Skip to main content

Privacy Policy

Last updated: 01 April 2024

This Privacy Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Data Fiduciary

Ashiana Fincap Private Limited, having its registered office at BK-100, First Floor, B Block, Ansal Plaza Mall, Admeasuring 189 Square Feet, Khel Gaon, New Delhi – 110049, is the Data Fiduciary under the DPDP Act, 2023 in respect of personal data collected through this website and our lending operations.

2. Personal Data We Collect

We collect the following categories of personal data:

  • Identity Data: Full name, date of birth, PAN, Aadhaar number, photograph
  • Contact Data: Mobile number, email address, residential/office address
  • Financial Data: Income, bank statements, ITR details, credit bureau data, asset and liability information
  • Business Data: Business registration details, GST returns, financial statements, trade references
  • Loan Data: Loan account details, EMI history, repayment behaviour
  • Device/Technical Data: IP address, browser type, pages visited (when you use this website)

3. Purposes of Processing

PurposeLawful Basis
Credit assessment and loan processingContractual necessity / Consent
KYC and AML verificationLegal obligation (PMLA, RBI KYC Directions)
Credit bureau reportingLegal obligation (RBI Direction)
Customer service and grievance handlingLegitimate interest
Regulatory reportingLegal obligation
Marketing communications (loan products)Consent (opt-in only)
Website analyticsConsent (cookie acceptance)

4. Data Sharing

We may share your personal data with:

  • Credit information companies (CIBIL, Equifax, Experian, CRIF) — mandatory under RBI directions
  • Central KYC Registry (CKYC) — as required by law
  • Financial Intelligence Unit – India (FIU-IND) — for AML/PMLA compliance
  • Reserve Bank of India and other regulators — as required by law
  • Our bankers and co-lenders — for loan funding and securitisation
  • IT service providers and cloud vendors — under strict data processing agreements
  • Recovery agents — for collections on defaulted loans (bound by our Recovery Policy)

We do not sell your personal data to third parties for commercial purposes.

5. Data Retention

  • Loan account data: 8 years after loan closure (regulatory requirement)
  • KYC documents: 5 years after end of business relationship (PMLA)
  • Marketing data: Until withdrawal of consent
  • Website analytics: 26 months (Google Analytics default)

6. Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the following rights:

  • Right of Access: Request a summary of personal data processed and the processing activities.
  • Right to Correction and Erasure: Request correction of inaccurate data or erasure of data no longer necessary (subject to legal retention obligations).
  • Right to Grievance Redressal: File a grievance with our Grievance Redressal Officer.
  • Right to Withdraw Consent: Withdraw consent for processing based on consent (does not affect lawfulness of prior processing).
  • Right to Nominate: Nominate another individual to exercise your rights in case of your incapacity/death.

To exercise any of the above rights, contact the Grievance Redressal Officer at gro@ashianafincap.com with "DPDP Rights Request" in the subject line. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures including encryption at rest and in transit, multi-factor authentication for internal systems, access controls, and periodic security audits. Please refer to our Cyber Security Policy for details.

8. Cookies

Our website uses cookies. Please refer to our Cookie Policy for details. You can manage cookie preferences via the consent banner.

9. Children's Data

Our lending products are not directed at individuals below 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us immediately.

10. Cross-Border Transfers

Personal data is primarily stored in India. Where data is transferred to processors in other jurisdictions (e.g., cloud providers), adequate safeguards are in place as required under the DPDP Act, 2023.

11. Changes to This Policy

This policy may be updated from time to time. Material changes will be communicated via email or prominent notice on our website. Continued use of our services after notice constitutes acceptance.

12. Contact

Data Fiduciary / Grievance Redressal Officer
Ashiana Fincap Private Limited
BK-100, First Floor, B Block, Ansal Plaza Mall, Admeasuring 189 Square Feet, Khel Gaon, New Delhi – 110049
Email: gro@ashianafincap.com
Phone: +91 77778 99992