Privacy Policy

1. Categories of Information We Collect

When you browse https://nbcapital.co.in, calculate estimates on our tools, apply to become a DSA partner, or submit loan enquiries, we may collect the following categories of data:

Technical Data: We may also automatically log standard technical data such as IP address, browser type, device information, operating system, and referral URLs via technical session cookies for security and analytics.

2. Purpose of Processing Your Data

We process your personal and financial information solely for lawful, specified purposes:

• Loan Eligibility Evaluation: Assessing your requirements and profile to determine relevant financing solutions across our partner institutions.
• Application Facilitation: Packaging and securely forwarding your profile and documents to authorized Lending Partners (commercial banks, NBFCs, HFCs) upon your explicit request.
• Communication & Updates: Contacting you via phone call, SMS, WhatsApp, or email to provide application updates, request additional documents, and coordinate lender interactions.
• Partner Operations: Reviewing and administering channel partner and DSA onboarding, verification, and commission compliance.
• Fraud Prevention & Legal Compliance: Complying with statutory reporting requirements, Prevention of Money Laundering Act (PMLA) obligations, and anti-fraud protocols.

3. Disclosure & Sharing of Information

NB Capital strictly respects the confidentiality of customer data. We do NOT sell, rent, lease, or trade your personal data to third-party telemarketers or external advertising networks. Disclosures are made strictly on a need-to-know basis to:

• Regulated Lending Partners: Authorized commercial banks, NBFCs, and HFCs considering your credit application, who conduct independent KYC and credit assessment.
• Credit Information Companies: Regulated credit bureaus (such as CIBIL, Equifax, Experian, CRIF High Mark) via lending institutions to verify creditworthiness in accordance with the Credit Information Companies (Regulation) Act, 2005.
• Authorized Service Providers: Vetted third-party service providers performing essential functions such as cloud server hosting, document legal scrutiny, property valuation, or field verification on behalf of lending channels.
• Legal & Regulatory Authorities: Competent judicial courts, regulatory authorities (RBI), income tax departments, or law enforcement bodies when mandated under binding court orders, summons, or applicable Indian laws.

4. Data Security & Storage Standards

In compliance with Section 43A of the Information Technology Act, 2000 and the SPDI Rules, 2011, NB Capital implements comprehensive technical, administrative, and physical security measures:

• Transport Layer Security (TLS/SSL 256-bit encryption) for data transmitted between your browser and our platform.
• Restricted, role-based internal access permissions ensuring only authorized personnel access customer dossiers.
• Secure cloud infrastructure hosted within compliant data centers in India in alignment with RBI data localization mandates.

While we take all reasonable commercial precautions, transmission of data over the internet cannot be guaranteed to be 100% impenetrable. Users are advised to exercise vigilance and avoid transmitting credentials over unsecured networks.

5. Data Retention & Disposal

We retain your personal and financial information only for as long as reasonably required to fulfill the facilitation of your loan requirement, maintain record-keeping for regulatory audits, resolve customer disputes, and comply with statutory limitation periods under Indian law.

Once the retention threshold is reached, documents and digital records are purged, anonymized, or securely shredded using industry-standard disposal protocols.

6. Your Rights Under DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you are entitled to:

• Right to Access & Summary: Request confirmation and an overview of the personal data processed by us.
• Right to Correction & Erasure: Request the rectification of inaccurate data or the deletion of data that is no longer necessary, subject to statutory retention obligations.
• Right of Grievance Redressal: Submit a complaint regarding data processing to our designated Grievance Officer.
• Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.
• Withdrawal of Consent: Withdraw your consent for future communication at any time by writing to our compliance desk. (Note: Withdrawal of consent may terminate our ability to facilitate ongoing credit processing with lenders).

7. Governing Law & Exclusive Ahmedabad Jurisdiction

This Privacy Policy, its validity, interpretation, and all disputes concerning data protection, privacy rights, or platform security shall be exclusively governed by the laws of the Republic of India.

8. Grievance Redressal & Data Protection Officer

In accordance with Rule 5(9) of the Information Technology (SPDI) Rules, 2011 and Section 12 of the DPDP Act, 2023, the details of our designated Grievance Redressal Officer are as follows: