This Policy is published and shall be construed to be in accordance with the provisions of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data of Information) Rules, 2011 under the Information Technology Act, 2000 and other applicable laws that require publishing of the privacy notice for collection, usage, storage, disclosure and transfer of sensitive personal data or information.
Introduction
KreditSathi. (hereinafter referred to as KreditSathi/ we/ our”) acknowledges the expectations of its customers (hereinafter referred to as “customer/ you/ your”) regarding privacy, confidentiality and security of personal information that resides with the KreditSathi. Keeping personal information of customers secure and preventing any misuse thereof, is therefore, a top priority of KreditSathi.
We state that KreditSathi is strongly committed to protect the privacy of its customers and has taken all necessary and reasonable measures in line with the best industry practice to protect the confidentiality of your personal information and its transmission through our website.
This Privacy Policy covers KreditSathi treatment of personal information that KreditSathi collects when you are on the KreditSathi site, and when you use KreditSathi services. This policy also covers KreditSathi treatment of any personal information that KreditSathi business partners share with KreditSathi. This policy does not apply to the practices of companies that KreditSathi does not own or control, or to people that KreditSathi does not employ or manage.
KreditSathi collects personal information when you register for an KreditSathi account, when you use certain KreditSathi products or services, when you visit KreditSathi pages, and when you enter promotions or sweepstakes. KreditSathi may also receive personally identifiable information from our business partners.
- Express Consent
- Personal Information Personal Information (“PI”) means any information/ documents/ details that relates to a natural person, which either directly or indirectly in combination with other information available with KreditSathi, can identify such person.
- This Policy applies to the PI such as details pertaining to your name, parentage, marital status, nationality, state/city of residence, residential address, e-mail address, date of birth, gender, contact number/mobile number, user ids, passwords, recent photograph, signature image, income proof, PAN, credit score, credit information report, e-KYC through UIDAI, Aadhaar based e-Sign and such other Know Your Customer (KYC) documents like address proof, identity proof, officially valid documents/details (OVDs) accepted for concluding a financial transaction, which may be shared/ uploaded by you, as and when you avail any products and/or service through usage of the Website and to which KreditSathi may become privy to.
- By visiting and/or using our Website, you agree to this Policy. Further, this policy applies to all current and former visitors to the Website. It is strongly recommended for you to return to this page periodically to review the most current version of the Policy. (iii) KreditSathi reserves the right at any time, at its sole discretion, to change/amend or otherwise modify the Policy without prior notice, and your continued access or use of this Website signifies your acceptance of the updated or modified Policy. However, if we make any material change to the Policy, we will notify you by e-mail (sent to the e-mail address specified in your account) or by means of a notice on this Website prior to the change becoming effective.
- KreditSathi reserves the right at any time, at its sole discretion, to change/amend or otherwise modify the Policy without prior notice, and your continued access or use of this Website signifies your acceptance of the updated or modified Policy. However, if we make any material change to the Policy, we will notify you by e-mail (sent to the e-mail address specified in your account) or by means of a notice on this Website prior to the change becoming effective.
- KreditSathi reserves the right at any time, at its sole discretion, to change/amend or otherwise modify the Policy without prior notice, and your continued access or use of this Website signifies your acceptance of the updated or modified Policy. However, if we make any material change to the Policy, we will notify you by e-mail (sent to the e-mail address specified in your account) or by means of a notice on this Website prior to the change becoming effective.
- Applicability:
- You while providing your details/documents over the Website, including but not limited to PI as mentioned hereinabove, expressly consent to KreditSathi (including its marketing channels and business partners) to contact you through SMS, call and/ or e-mail and to follow up calls in relation to the services provided through the Website, for imparting product knowledge, offering promotional offers running on Website & various other offers offered by its business partners.
- The usage of the Website may also require you to provide consent for keying in/ uploading your PI (including but not limited to user ids and passwords), as may be necessary to process your application through the Website. Any PI which requires to be keyed in/ uploaded is required for enabling hassle free, faster and paperless (to the extent possible) processing of applications for financial products so opted/ availed by you.
