Data Protection
Privacy Policy
1. Introduction & Scope
Advisconsul E-Services Private Limited ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our services, website, or mobile application.
This Policy applies to all users of advis.money's platform, including loan applicants, borrowers, and visitors. By using our services, you consent to the practices described in this Policy.
This Privacy Policy is in compliance with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, and applicable RBI guidelines on data privacy for Lending Service Providers.
2. Information We Collect
We collect the following categories of personal information:
Identity & KYC Data:
- Full legal name, date of birth, gender
- Aadhaar number (masked as per UIDAI guidelines) and PAN number
- Photograph and selfie for liveness detection
- Signature
Contact & Location Data:
- Mobile number, email address
- Current residential and permanent address
- GPS location (with your explicit consent, for fraud prevention)
Financial Data:
- Bank account details (account number, IFSC, branch)
- Bank statements (last 3–6 months)
- Income and employment information
- Credit bureau data (CIBIL, Experian, etc.)
Device & Usage Data:
- Device ID, IP address, browser type
- App usage patterns and session data
- SMS metadata (for income verification, with explicit consent)
3. How We Use Your Information
We use your personal data for the following purposes:
- Loan Processing: To evaluate your creditworthiness, verify identity, and process your loan application
- KYC Compliance: To fulfil our obligations under Prevention of Money Laundering Act (PMLA) and RBI KYC Master Directions
- Disbursement & Collection: To disburse loan funds and collect EMI payments via NACH/ECS/UPI
- Communication: To send loan status updates, EMI reminders, and promotional offers (with consent)
- Fraud Prevention: To detect and prevent fraudulent applications and financial crime
- Credit Bureau Reporting: To report loan performance data to licensed credit information companies
- Legal Compliance: To comply with applicable laws, regulations, and court orders
- Service Improvement: To analyse usage patterns and improve our platform
4. Data Sharing & Disclosure
We do not sell your personal data to third parties. We may share your data with:
| Recipient | Purpose | Legal Basis |
|---|---|---|
| Salora Capital Limited (NBFC Partner) | Loan origination and disbursement | Contractual necessity |
| Credit Bureaus (CIBIL, Experian) | Credit report pull & reporting | Legal obligation |
| KYC/e-KYC Service Providers | Identity verification | Contractual necessity |
| Payment Gateways / Banks | EMI collection via NACH/UPI | Contractual necessity |
| Government Authorities / RBI | Regulatory compliance | Legal obligation |
| Fraud Prevention Services | Risk assessment | Legitimate interest |
All third-party service providers are contractually obligated to maintain data confidentiality and use your data only for the specified purpose.
5. Data Security
We implement industry-standard security measures to protect your personal data:
- Encryption: All data in transit is encrypted using TLS 1.2+ and data at rest is encrypted using AES-256
- Access Control: Role-based access controls ensure only authorized personnel can access your data
- Secure Servers: Data is stored on ISO 27001-certified cloud infrastructure in India
- Regular Audits: We conduct periodic security audits and vulnerability assessments
- Data Masking: Aadhaar numbers are masked as per UIDAI guidelines and stored only in tokenized form
Despite these measures, no method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in risk to your rights, we will notify you within 72 hours as per applicable law.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable laws:
- Loan Application Data: 5 years from loan closure or rejection (as per RBI/PMLA requirements)
- KYC Documents: 5 years from the end of the customer relationship
- Transaction Records: 10 years from the date of transaction
- Communication Logs: 2 years from date of communication
- Website Cookies: Session cookies expire on browser close; persistent cookies for up to 12 months
After the retention period, your data is securely deleted or anonymized in accordance with applicable regulations.
7. Your Rights
You have the following rights with respect to your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal retention requirements)
- Right to Restrict Processing: Object to certain types of data processing
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Withdraw Consent: Withdraw consent for optional data processing (marketing communications)
To exercise any of these rights, contact our Data Protection Officer at advisconsul@gmail.com. We will respond within 30 days. Note that some rights may be limited where we have legal obligations to retain data.
8. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience:
- Essential Cookies: Required for the website to function (session management, security)
- Analytics Cookies: Help us understand how visitors use our site (Google Analytics, anonymized)
- Preference Cookies: Remember your settings and preferences
- Marketing Cookies: Used to deliver relevant advertisements (only with your consent)
You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect website functionality. We do not use cookies to collect Aadhaar or financial information.
9. Children's Privacy
Our services are not directed at or intended for individuals under the age of 18 years. We do not knowingly collect personal information from minors. If we become aware that a minor has submitted personal information, we will delete it immediately.
If you believe your child's information has been collected by us, please contact us immediately at advisconsul@gmail.com.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date of the most recent revision is displayed at the top of this page.
We will notify you of material changes via email (if you have provided one) or through a prominent notice on our website at least 7 days before the changes take effect. We encourage you to review this Policy periodically.
For any questions about this Privacy Policy or our data practices, please contact us at advisconsul@gmail.com or call us at +91 81687 67637.
Questions? We're here to help.
If you have any questions about this document, please reach out to us.