Help

Privacy policy

How we collect, use, share and protect your information — and what you can ask us to do with it. Last updated [DD Month YYYY].

Template — not yet legal copy. This is a structural template, not vetted legal copy. It must be reviewed and completed by counsel against the Digital Personal Data Protection Act, 2023, the RBI digital lending guidelines and the SPDI Rules before it is published as your policy.

1. Who we are

PaisaFin is operated by DHANDHANYA GROUP, CIN [CIN], with its registered office at Shop No. 4, K M Plaza, Opp. Sabzi Mandi, Near 6 No. Pulliya, Nathanpura, Dehradun, Uttarakhand – 248001. In this policy, “we” and “us” mean that company. We are the data fiduciary for the information described here.

2. What we collect

Information you give us

Identity and contact details — name, mobile number, email address, date of birth.
Financial details — income, employment type, existing obligations, loan amount and tenure sought.
KYC documents where a lending partner requires them, such as PAN and Aadhaar.
Anything you send us in a support message or complaint.

Information we collect automatically

Device and browser information, IP address and approximate location.
How you use the site — pages viewed, calculators used, offers compared.
Cookies and similar technologies. [Link your cookie policy here and describe the consent mechanism.]

Information from third parties

Credit information from bureaus, with your consent, to find and show offers.
Status updates from lending partners on applications you have made.
[List any other sources — verification providers, account aggregators, and so on.]

3. Why we use it

To match you with loan offers and show what each will cost you.
To pass your application to a lender you have chosen, with your consent.
To verify identity and meet KYC and anti-money-laundering obligations.
To provide support, investigate complaints and prevent fraud.
To improve the product, in aggregate and wherever possible without identifying you.
To send service messages, and marketing only where you have opted in.

4. The legal basis

[Set out the lawful basis for each purpose above — consent, performance of a contract, or a legal obligation — as required under the Digital Personal Data Protection Act, 2023, and describe how consent is obtained, recorded and withdrawn.]

5. Credit checks

Finding offers uses a soft enquiry with a credit bureau. A soft enquiry is visible only to you and does not affect your credit score. A hard enquiry is made only when you formally apply with a lender you have chosen, and we will tell you before that happens. [Name the bureaus you work with.]

6. Who we share it with

Lending partners — only those you choose to apply with, and only after you consent.
Credit bureaus — to obtain the credit information used to match offers.
Service providers — hosting, analytics, communications and verification vendors bound by contract. [List categories.]
Authorities — where we are legally required to disclose.

We do not sell your personal information, and we do not share it with lenders you have not selected.

7. How long we keep it

[State retention periods by data category, and the statutory obligations that require records to be kept after an account closes.]

8. How we protect it

Personal and financial data is encrypted in transit and at rest, access is restricted to staff who need it, and we maintain [describe your security controls, audits and certifications]. No system is perfectly secure, and we will notify you and the Data Protection Board of a breach as required by law.

9. Your rights

Access the personal data we hold about you and how it has been used.
Have inaccurate or incomplete data corrected.
Have data erased where we are not legally required to keep it.
Withdraw consent, which stops future processing that relied on it.
Nominate someone to exercise these rights on your behalf.
Raise a grievance — see our grievance redressal process.

To exercise any of these, write to care@[domain].

10. Children

Our services are for people aged 18 and over. We do not knowingly collect data from children. [Confirm the verification approach with counsel.]

11. Changes to this policy

We will post any change on this page and update the date above. Where a change is significant, we will tell you directly.

12. Contact

Data Protection Officer: [Name]. Email: care@[domain]. Address:Shop No. 4, K M Plaza, Opp. Sabzi Mandi, Near 6 No. Pulliya, Nathanpura, Dehradun, Uttarakhand – 248001.