- You hereby authorize and expressly consent us to share your PI with third parties including but not limited to Credit Information Companies (“CIC”) to do an aggregate check of your credit profile for KreditSathi to send you targeted communications and offers.
- If you are no longer interested in sharing your PI, please e-mail your request at: . Please note that it may take about 72 business hours to process your request. In furtherance to your usage of the Website, you expressly waive the Do Not Call (DNC) / Do Not Disturb (DND) registrations on your phone/mobile numbers for contacting you for such purpose and usage. Hence, there will be no DNC / DND check required for the number you may have left on our Website. Such modes of contacting you may include sending SMSs and/ or telephonic calls.
- KreditSathi reserves the right (and you expressly authorize KreditSathi) to share or disclose your PI when KreditSathi determines, in its sole discretion, that the disclosure of such information is necessary or appropriate under the law for the time being in force.
- Credit Information Report
- Your Credit Information (credit score and credit information report) is procured through a 'soft search' of your credit records with Credit Information Companies “CICs” and KreditSathi has no control over the content or accuracy of information provided in your credit information by CICs. KreditSathi gets this information from CIC for and on your behalf only when you agree to appoint KreditSathi as your lawfully appointed authorized agent/ representative for collecting your credit information from CICs. By consenting to use and avail your credit information report through KreditSathi, you agree that KreditSathi and CICs shall be entitled to rely on your authorization and consent granted by you to KreditSathi.
- Availing your credit information through KreditSathi is subject to your passing of appropriate identity authentication for security and privacy purposes. KreditSathi shall not notify you the reasons if you are unable to pass such identity authentications and not able to view and/or use your credit information.
- KreditSathi may analyze and profile your credit information in order to assist you in being better informed about, understand and manage your credit score/rating, identify and inform you of credit products that are likely to be suited to your circumstances, to identify whether you may benefit from additional guidance concerning your credit score and steps you can take to improve your score and credit history etc. For more details please access KreditSathi Terms of Service for Credit Information Report.
- Opt-Out In case you do not want to be disturbed over telephonic calls, kindly fill up the details requested in the below table, including the details of the telephone number(s) on which you do not wish to be contacted and submit the same at from your email address registered at KreditSathi.
- Purpose And Usage
- KreditSathi will not sell or rent your PI to anyone, for any reason, at any time. However, we will be sharing your PI with our affiliates and business partners including CICs, where we feel that you will be assisted better for the purpose of underwriting and approval of your credit card, loan or any other financial product transaction/related transaction; or for doing a check of your credit profile on your behalf and sending you targeted communications and offers. We assure that KreditSathi will always seek your consent to process certain types of information where it is legally required to do so. KreditSathi uses the PI collected to manage its business and offer you an enhanced, personalized online experience on its Website. By registering on the Website, you authorize KreditSathi to send SMS and e-mail alerts to you for its service requirements, including sending promotional e-mails and SMSs. Further, it enables KreditSathi to:
- send you any administrative notices, offer alerts and other communications relevant to your use of the Service
- display tailored product offers to you and enable you to apply for certain products and services for which you have chosen to apply
- carry market research, project planning, troubleshooting issues, detecting and protecting against error, fraud or other criminal activity
- improve our Services and manage our customer relationships better
- improve our Services and manage our customer relationships better
- comply with all applicable laws and regulations
- In the event that you access the Service as brought to you by one of our partners either through the Website or on being redirected from a co-branded URL or any other website , your name, e-mail address, mobile number, date of birth, employment type, residency status, income details/proofs, Form 26 AS, PAN, details of loan / credit card/ mutual fund applied for and loan, credit card and mutual fund status or any other financial product status may be provided to that partner when your application is submitted and whenever the status of application is updated. KreditSathi has a business relationship with these partners and you may not opt-out of sharing your information with these partners if you have applied via a co-branded URL or any other website or directly through the Website as the case may be.
