1. Introduction

LoanBazaarNow.in (“we”, “us”, or “our”) operates under Indian law and complies with the Information Technology Act, 2000 and SPDI Rules 2011. We are committed to protecting your personal information through GDPR-compliant standards, even when not legally required. By using our services, you agree to the terms outlined in this policy.

2. Information Collection

2.1 Data We Collect Directly

• Personal Identifiers: Full name, PAN number, Aadhaar (with consent), passport details
• Contact Information: Physical address, email, mobile number
• Financial Data: Bank statements (6 months), credit scores, ITR documents, salary slips
• Employment Details: Employer name, job title, employment history

2.2 Automatically Collected Data

• Device Information: IP address, browser type, device identifiers
• Usage Patterns: Pages visited, session duration, clickstream data
• Location Data: Approximate location through IP analysis

2.3 Third-Party Sources

• Credit bureaus (CIBIL, Experian, Equifax)
• Bank account aggregators (RBI-approved)
• Government verification services (UIDAI, NSDL)

3. Data Processing Purposes

4. Data Sharing & Disclosure

We may disclose information to:

• RBI-regulated financial institutions
• Law enforcement agencies under court order
• Auditors & compliance consultants
• Cloud service providers (AWS India regions)

We never sell personal data to third parties.

5. Security Measures

• 256-bit SSL encryption for data in transit
• AES-256 encryption for data at rest
• Annual penetration testing
• Role-based access controls (RBAC)
• SOC 2 Type II certified data centers

6. User Rights

You have the right to:

• Access personal data (via SAR form)
• Request rectification of errors
• Withdraw marketing consent
• Request data portability
• Initiate erasure requests

Submit requests to privacy@loanbazaarnow.in with “Data Request” in subject line. Response time: 30 working days.

7. Data Retention

• Active customers: 7 years post-account closure
• Loan applicants: 3 years from last interaction
• Marketing opt-outs: Permanent suppression list

8. Cookies & Tracking Technologies

We use:

• Essential Cookies: Session management
• Analytical Cookies: Google Analytics 4 (IP anonymization enabled)
• Advertising Cookies: Meta Pixel (opt-out available)

Manage preferences via our Cookie Consent Manager.

9. International Transfers

Data is primarily stored in India. Any cross-border transfers use EU SCCs or DPAs with:

• Zoho CRM (USA)
• Freshdesk Support (USA)

10. Grievance Officer

As per IT Act 2000 requirements:

11. Policy Updates

We notify changes through:

• Website banners (30 days prior)
• Registered email alerts
• SMS notifications for material changes