Privacy Policy

Overview

BANQUEEN Financial Services Marketplace ("BANQUEEN", "we", "us", "our") values the privacy and security of your personal information. This Privacy Policy describes how we collect, use, share, store and protect personal data through our website, mobile interfaces, APIs and services (collectively, the "Platform").

By accessing or using BANQUEEN, you consent to the practices described in this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Platform.

This policy is issued under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology Act, 2000, and aligns with the Digital Personal Data Protection Act, 2023 to the extent applicable. We may update this policy from time to time; the revised version will be posted on this page with the effective date.

Data We Collect

We collect data that is necessary to provide our services, comply with legal obligations and improve your experience. The data we collect falls into the following categories:

1. Information You Provide Directly

• Identity details: Name, date of birth, gender, photograph and signature as required for KYC and application forms.
• Contact information: Mobile number, email address, residential address and communication preferences.
• Financial information: Employment type, monthly income, employer name, PAN, Aadhaar (voluntary, where permitted), bank account details, existing loan/credit card details and credit score.
• KYC documents: PAN card, Aadhaar, passport, driving licence, voter ID, utility bills, bank statements and salary slips.
• Communication records: Emails, chat transcripts, call recordings (where legally permitted and with notice), support tickets and feedback.
• Retailer information: Shop name, GSTIN (if applicable), address, business documents and banking details for commission payouts.

2. Information Collected Automatically

• Device and log data: IP address, browser type and version, operating system, device identifiers, pages visited, time spent and click patterns.
• Location data: Approximate location derived from IP address or precise location if you grant permission (for branch/ATM locator and service eligibility).
• Cookies and similar technologies: See the Cookies & Tracking section below.

3. Information from Third Parties

• Credit information: Credit score, credit report and repayment history from RBI-approved credit information bureaus such as CIBIL, Experian, Equifax and CRIF.
• KYC verification: Validation of identity documents through government-authorised agencies such as UIDAI, NSDL e-Gov or CKYC.
• Partner institution data: Application status, offers, approvals and disbursement details from banks, NBFCs and insurers.

How We Use Your Data

We use the data we collect for the following purposes:

• Service delivery: To display product comparisons, check eligibility, submit applications, process payments, manage wallet transactions and share status updates.
• Customer support: To respond to your queries, resolve complaints and improve our services.
• Personalisation: To show product recommendations, offers and content relevant to your profile and preferences.
• Credit checks: To obtain your credit report, verify eligibility and share it with partner lenders (with consent).
• Fraud prevention: To detect, prevent and investigate fraud, identity theft, money laundering and other illegal activities.
• Legal compliance: To comply with KYC, anti-money laundering (AML), tax, regulatory and court orders.
• Marketing communications: To send promotional information, newsletters and product updates with your consent. You can opt out at any time.
• Analytics and improvement: To analyse usage patterns, improve our technology and develop new features in aggregated or pseudonymised form.

Legal Basis for Processing

We process personal data on the following legal bases under Indian law and good data-protection practices:

Data Sharing & Disclosure

We do not sell your personal data. We share data only as described below:

1. With Partner Institutions

When you apply for or express interest in a product, we share your application data with the relevant bank, NBFC, insurer, AMC or other product provider to evaluate, process and service your request. This sharing is based on your explicit consent and the product provider's own privacy policy.

2. With Service Providers

We use trusted vendors for hosting, analytics, customer communication, payment processing, KYC verification, fraud detection and IT support. These providers are contractually bound to use your data only for the specified purpose and to maintain confidentiality and security.

3. With Retailers (Where Applicable)

If you engage with an authorised BANQUEEN retailer, the retailer may access limited information necessary to assist with your application. Retailer access is controlled and logged.

4. For Legal and Safety Reasons

We may disclose data if required by law, court order, government authority or to protect our rights, property, users or the public from harm or illegal activity.

5. Business Transfers

If BANQUEEN undergoes a merger, acquisition, asset sale or restructuring, your data may be transferred as part of the transaction, subject to confidentiality obligations.

Cookies & Tracking

We use cookies, web beacons, local storage and similar technologies to operate, secure and improve the Platform. Cookies are small files stored on your device that help us remember your preferences and understand how you use BANQUEEN.

Types of Cookies We Use

• Essential cookies: Required for the Platform to function (e.g., login sessions, CSRF protection, form submissions).
• Functional cookies: Remember your preferences and settings to improve your experience.
• Analytics cookies: Help us understand traffic, usage and performance in aggregated form.
• Advertising cookies: Used, with your consent, to deliver relevant marketing and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Blocking essential cookies may affect the functioning of the Platform.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes and to enforce our agreements.

After the retention period, data is securely deleted, anonymised or archived in a manner that prevents re-identification.

Data Security

We implement reasonable and appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration and destruction. These include:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of sensitive data at rest using AES-256.
• Role-based access controls, multi-factor authentication and strong password policies for staff.
• Regular security assessments, vulnerability scanning and code reviews.
• Incident response and breach notification procedures.
• Periodic training for employees and retailers on data protection.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

Your Rights

Under applicable data protection laws, you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data, subject to legal and contractual exceptions.
• Right to object: Object to certain processing, including direct marketing.
• Right to withdraw consent: Withdraw consent for processing that is based on consent.
• Right to data portability: Request your data in a machine-readable format, where technically feasible.
• Right to grievance redressal: File a complaint with our Grievance Officer or a competent authority if you believe your rights have been violated.

To exercise these rights, please contact us at support@banqueen.in. We will respond within the timelines prescribed by law and verify your identity before processing your request.

Third-Party Links

The Platform may contain links to partner websites, government portals, social media and other third-party sites. We are not responsible for the privacy practices or content of these websites. We encourage you to review the privacy policies of any third-party site you visit.

Children's Privacy

BANQUEEN is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children under 18. If we learn that we have collected data from a child without verifiable parental consent, we will delete it promptly.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, we have appointed a Grievance Officer to address any concerns regarding our data processing practices.

Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements or business operations. When we make material changes, we will notify you by posting a prominent notice on the Platform, sending an email or requiring your renewed consent, as required by law.

The effective date at the top of this policy indicates the most recent revision. We encourage you to review this policy periodically.