Information We Collect

We collect information you provide during the loan application process, including your name, mobile number, PAN, Aadhaar details (hashed — not stored in plain text), income information, and bank statements via the RBI Account Aggregator framework.

How We Use Your Information

We use your information to process loan applications, verify identity (KYC), assess creditworthiness, facilitate loan disbursement, and comply with regulatory requirements under RBI guidelines and PMLA.

Data Sharing

We share your information with RBI-registered credit bureaus (CIBIL, Experian, CRIF), our NBFC lending partner(s), DigiLocker/UIDAI for KYC, and regulatory authorities as required by law. We do not sell your personal data.

Data Retention

Loan-related data is retained for a minimum of 8 years after loan closure, as required under Indian financial regulations (PMLA, RBI guidelines).

Your Rights

You have the right to access, correct, or request deletion of your personal data (subject to regulatory retention requirements). Contact us at privacy@krimkar.com to exercise these rights. We respond within 30 days.

Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Aadhaar data is processed in compliance with UIDAI guidelines — we do not store Aadhaar numbers in plain text.

Your Rights (DPDPA 2023)

• Section 11 — Access a summary of personal data we hold
• Section 12 — Correction and erasure of inaccurate data
• Section 13 — Grievance redressal (acknowledged within 7 days, resolved within 30 days)
• Section 6(4) — Withdraw consent at any time (may affect pending application)
• Section 14 — Nominate a representative to exercise rights on your behalf in case of death or incapacity

Data Protection Officer

For all privacy and data rights requests:
privacy@krimkar.com
We respond within 30 days as required under DPDPA 2023.

Contact

Full policy: krimkar.com/privacy
Grievance: krimkar.com/grievance