PRIVACY POLICY

1. INTRODUCTION

NIDEE Credit Solutions Pvt Ltd ("NIDEE", "we", "us", or "our") is committed to protecting the privacy, confidentiality and security of personal information entrusted to us.

This Privacy Policy explains how NIDEE collects, receives, uses, processes, stores, protects, shares and retains personal information when you visit or use our website, contact us, request our credit consultation services, request credit report-related assistance, or otherwise interact with us.

This Privacy Policy applies to information collected through our Website, telephone calls, email, WhatsApp, online forms, customer support channels, credit consultation processes, dispute-resolution processes and other interactions with NIDEE.

This Privacy Policy should be read together with our Terms of Service, Cookie Policy and any other applicable notices or agreements provided to you.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected or processed through the following channels:

• Our official website and online enquiry forms.
• Telephone and customer support communications.
• Email and WhatsApp communications.
• Credit consultation and advisory services.
• Credit report review and dispute-resolution services.
• Documents and information voluntarily submitted by customers.
• Payment and transaction processes.
• Offline interactions with our employees or representatives.
• Other channels through which you interact with NIDEE.

3. INFORMATION WE COLLECT

Depending on the services requested and the manner in which you interact with us, we may collect the following categories of information.

3.1 Personal Identification Information

• Full name.
• Date of birth.
• Gender, where required.
• Mobile number.
• Email address.
• Residential or correspondence address.
• Aadhaar number or Aadhaar-related information, where legally permissible and necessary.
• PAN number.
• Government-issued identification details.
• Identity verification information.
• Documents submitted for verification.

3.2 Credit and Financial Information

• Credit report information.
• Credit score information.
• Credit account information.
• Loan information.
• Credit card information.
• Outstanding amounts.
• Repayment information.
• Payment history.
• Loan account numbers.
• Settlement information.
• Details relating to defaults or overdue accounts.
• Bank account information where required.
• Financial statements and supporting documents.
• Information relating to credit disputes.

3.3 Communication Information

We may collect and retain information relating to communications between you and NIDEE, including:

• Email communications.
• Telephone communications.
• WhatsApp communications.
• Chat messages.
• Customer support conversations.
• Enquiries and service requests.
• Complaints.
• Documents shared through communication channels.

Where legally permitted and appropriately disclosed, communications may be recorded or retained for quality, security, dispute resolution, training, compliance and record-keeping purposes.

3.4 Transaction and Payment Information

• Transaction details.
• Payment status.
• Invoice information.
• Service purchased.
• Payment reference numbers.
• Billing information.

Where payments are processed through third-party payment providers, the relevant provider may process payment information in accordance with its own privacy policy and security practices.

3.5 Website and Technical Information

When you visit our Website, certain technical information may be automatically collected, including:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Device identifiers, where applicable.
• Referring URL.
• Pages visited.
• Date and time of access.
• Approximate usage information.
• Session information.
• Error and diagnostic information.

3.6 Information Received from Third Parties

Where permitted by applicable law and necessary for providing our Services, we may receive information from:

• Credit Information Companies.
• Banks and financial institutions.
• Lending institutions.
• Payment service providers.
• Verification providers.
• Professional service providers.
• Government or regulatory authorities.
• Persons authorised by you.

4. HOW WE USE YOUR INFORMATION

We use personal information for legitimate and relevant purposes connected with our business and Services.

4.1 Service Delivery

• Providing credit consultation services.
• Reviewing information supplied by you.
• Assisting with credit-related matters.
• Supporting credit report review.
• Assisting with credit information disputes.
• Preparing and submitting dispute requests.
• Communicating with relevant institutions on your behalf where authorised.
• Providing customer support.

4.2 Identity Verification

• Verifying your identity.
• Preventing impersonation.
• Validating submitted information.
• Detecting potentially fraudulent activity.
• Complying with applicable legal and regulatory requirements.

4.3 Communication

We may contact you regarding service updates, requests for additional documents, customer support, consultation information, dispute status, payments, important notices and changes to our Services or policies.

4.4 Business Operations

• Maintaining customer records.
• Managing accounts.
• Processing payments.
• Generating invoices.
• Improving our Services.
• Monitoring service quality.
• Maintaining internal records.
• Conducting internal audits.
• Analysing operational performance.

4.5 Legal and Regulatory Compliance

• Complying with applicable laws.
• Responding to lawful requests.
• Meeting regulatory requirements.
• Establishing, exercising or defending legal claims.
• Preventing fraud or misuse.
• Protecting our legal rights and interests.

