Privacy Policy

1. Introduction

This Privacy Policy explains how EzyLoan Financial Services (Dibyansh Associates) ("EzyLoan", "we", "our", or "us") collects, uses, stores, shares, and protects your personal information. We comply with applicable Indian laws including:

• Information Technology Act, 2000 and Rules thereunder
• Digital Personal Data Protection Act, 2023 (when applicable)
• Reserve Bank of India (RBI) guidelines for DSAs and lending
• Secured Lending and Recovery laws

2. Definition of Personal Data

"Personal Data" means any information that relates to an identified or identifiable individual, including:

• Identity information: Name, date of birth, PAN, Aadhaar, passport, voter ID
• Contact information: Address, email, mobile number
• Financial information: Income, bank statements, credit score, loan history
• Employment information: Employer details, salary slips, business documents
• Technical information: IP address, device ID, browser type, cookies
• Loan application data: Purpose, amount requested, repayment capacity

3. Information We Collect

A. Information You Provide Voluntarily

• Name, residential address, email ID, mobile number
• KYC documents: PAN Card, Aadhaar Card, passport, driving license
• Income proof: Salary slips, ITR, Form 16, bank statements (3-6 months)
• Employment/Business details: Employer name, designation, business registration
• Loan requirements: Desired amount, purpose, preferred tenure
• Consent declarations for credit checks and data sharing

B. Information Collected Automatically

• Technical data: IP address, browser type, operating system, device identifiers
• Usage data: Pages visited, time spent, click patterns, referral sources
• Location data: Approximate location derived from IP address (for service eligibility)
• Cookies and similar technologies: See our Cookie Policy

4. Purpose of Data Collection & Processing

We collect and process your personal data for the following legitimate purposes:

• Loan Processing: Evaluating eligibility, verifying documents, coordinating with partner lenders
• Communication: Sending application updates, loan offers, service notifications
• Regulatory Compliance: Meeting RBI, IT Act, and other legal obligations including KYC/AML
• Fraud Prevention: Detecting and preventing identity theft, application fraud, money laundering
• Service Improvement: Analyzing usage patterns to enhance user experience and product offerings
• Marketing (with consent): Sending relevant financial product updates; you may opt-out anytime

5. Legal Basis for Processing Personal Data

We process your personal data based on one or more of the following lawful grounds:

• Consent: Your explicit consent obtained during application or account creation
• Contractual Necessity: Processing required to facilitate your loan application with partner lenders
• Legal Obligation: Compliance with RBI guidelines, IT Act, PDP Act, and other applicable laws
• Legitimate Interest: Fraud prevention, service improvement, and business operations (balanced against your rights)

You may withdraw consent at any time by contacting us, though this may affect our ability to provide services.

6. Data Sharing and Disclosure

We may share your personal information with the following parties for legitimate business or legal purposes:

• Partner Lenders: Banks and NBFCs for loan evaluation, approval, and disbursement
• Credit Bureaus: CIBIL, Experian, Equifax, CRIF for credit assessment and reporting
• Service Providers: KYC verification, document management, SMS/email services, analytics (under strict confidentiality agreements)
• Regulatory Authorities: RBI, Ministry of Corporate Affairs, or courts as required by law
• Business Transfers: In case of merger, acquisition, or asset sale (with notice and continued protection)

❌ We do NOT sell, rent, or trade your personal data to third parties for marketing purposes.

*Each partner lender has its own privacy policy. We encourage you to review their policies before proceeding with any loan application.

7. International Data Transfers

Your personal data is primarily processed and stored within India. In limited cases, data may be transferred to countries outside India for cloud storage or service provider operations. Such transfers comply with applicable Indian data protection laws and include appropriate safeguards such as contractual clauses ensuring equivalent protection.

8. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:

• Active Applications: Duration of application process + 12 months for follow-up
• Approved Loans: Duration of loan tenure + 7 years post-closure (as per RBI record-keeping norms)
• Rejected Applications: 24 months for regulatory audit and fraud prevention
• Marketing Consent: Until you withdraw consent or 36 months from last engagement, whichever is earlier

After the retention period, data is securely deleted or anonymized such that it can no longer identify you.

9. Data Security Measures

We implement industry-standard administrative, technical, and physical safeguards to protect your personal data:

• Encryption: SSL/TLS for data in transit; AES-256 for sensitive data at rest
• Access Controls: Role-based access, multi-factor authentication for staff
• Network Security: Firewalls, intrusion detection, regular vulnerability assessments
• Employee Training: Regular privacy and security awareness programs
• Vendor Management: Due diligence and contractual safeguards for third-party processors

While we strive to protect your data, no internet transmission is 100% secure. Please safeguard your login credentials and report suspicious activity immediately.

10. Your Rights & Choices

Subject to applicable laws, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Withdraw Consent: Opt-out of marketing or withdraw consent for processing (may affect service availability)
• Right to Portability: Request transfer of your data to another service provider (where technically feasible)
• Right to Grievance Redressal: Escalate concerns to our Grievance Officer (details below)

To exercise any right, contact us at care@ezyloan.co.in. We respond to valid requests within 30 days.

11. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can manage cookie preferences through your browser settings or our Cookie Policy.

Note: Disabling essential cookies may limit functionality of our services.

12. Children's Privacy

Our services are intended for individuals aged 18 years and above. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly. If you believe a minor has provided us with data, please contact us immediately.

13. Automated Decision-Making & Profiling

We may use automated systems to pre-screen loan applications based on criteria such as credit score, income, and employment history. These systems assist—but do not replace—human review. Final loan decisions are made by partner lenders. You may request human review of any automated decision by contacting us.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in law, technology, or business practices. Material changes will be notified via email or prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

We encourage you to review this page periodically. The "Last Updated" date at the top indicates the most recent revision.

15. Contact Information & Grievance Redressal