (CIR) from TransUnion CIBIL. This consent typically authorises:
Credit Data Access
Fetching your CIBIL score and detailed credit report from TransUnion CIBIL's database
Data Processing
Analysing your credit profile to match you with suitable loan products and offers
Data Storage
Securely storing your credit information for the duration of your active engagement
Report Generation
Creating credit assessment reports used in loan eligibility evaluation
This consent is collected in accordance with TransUnion CIBIL's member agreement requirements, the Credit Information Companies (Regulation) Act 2005 (CICRA), and the Digital Personal Data Protection Act 2023 (DPDP Act). Your consent is time-bound, purpose-limited, and fully revocable.
Legal Basis & Your Rights
Regulatory framework governing consent withdrawal
DPDP Act 2023 (India)
Section 6(5) of the Digital Personal Data Protection Act 2023 explicitly states that a Data Principal (you) has the right to withdraw consent at any time. Upon withdrawal, the Data Fiduciary (InstaEMI) must cease processing your personal data and erase all data that was collected solely on the basis of that consent, unless retention is required by law. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
GDPR (EU) — Global Best Practice
Article 7(3) of the EU General Data Protection Regulation establishes that consent withdrawal must be as easy as giving consent. Article 17 (Right to Erasure / “Right to be Forgotten”) further requires controllers to erase personal data without undue delay when consent is withdrawn and no other legal basis applies. InstaEMI follows these principles as a global data protection standard.
CICRA & TUCIBIL Guidelines
The Credit Information Companies (Regulation) Act 2005 and TransUnion CIBIL's member agreement require all credit institutions to obtain explicit, informed consent before accessing a consumer's credit information. TUCIBIL mandates that members honour withdrawal requests and maintain an audit trail of all consent activities, including the original grant, any modifications, and the withdrawal.
RBI Data Privacy Directions
The Reserve Bank of India's directions on data privacy and customer protection require regulated entities and their agents to ensure that customer data is used only for the stated purpose. The RBI's Digital Lending Guidelines (2022) mandate that borrowers must have the ability to accept or deny consent for data collection. Upon denial or withdrawal, data previously collected must be deleted.
In summary: Withdrawing consent is your legally protected right. You do not need to provide a reason, and there is no penalty for exercising this right. The withdrawal will not affect any past processing that was lawfully carried out while your consent was active.
What Happens When You Withdraw Consent?
Consequences and what is retained
Data That Will Be Permanently Deleted
- Your CIBIL TransUnion Score stored in our systems
- Your detailed Credit Information Report (CIR) data
- Any credit analysis or assessment reports generated from your bureau data
- Score history and trend data linked to your profile
- Pre-approved or pre-qualified loan offers based on your credit profile
Data Retained for Legal & Audit Purposes
In accordance with regulatory requirements, we retain a minimal audit trail even after consent withdrawal. This is legally required under TUCIBIL's member agreement, the DPDP Act (Section 8), and RBI directions:
- Record that consent was originally given (date, time, method)
- Record that consent was withdrawn (date, time, IP address, device info)
- Your identity verification details (name, PAN — masked) for dispute resolution
- OTP verification status for the withdrawal request
Impact on Your Services
- Any active loan applications that rely on your credit report may be affected or paused
- You will no longer see your credit score on your InstaEMI dashboard
- Personalised loan offers based on your credit profile will no longer be available
- You can provide fresh consent at any time in the future to restore these services
- This does not affect your CIBIL score at TransUnion CIBIL — your credit history and score at the bureau remain unchanged
How the Withdrawal Process Works
Step-by-step overview of the process below
Identify Yourself
Enter your registered email address, mobile number, and PAN card number. We use these details to securely locate your consent record in our system.
Review & Acknowledge
Once your record is found, review the consequences of withdrawal. You must explicitly acknowledge that you understand your credit data will be permanently deleted.
