Privacy Policy

Your privacy is very important to us. We enforce strict procedures to protect the security of information/data stored on our Website. The data shared with us is stored on secure servers with encryption, accessible only for official purposes. Employees who violate privacy policies are subject to disciplinary action, including potential termination and legal action.

We value your trust. Information collected helps us personalize and improve your experience. We gather data by two methods: Information you provide and Information collected automatically.

Information collected is stored on secure networks and may be used to send you promotional or transactional emails. You may unsubscribe from our newsletters at any time. Transactional SMS may also be sent for service-related purposes, regardless of DND status.

User information may be shared with corporate entities, affiliates, or third parties to fulfill services. Additionally, it may be disclosed when legally required.

We do not knowingly collect information from individuals under 18 years of age.

We use secure servers, encryption, and procedural safeguards to protect data. Sensitive personal and financial details (such as your name, mobile, email, PAN and date of birth) are encrypted at rest and in transit, and access is restricted and logged. Despite our efforts to secure information, 100% security cannot be guaranteed.

PakkaLoan is a loan aggregator / lead-generation and comparison platform and is not a lender, NBFC or bank. We do not lend, sanction, or disburse loans. Loan approval, amount, tenor, interest rate, APR and all charges are decided solely by the partner RBI-regulated bank/NBFC at its discretion. We do not charge borrowers any fee.

Under Indian law PakkaLoan operates as a Lending Service Provider (LSP) running a digital platform that compares loan products. We act on behalf of our partnered RBI-regulated lenders; the lender remains responsible for the loan and for compliance with the RBI (Digital Lending) Directions, 2025. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP), PakkaLoan is a Data Fiduciary and you are the Data Principal.

We collect only what we need to assess your eligibility and match you with lenders. Depending on how far you take an application, this may include:

• Identity & contact: full name, mobile number, email address, and one-time passcodes used to verify them.
• Demographic & location: city, state, pincode, and (where provided) date of birth, gender, employment type and income band.
• Financial & credit: PAN, requested loan amount and purpose, and — only with your explicit consent — your credit-bureau information and, where you choose, bank-statement data fetched via the RBI Account Aggregator framework.
• Technical: IP address, browser/device information and on-site activity, collected for security and to improve the service.

We do not access your phone contacts, call logs, files, photos or device SMS. Camera, microphone and precise location are never accessed for marketing — at most one-time for a KYC step you explicitly consent to (usually performed by the lender). We do not store your full Aadhaar number or any biometric data.

We use your data only for the specific purposes you consent to: processing your enquiry, assessing eligibility, matching and sharing your application with suitable lenders, running soft credit checks, verifying your identity, and — separately and only if you opt in — contacting you with offers and updates. We do not reuse loan or KYC data for marketing without your fresh consent. Each consent is captured as a distinct, unbundled, affirmative action (no pre-ticked boxes) and is independently withdrawable.

With your consent, we share your application details with the categories of recipients below, solely to deliver the service. We never sell your personal data.

• Partnered banks and NBFCs (the lenders) — to evaluate your request and make you an offer. Final approval, terms and disbursal are decided solely by the lender.
• Credit bureaus (CIBIL / Experian / Equifax / CRIF) — for a soft eligibility check that does not affect your credit score, where you consent.
• RBI-licensed Account Aggregators — to relay bank-statement data you consent to share; the data lands with the lender, not stored by us.
• Verification and communication service providers (identity/PAN verification, SMS, email and WhatsApp gateways) acting on our instructions under contract.
• Authorities, when disclosure is required by law.

All borrower data is stored on secure servers located in India. If any processing is ever performed outside India, the data is returned and deleted from the foreign servers within 24 hours.

We keep your data only as long as needed for the purpose it was collected, then erase it — except where law requires us to retain a regulated subset for longer. In particular, loan-application, KYC and bureau records are retained for the period mandated by RBI / PMLA norms (typically 5–7 years), and consent records for up to 7 years. If you ask us to erase your data, we delete everything we are not legally required to keep and explain what we must retain and why.

As a Data Principal under the DPDP Act, you have the right to access your personal data (including the identities of third parties it was shared with), to correct or update it, to erase it, to nominate someone to exercise your rights, and to grievance redressal.

For any privacy or data-protection concern, contact our Grievance Officer at info@pakkaloan.com, +91 80 4206 8681, 4th Floor, 22nd Cross, 16th Main Road, Site No - 233, Sector - 3, HSR Layout, Bangalore, Karnataka 560102, India. We operate a 30-day resolution timeline; unresolved lending-related complaints can be escalated to the RBI (sachet.rbi.org.in).

• Protect your passwords and avoid sharing them.
• Use anti-virus software and personal firewalls.
• Log out from public terminals after each session.