Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your personal information.

1. Introduction

capitalassistindia is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our loan services.

  • This policy applies to all users of our website and services
  • We comply with applicable Indian data protection laws
  • Your consent is obtained before collecting sensitive personal information
  • We are committed to transparency in our data handling practices

2. Information We Collect

We collect various types of information to provide and improve our loan services:

  • Personal Information: Name, date of birth, gender, contact details
  • Financial Information: Income details, bank statements, credit history
  • Identity Information: Aadhar, PAN, passport, driving license details
  • Employment Information: Employer details, salary information, employment history
  • Technical Information: IP address, browser type, device information
  • Usage Information: Website navigation, pages visited, time spent

3. How We Collect Information

Information is collected through various methods:

  • Direct Collection: Application forms, phone calls, email communications
  • Website Usage: Cookies, web beacons, analytics tools
  • Third Parties: Credit bureaus, employers, banks, references
  • Public Sources: Government databases, public records
  • Partner Networks: Authorized agents, brokers, affiliate partners

4. Purpose of Data Collection

We use your information for the following purposes:

  • Loan Processing: Application evaluation, credit assessment, approval decisions
  • Identity Verification: KYC compliance, fraud prevention, security measures
  • Communication: Updates on application status, promotional offers, support
  • Legal Compliance: Regulatory reporting, audit requirements, legal obligations
  • Service Improvement: Website enhancement, product development, user experience
  • Risk Management: Credit monitoring, collection activities, portfolio management

5. Information Sharing & Disclosure

We may share your information with:

  • Partner Banks: For loan processing and disbursement
  • Credit Bureaus: For credit history verification and reporting
  • Regulatory Bodies: As required by law or regulation
  • Service Providers: Technology partners, collection agencies, auditors
  • Legal Authorities: When required by court orders or legal processes
  • We do not sell personal information to third parties for marketing purposes

6. Data Security Measures

We implement comprehensive security measures to protect your data:

  • Encryption: SSL encryption for data transmission
  • Access Controls: Role-based access, authentication protocols
  • Physical Security: Secure data centers, restricted access areas
  • Regular Audits: Security assessments, vulnerability testing
  • Employee Training: Data protection awareness, confidentiality agreements
  • Incident Response: Breach notification procedures, recovery protocols

7. Data Retention Policy

We retain your information as per the following guidelines:

  • Active Customers: Throughout the loan tenure and 7 years thereafter
  • Rejected Applications: Up to 2 years for regulatory compliance
  • Website Cookies: As per cookie settings and preferences
  • Communication Records: Up to 3 years for audit and dispute resolution
  • Legal Requirements: Extended retention as required by applicable laws
  • Secure disposal methods used for data destruction

8. Your Privacy Rights

You have the following rights regarding your personal information:

  • Access: Request copies of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of personal data (subject to legal requirements)
  • Portability: Receive your data in a structured format
  • Opt-out: Unsubscribe from marketing communications
  • Complaint: Lodge complaints about data processing

How to Exercise Your Rights:

  • Email us at privacy@capitalassistindia.com
  • Call our customer service helpline
  • Write to our registered office address
  • Response within 30 days of verified request

9. Cookies & Website Analytics

Our website uses cookies and similar technologies:

  • Essential Cookies: Required for website functionality
  • Performance Cookies: Help us analyze website usage
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Deliver relevant advertisements
  • Third-party Analytics: Google Analytics, social media pixels
  • You can control cookie settings through your browser

10. Third-Party Links

Our website may contain links to external websites:

  • We are not responsible for third-party privacy practices
  • External websites have their own privacy policies
  • Review privacy policies before sharing personal information
  • Social media integration governed by respective platform policies
  • Partner websites may have different data protection standards

11. Children's Privacy

Protection of minors' personal information:

  • Our services are not intended for individuals under 18 years
  • We do not knowingly collect information from minors
  • Parental consent required for any data collection from minors
  • Immediate deletion of accidentally collected minor's data
  • Special protection measures for sensitive categories

12. International Data Transfers

Information about cross-border data sharing:

  • Data primarily processed within India
  • International transfers only with adequate protection measures
  • Compliance with applicable cross-border data transfer regulations
  • Contractual safeguards with international service providers
  • Notification of significant international data processing

13. Data Breach Response

Our approach to handling data security incidents:

  • Immediate containment and assessment of security incidents
  • Notification to affected individuals within 72 hours
  • Cooperation with regulatory authorities and law enforcement
  • Implementation of additional security measures post-incident
  • Regular review and updating of incident response procedures

14. Updates to Privacy Policy

Changes and modifications to this policy:

  • Privacy policy may be updated periodically
  • Significant changes will be communicated via email or website notice
  • Updated policy will be posted on our website
  • Continued use of services constitutes acceptance of changes
  • Previous versions archived for reference