Legal
Privacy policy
- 1. What we collect
- 2. Why we collect it
- 3. Who we share it with
- 4. Consent and withdrawal
- 5. How long we keep it
- 6. Your rights
- 7. Security
- 8. Cookies and analytics
- 9. Children
- 10. Changes and contact
1. What we collect
Only what the page you are on needs. Specifically:
- Browsing the site and using calculators — nothing that identifies you. Calculator inputs stay in your browser.
- Checking eligibility or applying — your name, mobile number, email and PIN code; and the product questions you answer (for example loan amount, tenure, employment type, income, business turnover, property status, card spend pattern).
- Verifying your number — the one-time code you enter, compared and discarded. We do not store OTPs.
- Contacting us — what you write, your email and, if you give it, a mobile number.
- Technical — IP address, device and browser type, pages visited and timestamps, in server logs kept for security and debugging.
We do not collect PAN, Aadhaar, passport or other identity numbers, bank login details, card numbers, PINs or CVVs, your credit report, or documents. If a lender needs any of these, it asks you directly, in its own systems, under its own KYC process.
2. Why we collect it
| Purpose | Data used | Basis |
|---|---|---|
| Show products you are likely eligible for | PIN code, product answers | Your request (you ask us to check) |
| Create and send your application to the lender you choose | Contact details, product answers | Your specific consent at the review step |
| Confirm it is your number and keep your account secure | Mobile, OTP, technical data | Your request; security |
| Show you the lender's status and support you | Application reference, status events, your messages | Your request |
| Tell you when a product category opens (if you registered) | Email, product, PIN code | Your request |
| Keep records required by law or by lender agreements | Application and consent records | Legal obligation |
We do not use your data to market unrelated products, and we do not build profiles for advertising.
3. Who we share it with
- The lender you select. Named on screen before you consent. They receive the details on your application form and your consent record, and nothing else from us.
- Service providers that work for us — hosting, database, email and SMS delivery, error monitoring. They process data on our instructions, under contract, and cannot use it for their own purposes.
- Authorities where the law requires it, or to establish or defend legal claims.
We do not sell personal data. We do not share your details with more than one lender under a single consent.
4. Consent and withdrawal
Before an application is sent, you see a notice stating the recipient, the purpose, what is and is not shared, and the notice version. We record which version you agreed to, when, and over which channel. To withdraw, email privacy@loankard.com with your reference number. We stop processing, inform the lender, and confirm to you in writing. Withdrawal does not undo processing already done, and the lender's own retention obligations apply to what it already holds.
5. How long we keep it
| Record | Retention |
|---|---|
| Application and consent records | As long as required by law and by the lender agreement covering that application, then deleted or anonymised |
| Enquiries that never became an application | 90 days after last activity |
| Registrations of interest | Until the category opens and we have written to you, or 12 months, whichever is first |
| Support messages | 24 months after closure |
| Server logs | 90 days |
6. Your rights
Under the Digital Personal Data Protection Act, 2023 and the rules under it, you can ask us to tell you what we hold, correct it, erase it where we no longer need it, and tell you who we have shared it with. You can also nominate someone to exercise these rights for you. Write to privacy@loankard.com; we respond within the period the law allows and usually sooner. If you are not satisfied, our grievance process applies, and you may approach the Data Protection Board of India.
7. Security
All traffic is encrypted in transit and data is encrypted at rest. Access inside LoanKard is role-based and logged; staff see only what their role needs. Lender credentials live in a secrets manager, not in our code or database. We keep an incident-response plan and will inform you and the relevant authorities of a breach that affects you, as the law requires.
8. Cookies and analytics
We use a session cookie to keep you signed in and a privacy-conscious analytics tool that counts pages, not people. We do not use advertising cookies or third-party trackers. Your browser's "do not track" and cookie settings are respected.
9. Children
Our services are for adults. We do not knowingly collect data from anyone under 18 and will delete it if we learn we have.
10. Changes and contact
When this policy changes we update the version and date at the top and, for changes that affect how your data is used, tell you by email before they take effect. Questions go to privacy@loankard.com.