5. LEGAL BASIS AND PURPOSE LIMITATION

NIDEE seeks to process personal information for specific, lawful and reasonably necessary purposes.

Where consent is required under applicable law, we will obtain appropriate consent before processing the relevant personal information.

Where processing is permitted or required by applicable law without separate consent, we may process information for such legally permitted purposes.

We do not intend to collect personal information indiscriminately or use information for purposes unrelated to the purpose for which it was collected, except where permitted or required by law.

6. SHARING AND DISCLOSURE OF INFORMATION

NIDEE does not sell or rent your personal information to third parties for their independent marketing purposes.

We may share information where necessary for providing our Services, complying with law, protecting rights, or carrying out legitimate business operations.

6.1 Credit Information Companies

Where necessary for credit-report access, verification or dispute-related services, information may be shared with applicable Credit Information Companies, including:

• TransUnion CIBIL.
• Equifax.
• Experian.
• CRIF High Mark.
• Other statutory credit information companies, where applicable.

6.2 Banks and Financial Institutions

Information may be shared with relevant banks, NBFCs, lenders or financial institutions where necessary for resolving a credit-related issue and where appropriate authority or consent exists.

6.3 Regulatory Authorities

Information may be disclosed to RBI, government authorities, law-enforcement authorities, courts, tribunals, statutory authorities or regulatory bodies where required or permitted by applicable law.

6.4 Professional Advisors

Information may be shared with lawyers, chartered accountants, auditors, compliance professionals and consultants where reasonably necessary for legitimate business, legal or compliance purposes.

6.5 Technology and Service Providers

We may use trusted third-party service providers for:

• Website hosting.
• Cloud infrastructure.
• Email services.
• SMS and WhatsApp communication.
• Payment processing.
• Customer support.
• Analytics.
• Cybersecurity.
• Data backup.
• IT maintenance.

Such providers may access information only to the extent reasonably necessary to perform their services for NIDEE and subject to appropriate contractual or organisational safeguards.

7. INTERNATIONAL DATA TRANSFERS

Where any service provider processes personal information outside India, such processing will be undertaken subject to applicable law and appropriate contractual, organisational and security safeguards.

We will take reasonable steps to ensure that personal information remains protected when processed through third-party infrastructure or service providers.

8. DATA SECURITY

NIDEE takes reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, unauthorised disclosure, accidental loss, destruction, alteration, misuse and unauthorised processing.

Our security measures may include:

• SSL/TLS encrypted data transmission.
• Access controls.
• Restricted administrative access.
• Authentication mechanisms.
• Secure data storage.
• Password protection.
• Backup procedures.
• Monitoring and logging.
• Security audits.
• Software updates and security patches.
• Confidentiality obligations for personnel.
• Third-party security controls where applicable.

However, no electronic transmission, website, cloud system or storage mechanism can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect your information, we cannot guarantee absolute security.

9. EMPLOYEE AND AUTHORISED ACCESS

Access to personal information within NIDEE will be limited to personnel, contractors and authorised representatives who reasonably require access for legitimate business purposes.

Personnel with access to confidential information may be subject to confidentiality obligations and internal security requirements.

Unauthorised access, disclosure, copying, downloading or misuse of customer information is prohibited.

10. DATA RETENTION

NIDEE retains personal information only for as long as reasonably necessary to provide requested Services, complete ongoing transactions, resolve disputes, maintain business records, meet contractual obligations, comply with legal and regulatory requirements, establish or defend legal claims, and prevent fraud or misuse.

Certain financial, transaction, customer-service or dispute records may need to be retained for specific periods under applicable laws or regulatory requirements.

Where information is no longer required, NIDEE will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal or regulatory retention requirements.

11. YOUR RIGHTS

Subject to applicable law, you may have rights regarding your personal information, including:

11.1 Right to Access

You may request information regarding the personal information processed by us, subject to applicable legal limitations.

11.2 Right to Correction

You may request correction or updating of inaccurate or incomplete information.

11.3 Right to Deletion

You may request deletion of personal information where legally applicable and where we are not required to retain it.

11.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent, subject to applicable legal requirements and the consequences of such withdrawal.

11.5 Right to Grievance Redressal

You may raise concerns regarding our handling of personal information through our designated grievance mechanism.

11.6 Right to Nominate

Where applicable under the prevailing data protection framework, you may exercise nomination-related rights in accordance with applicable law.

Rights may be subject to verification, legal requirements, regulatory obligations and legitimate reasons for retaining certain information.

