Privacy Policy

1. About Us — Data Fiduciary

Uttarakhand Loans (operating through its DSA network under Uttarakhand Loans) is the Data Fiduciary as defined under Section 2(i) of the Digital Personal Data Protection Act, 2023.

2. Personal Data We Collect

We collect only the personal data that is necessary for providing our loan advisory services (data minimisation principle under the DPDP Act 2023):

2.1 Data You Provide Directly

2.2 Data Collected Automatically

We do not collect Sensitive Personal Data such as Aadhaar number, PAN, financial account details, or biometric data through this website.

3. Legal Basis for Processing — Consent

Under Section 6 of the DPDP Act 2023, we process your personal data only on the basis of free, specific, informed, unconditional, and unambiguous consent.

When you submit your details through our EMI Schedule Download form or enquiry form, you provide explicit consent by ticking the consent checkbox and clicking submit. This consent is recorded with a timestamp.

You may withdraw your consent at any time by writing to us at uttarakhandloans@gmail.com. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

4. How We Use Your Personal Data

We use your personal data strictly for the following purposes:

• To provide personalised loan advisory services and recommend suitable loan products
• To connect you with our banking and NBFC partners for loan applications
• To respond to your enquiries via WhatsApp, phone, or email
• To send you relevant loan offers, interest rate updates, and scheme information
• To generate and deliver your requested EMI amortisation schedule
• To maintain records as required by our banking partner agreements
• To comply with legal obligations under applicable Indian laws

We do not use your data for automated decision-making or profiling that produces legal or significant effects on you.

5. Data Sharing — Who We Share With

We share your personal data only as necessary and only with the following categories of recipients:

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

We do not transfer your personal data outside India without appropriate safeguards as required under the DPDP Act 2023.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy:

After the retention period, data is securely deleted or anonymised.

7. Your Rights as a Data Principal

Under the DPDP Act 2023 (Sections 11–13), you have the following rights:

We will respond to all data rights requests within 30 days of receipt.

8. Data Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Website served over HTTPS (SSL/TLS encryption)
• Google Sheets access restricted to authorised personnel only
• WhatsApp communications protected by end-to-end encryption
• No storage of sensitive financial credentials on our systems
• Regular review of data access controls

In the event of a personal data breach that is likely to cause harm to you, we will notify you and the Data Protection Board of India as required under the DPDP Act 2023.

9. Cookies

Our website may use cookies and similar tracking technologies for:

• Essential cookies — Necessary for the website to function
• Analytics cookies — To understand how visitors use our site (Google Analytics)

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

10. Children's Privacy

Our services are intended for adults (18 years and above). We do not knowingly collect personal data from children under 18 years of age. If we become aware that we have collected personal data from a child, we will delete it immediately.

11. Links to Third-Party Websites

Our website contains links to banking partner websites, government portals, and other third-party sites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before sharing any personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

Continued use of our website or services after changes become effective constitutes your acceptance of the updated policy.

13. Grievance Officer DPDP Mandatory

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, and Rule 7 of the IT (Reasonable Security Practices) Rules, 2011, we have appointed a Grievance Officer:

If you are not satisfied with our response, you may approach the Data Protection Board of India as established under the DPDP Act 2023.

14. Governing Law & Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any dispute arising out of this Privacy Policy shall be resolved through the following mechanism:

• Tier 1 — Mediation & Conciliation: Parties shall attempt resolution through mediation within 30 days, governed by the Mediation Act, 2023, at Dehradun. The mediator shall be appointed solely by Uttarakhand Loans.
• Tier 2 — Arbitration: Unresolved disputes shall be referred to binding arbitration under the Arbitration and Conciliation Act, 1996, with seat at Dehradun. The sole arbitrator shall be appointed solely by Uttarakhand Loans.
• Tier 3 — Courts: Jurisdiction shall vest exclusively in the courts at Dehradun, Uttarakhand, India for matters not capable of arbitration or requiring urgent interim relief.