Privacy Policy
1. Introduction
This Privacy Policy explains our practices regarding the collection, usage, and sharing of your information
when
you access our website, App for different services. By using our services, you agree to the terms outlined
in
this policy and our terms of use.
2. Definitions
Personal Data: Information that can identify an individual, either directly (e.g., name) or indirectly
(e.g.,
unique identification number).
Processing: Any activity performed on personal data, whether automated or manual, including
collection,
recording, storage, modification, and deletion.
Data Subject: The individual whose personal data is being processed.
3. Data Collection
We collect various types of personal data for several reasons, such as:
- • Verifying the identity of individuals applying for personal loans.
- • Evaluating the creditworthiness of applicants.
- • Processing and managing loan applications.
- • Servicing existing loans and providing customer support.
- • Ensuring compliance with legal and regulatory requirements.
The personal data we may collect includes, but is not limited to:
- • Contact Information: Name, address, email, and phone number.
- • Financial Information: Income, expenses, credit history, and other financial details.
- • Identification Information: Government-issued identification, such as a PAN, Driving License or
passport.
- • Employment Information: Employment status, employer details, and income.
- • Loan Information: Details related to loan transactions and history.
4. Legal Basis for Processing
We process personal data based on the following legal grounds:
- • Contractual Necessity: To fulfill our obligations under contracts with data subjects, such as
processing loan
applications.
- • Legal Compliance: To meet legal requirements and comply with regulatory obligations.
- • Consent: With the explicit consent of the data subject, when necessary.
- • Legitimate Interests: For purposes such as fraud detection, risk assessment, and enhancing
security
measures.
5. Data Security
We take data security seriously and implement a range of measures to protect personal data from unauthorized
access, misuse, or disclosure. These measures include:
- • Encryption: Data is encrypted both during transmission and while at rest.
- • Security Assessments: Regular security evaluations and audits are conducted to identify and
address
potential
vulnerabilities.
- • Access Controls: Strict access controls and authentication procedures are in place to ensure
that only
authorized personnel can access personal data.
- • Employee Training: Ongoing training programs ensure that our employees are knowledgeable about
data
protection
and security best practices.
6. Data Sharing
We may share personal data with third parties under specific circumstances, including:
- • Financial Institutions: Lending partners and financial institutions involved in loan processing
and servicing.
- • Credit Bureaus: Agencies that assess creditworthiness and maintain credit reports.
- • Regulatory Authorities: Legal and regulatory bodies as required by law.
- • Service Providers: Third-party service providers who assist with various aspects of loan
processing and
management.
We ensure that any third parties with whom we share personal data have robust data protection measures in
place
to safeguard your information.
7. Data Subject Rights
Data subjects have several rights concerning their personal data, including:
- • Right of Access: The right to obtain a copy of your personal data and information about how it
is processed.
- • Right to Rectification: The right to request corrections to any inaccurate or incomplete
personal data.
- • Right to Erasure: The right to request the deletion of personal data under certain conditions.
- • Right to Restriction: The right to request the restriction of processing activities.
- • Right to Data Portability: The right to receive personal data in a structured, commonly used,
and
machine-readable format and to transmit it to another data controller.
- • Right to Object: The right to object to the processing of personal data based on legitimate
interests or
direct marketing.
- • Right to Avoid Automated Decision-Making: The right not to be subject to decisions made solely
based on
automated processing, including profiling.
To exercise these rights, please contact our Data Protection Officer (DPO) using the contact details provided
below.
8. Data Breach Response
In the event of a data breach, we are committed to taking swift action to mitigate the impact. We will notify
the affected data subjects and relevant authorities in accordance with legal requirements and provide
guidance
on protective measures to minimize potential harm.
9. Policy Updates
We periodically review and update this Privacy Policy to ensure ongoing compliance with data protection laws
and
to reflect changes in our data processing practices. We encourage you to review this policy regularly to
stay
informed about how we protect your personal data.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection
practices,
please contact our Data Protection Officer, Saurabh at 0120-4832057