1. Introduction
This Privacy Policy ("Policy") describes how KapitaLoan ("KapitaLoan", "Company", "we", "our", or "us") collects, uses, stores, processes, shares, and protects your personal information when you access or use our website, mobile application, or any related services (collectively referred to as the "Platform").
By accessing or using our Platform, registering an account, or applying for any financial product or service, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.
At KapitaLoan, protecting your personal information is one of our highest priorities. We are committed to handling your data responsibly, transparently, and in compliance with applicable laws, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and applicable RBI Digital Lending Guidelines.
If you do not agree with this Privacy Policy, please discontinue the use of our Platform.
2. Information We Collect
To provide our services efficiently and securely, we may collect the following categories of information with your consent.
Personal Information
- Full Name
- Date of Birth
- Gender
- Residential Address
- Email Address
- Mobile Number
- Marital Status
- Employment Details
- Occupation
- Employer Information
- Monthly Income
- Educational Qualification
Identity Verification (KYC)
We may collect documents required to verify your identity, including:
- Aadhaar Card
- PAN Card
- Driving Licence
- Passport
- Voter ID
- Other government-issued identification documents as permitted by law
Financial Information
To assess loan eligibility, we may collect:
- Bank Account Details
- IFSC Code
- Bank Statements
- Salary Information
- Income Proof
- Existing Loan Details
- Credit Score
- Credit Bureau Information
- Loan Repayment History
Transaction Information
We may collect information relating to:
- Loan Applications
- Loan Approvals
- Loan Disbursements
- EMI Payments
- Repayment History
- Customer Support Requests
Device Information
When you access the Platform, we may automatically collect:
- Device Model
- Operating System
- Browser Information
- IP Address
- Device Identifier
- Language Settings
- Time Zone
- App Version
- Crash Reports
Location Information
With your explicit permission, we may collect your location only where necessary for:
- Identity Verification
- Fraud Prevention
- Regulatory Compliance
- Customer Verification
Camera & Microphone
We may request access to your:
- Camera for document capture or video KYC.
- Microphone for video verification where applicable.
Access is requested only with your permission.
3. How We Collect Information
We collect information through various methods, including:
Information Provided by You
Information submitted while:
- Creating an account
- Applying for a loan
- Uploading documents
- Completing KYC
- Contacting customer support
- Filling online forms
Automatically Collected Information
Certain technical information is collected automatically through cookies, device identifiers, analytics tools, and security technologies.
Third-Party Sources
Where permitted by law and with your consent, we may receive information from:
- Credit Information Companies (CIBIL, Experian, Equifax, CRIF High Mark)
- Banking Partners
- NBFC Partners
- Payment Gateways
- KYC Verification Providers
- Government Databases
- Fraud Detection Services
4. How We Use Your Information
Your information may be used for the following purposes:
- Process your loan application.
- Verify your identity.
- Complete KYC requirements.
- Assess your creditworthiness.
- Perform fraud detection and risk assessment.
- Communicate with you regarding your application.
- Provide customer support.
- Improve our products and services.
- Personalize your user experience.
- Process loan repayments.
- Comply with legal and regulatory obligations.
- Prevent fraud, money laundering, and financial crime.
- Send important service updates.
- Respond to legal requests and regulatory authorities.
Where permitted by law and subject to your consent, we may also send promotional communications regarding products and services that may be relevant to you.
6. Accessing & Updating Your Information
You are responsible for ensuring that all information provided to KapitaLoan is accurate, complete, and up to date.
You may review, update, or correct your personal information through your account settings or by contacting our customer support team.
KapitaLoan reserves the right to verify the authenticity of any information provided. Failure to provide accurate information may affect your eligibility for our services or result in suspension or termination of your account.
7. Data Security
KapitaLoan is committed to protecting your personal information through industry-standard security measures.
We implement appropriate technical, administrative, and organizational safeguards to prevent unauthorized access, alteration, disclosure, misuse, or destruction of your personal data.
Our security practices include, but are not limited to:
- SSL/TLS encrypted data transmission.
- Encryption of sensitive data at rest and in transit.
- Secure cloud infrastructure with restricted access controls.
- Multi-layer authentication and authorization mechanisms.
- Regular vulnerability assessments and security audits.
- Continuous monitoring for suspicious activities.
