Privacy Policy

1 Personal Information We Collect

We collect the following categories of personal information to provide and improve our loan services:

• Identity data: Full name, date of birth, gender, PAN card number, Aadhaar number
• Contact data: Mobile number, email address, residential address, city, state, pincode
• Financial data: Monthly salary, employment type, bank statements, loan amount required
• KYC documents: Aadhaar Card, PAN Card, salary slips, bank statements, passport-size photograph
• Technical data: IP address, browser type, device information, pages visited, session data
• Transaction data: Loan application details, repayment history, communication records

2 Why We Collect This Information

We use your personal data only for lawful purposes, including:

• Processing and evaluating your personal loan application
• Conducting credit assessment and CIBIL score verification
• Completing KYC and identity verification as required by RBI guidelines
• Communicating loan status, approval decisions, and repayment schedules
• Managing your loan account, EMI reminders, and repayment tracking
• Complying with legal obligations under the IT Act 2000, DPDPA 2023, and RBI guidelines
• Preventing fraud, money laundering, and unauthorised access
• Improving our website and services
• Sending service-related notifications (promotional communications only with your separate consent)

3 Cookies

Our website uses cookies and similar technologies. The types of cookies we use are:

• Essential cookies: Required for the website and loan application form to function correctly. Cannot be disabled.
• Analytics cookies: Help us understand how users interact with the site (e.g. Google Analytics). Data is aggregated and anonymised.
• Advertising cookies: Used by Google Ads to measure ad effectiveness. Placed only with your consent.
• Functional cookies: Remember your preferences (e.g. city, state selections) to improve your experience.

You can manage or withdraw cookie consent at any time through your browser settings. Disabling non-essential cookies will not affect your ability to apply for a loan.

4 Google Advertising & Analytics

CreditPey uses Google Ads and Google Analytics to understand how visitors use our website and to display relevant advertisements.

Google Analytics

We use Google Analytics to collect anonymised information about how visitors interact with our website, such as pages visited, time on site, device type, and geographic location. This data does not personally identify you. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Google Ads & Remarketing

We use Google Ads to advertise CreditPey's services. We may use remarketing features to show ads to users who have previously visited our website. This means:

• Third-party vendors, including Google, may show our ads on other websites
• Google uses cookies (such as the DoubleClick cookie) to serve ads based on your prior visits
• These cookies track visits but do not store personally identifiable information

You can opt out of Google's interest-based advertising by visiting Google's Ads Settings or the Network Advertising Initiative opt-out page.

Conversion Tracking

We use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns. When you complete an action on our website (such as submitting a loan application), a conversion cookie may be placed on your device. This information is aggregated and anonymous — it does not identify you personally.

5 Third-Party Sharing

We do not sell, rent, or trade your personal information. We share your data only in the following circumstances:

• Google LLC — for advertising, analytics, and remarketing services
• Credit bureaus (CIBIL, Experian, CRIF, Equifax) — for credit score verification as required by RBI
• Banking partners — for loan disbursal processing to your designated bank account
• KYC verification agencies — UIDAI-authorised agencies for Aadhaar verification
• SMS and email service providers — for service communications
• Legal and regulatory bodies — RBI, law enforcement, or courts when required by law

6 Data Security

We implement industry-standard security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted through our website
• Secure data storage with access controls and audit logs
• Regular security assessments and vulnerability testing
• Strict access controls — only authorised personnel with a need-to-know basis can access your data
• Employee training on data protection and confidentiality obligations

You have the right to withdraw from our services and request deletion of your personal data by contacting us at grievance@creditpey.com, subject to our legal retention obligations.

7 Data Retention

We retain your personal information only for as long as necessary to provide our services and comply with legal obligations:

• Approved loan customers: Minimum 8 years after loan closure, as required by RBI record-keeping guidelines
• Rejected or incomplete applications: Up to 2 years from the date of application
• KYC documents: As mandated by RBI KYC Master Directions
• Website usage data: Up to 12 months from collection

After the applicable retention period, your data is securely deleted or anonymised.

8 Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately at grievance@creditpey.com so that we may take appropriate steps to delete it.

9 Your Rights Under DPDPA 2023

Under India's Digital Personal Data Protection Act 2023 (DPDPA) and applicable RBI guidelines, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data, subject to legal retention requirements
• Right to withdraw consent: Withdraw your consent for data processing at any time
• Right to grievance redressal: Lodge a complaint with our Grievance Officer
• Right to nominate: Nominate a person to exercise these rights on your behalf

To exercise any of these rights, please contact our Grievance Officer. We will respond within 30 days of receiving your request.

10 Disclaimer

Digner Finlease and Investment Private Limited (CreditPey) is a registered NBFC under the Reserve Bank of India (Reg. No. B-14.01877). We are a regulated lending entity and do not operate any unauthorised lending app.

11 Changes to This Privacy Policy

CreditPey reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users by email or SMS where required by law
• Display a prominent notice on our website for significant changes

Continued use of our website after any changes constitutes your acceptance of the revised Privacy Policy.

12 Grievance Redressal

In accordance with the Information Technology Act 2000 and RBI's Fair Practices Code, we have appointed a Grievance Officer. You may contact our Grievance Officer for:

• Concerns about how your personal data is being used
• Requests to access, correct, or delete your data
• Complaints regarding loan processing, disbursal, or repayment
• Any other service-related grievance

If your grievance is not resolved, you may escalate to the RBI Ombudsman at cms.rbi.org.in.