- For availing the Service such as applying for credit information report, loan, credit card, mutual fund or any other financial product we will require you to provide/upload on the Website the details such as a your name, parentage, marital status, email address, nationality, location, mobile number, PAN, employment & income details/proofs, Form 26 AS, recent photograph, signature image, other Know Your Customer (KYC) documents like address proof, identity proof and personally identifying information about a potential co-loan applicant (should you select this option), and to participate on our forum boards, you must provide a username for yourself.
- You may opt out of location-based services at any time by editing the setting of your browser.
- In order to provide your bank statement or pay slip electronically along with your loan application, you also must provide your third-party account credentials ("Account Credentials") to allow KreditSathi to retrieve your account data at those other financial institutions ("Account Information") for your use. Your Account Credentials are only used once to retrieve your bank statements/pay slips, Form 26 AS and are not stored in our system. KreditSathi shall not be liable to you against any liability or claims which may arise out of such transactions being carried on your own accord.
- We may also use third party service providers to provide the Service to you, such as sending e-mail messages on our behalf or hosting and operating a feature or functionality of the Service. Our contracts with these third parties outline the appropriate use and handling of your information and prohibit them from using any of your PI for purposes unrelated to the product or service they're providing. We require such third parties to maintain the confidentiality of the information provide to them.
- Disclosure / Sharing
KreditSathi does not disclose PI of a customer except as directed by law or as per mandate received from the customer / applicant. Upon your written request KreditSathi will provide you with information on whether we hold any of your PI. No specific information about customer accounts or other personally identifiable data is shared with third parties unless any one of the following conditions is met:
- To help complete a transaction initiated by you
- To perform support services through a third-party service provider, provided it conforms to the Privacy Policy of the KreditSathi and your prior consent to do so is obtained
- You have specifically authorized it
- Where the disclosure is necessary for compliance of a legal obligation or as required by law, such as to comply with a subpoena, or similar legal process
- When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request There are number of products/services such as loans, credit cards, mutual funds, offered by third Parties on the Website, such as lenders, banks, credit card issuers. If you choose to apply for these separate products or services, disclose information to these providers, then their use of your information is governed by their privacy policies. KreditSathi is not responsible for their privacy policies. KreditSathi may share your data with other third parties, such as service providers, advertisers, Credit Information Companies, fraud prevention agencies, marketing channels, affiliates, without the need for additional consent from you. KreditSathi shall not be held liable for disclosure of the PI when used in accordance with this Privacy Policy or in terms of the ‘General Terms of Use’ of Website or an agreement, if any, with the users of Website.
Intimation By Customers Regarding Change In Personal Information
If your PI provided to us when you had applied for a product on our Website changes, you may update it whenever you apply for a new product via our Website. To review and update your PI and to ensure that the same is accurate while your application is in process, you may contact us at . You will not be able to update the information you have provided in an application after a decision has already been made on it; however, you may create and submit a new application with your updated information.
Note:We will retain your information for as long as your account is active or as needed to provide you services. If you wish to cancel your account or request that we no longer use your information to provide you services, contact us at . We will respond to your request within a reasonable timeframe. However, we will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and to enforce our agreements.
Retention Of Your Data
- KreditSathi will retain your information for as long as it is necessary for providing you the Services available on the Website or your request for termination of your account with KreditSathi, whichever is later.
- Post termination of your account, KreditSathi may continue to use your anonymized data aggregated or in combination with anonymized data of other users. We use this aggregated anonymized data for data analysis, profiling and research purposes, for example to gain insights about our users and their profiles. We may keep your contact information along with your application details (if any) for fraud prevention purposes and for the exercise/ defense of a legal claim or for providing evidence in legal proceeding(s).
- Email & SMS Communications From Us And Our Partners
We provide our registered customers with periodic emailers and email/SMS alerts. We also allow users to subscribe to email newsletters and from time to time may transmit emails promoting KreditSathi or third-party products. Subject to the express consent clause above, KreditSathi’s Website subscribers may opt-out of receiving our promotional emails and terminate their newsletter subscriptions by following the instructions in the emails. Opting out in this manner will not end transmission of service-related e-mails/SMS, such as e-mail/SMS alerts. The above services are also provided by our partners.