- Secure backup and disaster recovery procedures.
Access to personal information is restricted to authorized employees, contractors, and service providers who require such access to perform their responsibilities.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security.
8. Data Retention
KapitaLoan retains your personal information only for as long as necessary to:
- Provide our services.
- Fulfill contractual obligations.
- Comply with applicable laws and regulatory requirements.
- Resolve disputes.
- Prevent fraud.
- Enforce our legal agreements.
Where permitted by law, personal information that is no longer required will be securely deleted, anonymized, or destroyed.
If you request deletion of your account, certain information may continue to be retained where required under applicable laws or for legitimate business purposes.
9. Your Privacy Rights
Subject to applicable laws, you may have the following rights regarding your personal information:
Right to Access
You may request access to the personal information we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete personal information.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Please note that withdrawing consent may affect our ability to provide certain services.
Right to Erasure
You may request deletion of your personal information, subject to applicable legal, regulatory, and contractual obligations.
Right to Restrict Processing
You may request restriction of the processing of your personal information where permitted by applicable law.
Right to Raise a Complaint
If you believe your personal information has been handled improperly, you may contact our Grievance Officer using the contact details provided in this Policy.
KapitaLoan will respond to privacy-related requests within a reasonable timeframe, subject to verification of your identity.
10. Transfer of Personal Information
Your personal information is primarily stored and processed on secure servers located within India.
Where necessary to provide our services, we may share your information with:
- Lending Partners
- Banking Partners
- Credit Bureaus
- Payment Service Providers
- Identity Verification Providers
- Technology Service Providers
- Cloud Infrastructure Providers
Such transfers are carried out only where appropriate security measures and contractual safeguards are in place.
KapitaLoan does not sell or rent your personal information to third parties.
11. Third-Party Websites
The Platform may contain links to websites or services operated by third parties.
KapitaLoan is not responsible for the privacy practices, security, or content of such third-party websites.
Users are encouraged to review the privacy policies of external websites before submitting any personal information.
Your interactions with third-party websites are governed solely by their respective terms and privacy policies.
13. Business Transfers
In the event of a merger, acquisition, restructuring, sale of assets, financing, or any other business transaction involving KapitaLoan, your personal information may be transferred as part of the business assets.
Any successor entity receiving such information will continue to protect your personal information in accordance with this Privacy Policy and applicable laws.
Where required by law, users will be notified of any material changes affecting the handling of their personal information.
14. Changes to this Privacy Policy
KapitaLoan reserves the right to modify or update this Privacy Policy at any time to reflect changes in our business practices, legal requirements, regulatory obligations, or technological advancements.
Any updates will be published on this page along with the revised "Last Updated" date.
Where required by applicable law, we may also notify users through email, SMS, push notifications, or other appropriate communication channels.
Your continued use of the Platform after any updates to this Privacy Policy constitutes your acceptance of the revised Policy.
15. Grievance Officer
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of your personal information, please contact us using the details below:
We will acknowledge your request and make reasonable efforts to respond within the timelines prescribed under applicable laws.
16. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India.
Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in Gurugram, Haryana, unless otherwise required by applicable law.
17. Schedule: Data Retention & Destruction Policy
1. Overview
This Data Retention and Destruction Policy explains how KapitaLoan retains, manages, and securely disposes of personal information collected through the Platform.
We retain personal information only for as long as necessary to provide our services, fulfill contractual obligations, comply with legal and regulatory requirements, resolve disputes, prevent fraud, and enforce our legal rights.
2. Data Retention Period
Your personal information may be retained for the following purposes:
- Processing loan applications.
- Managing active loan accounts.
- Completing KYC verification.
- Maintaining financial transaction records.
- Complying with RBI guidelines and other applicable regulations.
- Responding to legal or regulatory requests.
- Preventing fraud and unauthorized activities.
Where permitted by applicable law, you may request deletion of your personal information. However, certain records may be retained where required by law, regulatory obligations, ongoing investigations, dispute resolution, or legitimate business purposes.
3. Data Deletion & Destruction
Once the applicable retention period has expired and there is no legal or business requirement to retain your information, KapitaLoan will securely delete, anonymize, or permanently destroy your personal data using industry-standard practices.
Our data destruction procedures are designed to ensure that deleted information cannot be reasonably recovered, reconstructed, or misused.