12. HOW TO EXERCISE YOUR RIGHTS

To submit a request regarding your personal information, please contact NIDEE using the contact details provided in this Privacy Policy.

To protect your information, we may need to verify your identity before processing certain requests.

We may request additional information where reasonably necessary to verify the identity of the requester and prevent unauthorised disclosure.

13. GRIEVANCE REDRESSAL

If you have a concern regarding our processing of your personal information, you may first contact NIDEE through the contact details provided below.

We will review and respond to grievances in accordance with applicable law and our internal grievance-handling procedures.

Where a matter falls within the jurisdiction of a regulator or statutory authority, you may also have rights to approach the relevant authority.

14. COOKIES AND TRACKING TECHNOLOGIES

Our Website may use cookies and similar technologies to enable essential website functionality, remember user preferences, understand website usage, improve website performance, analyse traffic, improve user experience and detect security issues.

Cookies may include:

• Session cookies.
• Persistent cookies.
• Essential cookies.
• Analytics cookies.
• Functional cookies.

You may control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality or availability of some Website features.

15. THIRD-PARTY WEBSITES AND SERVICES

Our Website may contain links to third-party websites, platforms or services.

These third-party websites operate independently from NIDEE and may have their own privacy policies.

NIDEE is not responsible for the privacy practices, security, content or policies of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

16. CHILDREN'S PRIVACY

Our Services are intended primarily for adults and persons who are legally capable of entering into applicable agreements.

We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.

If we become aware that personal information has been collected in violation of applicable requirements, we will take reasonable steps to address the situation.

17. FRAUD PREVENTION AND SECURITY

NIDEE may process information to identify, prevent and investigate:

• Fraud.
• Identity theft.
• Impersonation.
• Unauthorised account activity.
• False or fraudulent documents.
• Cybersecurity incidents.
• Misuse of our Services.
• Other unlawful or prohibited activities.

Information may be disclosed to relevant authorities or service providers where legally permitted or required.

18. DATA BREACH AND SECURITY INCIDENTS

In the event of a security incident involving personal information, NIDEE will take reasonable steps to:

1. Identify and assess the incident.
2. Contain and mitigate the impact.
3. Investigate the incident.
4. Restore affected systems where necessary.
5. Maintain appropriate records.
6. Notify affected individuals and/or authorities where required by applicable law.

19. ACCURACY OF INFORMATION

We rely on information provided by customers and third parties.

You are responsible for providing accurate, complete and current information and for notifying us when relevant information changes.

If you identify inaccurate information in our records, you may request correction through the appropriate channel.

20. MARKETING COMMUNICATIONS

Where permitted by applicable law, NIDEE may communicate information about:

• Our Services.
• Service updates.
• Educational content.
• Important announcements.
• Offers or promotional communications.

You may opt out of non-essential promotional communications through the available unsubscribe mechanism or by contacting us.

Service-related or legally required communications may continue even after you opt out of promotional communications.

NIDEE does not sell your personal information to third parties for their independent marketing purposes.

21. BUSINESS TRANSFERS

If NIDEE undergoes a merger, acquisition, restructuring, sale of assets, investment, financing or other corporate transaction, personal information may be transferred as part of that transaction where legally permitted.

Any such transfer will remain subject to applicable privacy and data protection requirements.

22. LEGAL DISCLOSURES

NIDEE may disclose personal information where reasonably necessary to:

• Comply with applicable law.
• Respond to lawful government requests.
• Respond to court orders.
• Protect NIDEE's rights.
• Protect customers or other individuals.
• Investigate fraud.
• Prevent unlawful activity.
• Enforce agreements.
• Establish or defend legal claims.

23. CHANGES TO THIS PRIVACY POLICY

NIDEE may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal or regulatory requirements, data-processing practices, security improvements or customer feedback.

When material changes are made, we may provide appropriate notice through our Website or other suitable communication channels.

The updated version will display the revised "Last Updated" date.

24. GOVERNING LAW

This Privacy Policy shall be governed by the applicable laws of India.

Subject to applicable law and regulatory jurisdiction, disputes relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts in Bangalore, Karnataka, India.

Nothing in this section limits any statutory rights or remedies available to an individual under applicable law.

25. CONTACT INFORMATION

For questions, requests, privacy concerns or grievances relating to this Privacy Policy, please contact NIDEE using the information below.

26. ACKNOWLEDGEMENT

By using the NIDEE Website or requesting our Services, you acknowledge that you have had an opportunity to review this Privacy Policy and understand how NIDEE may collect, use, process, retain and disclose personal information in accordance with this Policy and applicable law.