Compliant with the Digital Personal Data Protection (DPDP) Act, 2023
This Privacy Notice applies to the website and digital platforms operated by Kaizen Financial Services ("Data Fiduciary", "we", "us", or "our"), based in Nagpur, Maharashtra. This policy outlines how we collect, process, store, and protect your personal data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023. By using our services to apply for loans, mutual funds, or insurance products, you ("Data Principal") consent to the practices described below. You have the right to request this notice in English or any of the 22 languages listed in the Eighth Schedule of the Constitution.
As a Direct Selling Agent (DSA) and financial services provider, we collect the following categories of data:
Identity & KYC Data: Name, date of birth, Aadhaar number, PAN card, and address proof.
Financial & Credit Data: Bank statements, salary slips, Income Tax Returns (ITR), CIBIL score, and existing loan details.
Contact Data: Mobile number, email address, and residential address.
Technical Data: IP address, browser type, and device information when you browse our website.
We do not process your data without a defined purpose. Your data is processed under the following lawful bases:
Processing based on Consent: To evaluate your eligibility for financial products, submit applications to partner banks/AMCs/insurers on your behalf, and send promotional offers regarding mutual funds or loans.
Processing based on Legitimate Use: To fulfil legal obligations, including mandatory KYC/AML (Anti-Money Laundering) checks required by the RBI and SEBI, and to prevent fraud.
We do not sell your personal data. We only share your data with authorised third-party processors under strict Data Processing Agreements (DPAs):
Financial Partners: Banks, Non-Banking Financial Companies (NBFCs), Asset Management Companies (AMCs), and Insurance providers to process your specific applications.
Credit Bureaus: To fetch credit reports (only with your explicit consent).
Regulatory Authorities: When legally compelled by courts, RBI, SEBI, or tax authorities.
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as mandated by financial regulations (typically 7 years for financial records). Once the retention period expires or the purpose is fulfilled, your data is securely deleted.
Under Sections 11–14 of the DPDP Act, 2023, you hold the following rights:
Right to Access: Request a summary of the personal data being processed and the identities of third parties it has been shared with.
Right to Correction & Erasure: Request correction of inaccurate KYC/financial data or request deletion of data that is no longer necessary.
Right to Withdraw Consent: You may withdraw your consent at any time. However, withdrawing consent for mandatory KYC data may result in the termination of financial services.
Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
Entries you add to the expense tracker tool on this website are stored only in your own browser's local storage, on your device. We do not receive, see, or store this data on our servers.
In compliance with the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing and privacy rights.
We will acknowledge your grievance within 24 hours and aim to resolve it within 30 days. If you are unsatisfied with our resolution, you have the right to escalate your complaint directly to the Data Protection Board of India (DPBI).