OTP Verification
A one-time password is sent to your registered mobile number. This step ensures that only you can authorise the withdrawal, preventing unauthorised requests.
Confirmation & Audit
Upon successful verification, your credit data is permanently deleted. A withdrawal receipt is generated with your request ID, timestamp, and audit details for your records.
Security & Audit Trail
For TUCIBIL compliance and audit purposes, we securely capture and store the following with every withdrawal request: IP address, device type & browser information, geolocation (city/region level), timestamp, and OTP verification status. This audit trail is retained as per regulatory requirements and cannot be deleted.
Withdraw Bureau Consent
You have the right to withdraw your CIBIL / Credit Bureau data consent at any time. Once withdrawn, your bureau data will be permanently deleted from our systems.
Find Your Record
Enter your details to locate your bureau consent record
Why do we need this information?
We use your email, mobile number, and PAN to locate your existing bureau consent record in our system. This ensures we process the correct withdrawal request.
This consent withdrawal facility is provided in compliance with TUCIBIL regulations and data protection guidelines. For any queries, contact us at [email protected]
Frequently Asked Questions
Common queries about consent withdrawal
Is consent withdrawal the same as deleting my CIBIL score?
No. Withdrawing consent from InstaEMI deletes your credit data from our systems only. Your CIBIL score and credit history at TransUnion CIBIL remain completely unaffected. We are an intermediary — we do not create or modify your credit score at the bureau.
Can I give consent again after withdrawing it?
Yes, absolutely. You can provide fresh consent at any time in the future by using our CIBIL Score Check service again. You will need to go through the standard consent and verification process once more.
Will my active loan application be affected?
If you have an active loan application that relies on the credit report we fetched, withdrawing consent may impact its processing. We recommend completing any active applications before withdrawing consent, or consulting with your assigned advisor.
How long does the withdrawal process take?
The withdrawal is processed immediately upon successful OTP verification. Your credit data is permanently deleted from our systems in real-time. The audit trail is generated and stored simultaneously.
Why do you need my PAN to process the withdrawal?
Your PAN is a unique identifier used to locate your consent record accurately. It ensures we process the withdrawal for the correct individual and prevents unauthorised requests. The PAN is masked in our audit records.
Why do you capture my IP address and device information?
This is a regulatory requirement under TUCIBIL's member agreement and the DPDP Act. The audit trail (IP address, device info, timestamp) provides evidence that the withdrawal was genuinely requested by you, protecting both you and us from disputes.
What if I cannot find my record?
If our system cannot locate a consent record matching your details, it may mean: (a) you have not previously used our CIBIL check service, (b) your details do not match our records, or (c) consent was already withdrawn. Please verify your details and try again, or contact us at [email protected] for assistance.
Is there any charge for withdrawing consent?
No. Consent withdrawal is completely free of charge. Under the DPDP Act 2023, you have the right to withdraw consent without any cost or penalty.
Can I withdraw consent for a specific loan application only?
Currently, consent withdrawal applies to all bureau data stored against your identity in our systems. We cannot selectively withdraw consent for a single application while retaining it for others. This is because the underlying credit report is the same across all applications.
What is the legal basis for retaining the audit trail after withdrawal?
Section 8(3) of the DPDP Act 2023 allows retention of personal data where it is necessary for compliance with legal obligations. TUCIBIL's member agreement and the CICRA require us to maintain records of all consent activities (grant, modification, withdrawal) for audit and regulatory examination. The retained data is minimal and does not include your actual credit score or report.
Need Help or Have Questions?
If you have any questions about consent withdrawal or need assistance with the process, you can reach us through:
- • Email: [email protected]
- • Phone: +91-7337411777 (Mon–Sat, 10 AM – 7 PM)
- • Grievance Officer: [email protected]
For detailed information about our complaint resolution process, visit our Grievance Redressal page.
This consent withdrawal facility is provided in compliance with the DPDP Act 2023, TUCIBIL regulations, and international data protection best practices. Last updated: August 2026.