This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We may use the collected log information about you to improve services offered to you, to improve marketing, analytics, or Website functionality.
KreditSathi and its partners use cookies or similar technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our website or service.
Behavioral Targeting / Re-Targeting
We partner with a third-party service provider to either display advertising on our Website or to manage our advertising on other websites. Our third-party partner may use technologies such as cookies to gather information about your activities on this Website and other websites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here. Please note this does not opt you out of being served ads. You will continue to receive generic ads.
- Third Parties Will Not Be Given Your Personal Information Unless You Give Consent To KreditSathi
There are several products and services, such as credit information report, loans, credit cards, mutual fund and other financial products being offered by third parties on our Website, such as lenders, banks, credit card issuers and mutual funds (collectively "Offers"). If you choose to apply for these separate products or services, disclose information to the providers, or grant them permission to collect information about you, then their use of your information is governed by their privacy policies. You should evaluate the practices of these external services providers before deciding to use their services. KreditSathi is not responsible for their privacy practices.
- We keep Your Data Secure
- We follow generally accepted standards to protect the PI submitted to us, both during transmission and once we receive it. Since no method of transmission over the Internet, or method of electronic storage, is 100% secure, therefore, we cannot guarantee its absolute security. If you have any questions about security on our Website, you can contact us at .
- We use a combination of firewalls, encryption techniques and authentication procedures, among others, to maintain the security of your online session and to protect KreditSathi online accounts and systems from unauthorized access.
- When you register for the Service, KreditSathi requires a password from you for your privacy and security. KreditSathi transmits information such as your login credentials for Website or Account Credentials securely.
- Our servers are in secure facilities where access requires multiple levels of authentication, including an identity card and biometrics recognition procedures. Security personnel monitor the facilities 7 days a week, 24 hours a day.
- Our databases are protected from general employee access both physically and logically. We encrypt your Service password so that your password cannot be recovered, even by us. All backup drives and tapes also are encrypted.
- We enforce physical access controls to our buildings. No employee can put PI on any insecure machine (i.e., nothing can be taken from the database and put on an insecure laptop). We permit only authorized employees who are trained in the proper handling of customer information, to have access to aforesaid PI.
- KreditSathi has been verified for its use of SSL encryption technologies. In addition, KreditSathi tests the Website using Acunetix scan for any failure points that would allow hacking. However, it is important to understand that these precautions apply only to our Website and systems.
- All Private Information Is Encrypted And Communicated Securely
All communications between your computer/mobile and our Website that contain any PI are encrypted. This enables client and server applications to communicate in a way that is designed to prevent eavesdropping, tampering and message forgery.
- YOU ARE RESPONSIBLE FOR MAINTAINING THE CONFIDENTIALITY OF YOUR LOGIN ID AND PASSWORD
- You are responsible for maintaining the security of your login ID and Password and must not provide these credentials to any third party. If you believe that they have been stolen or been made known to others, you must contact us immediately at . We are not responsible if someone else accesses your account through the login credential they have obtained from you or through a violation by you of this Privacy and Security Policy or the KreditSathi Terms of Use.
- If you have any security related concern, please contact us at . We will work closely with you to ensure a rapid and personal response to your concerns.
- Implementation of international standard for management of information security (required to be taken care of)- To be discussed.
- Contact Us With Any Questions Or Concerns (Grievance Redressal)
If you have grievance or complaint, questions, comments, concerns or feedback in relation to the processing of information or regarding this Privacy and Security Policy or any other privacy or security concern, send an e-mail to .
The name and contact details of the Grievance Officer
-----------------------------------------------------------------------------------------
- Feedback
If you have an unresolved privacy or data use concern that has not been addressed satisfactorily, you are advised to contact at .
- NOTICE
The effective date of this Policy, as stated below, indicates the last time this Policy was revised or materially changed.
