Privacy Policy

1. Personal Data We May Collect

• Name, mobile number and email address.
• Date of birth, address and identity/KYC information.
• PAN and other permitted identification information.
• Employment, occupation and income information.
• Bank account and financial information.
• Loan application, transaction and repayment information.
• Credit information and credit bureau information.
• Device, browser, IP address and technical information.
• Customer-support communications and grievance records.
• Information necessary for fraud prevention, security and regulatory compliance.

2. Purposes of Processing

• Customer registration and onboarding.
• KYC and identity verification.
• Processing and facilitating loan applications.
• Credit assessment and underwriting support.
• Sharing required information with the lender and authorised credit information companies.
• Fraud, risk and security monitoring.
• Loan servicing and customer communication.
• Payment and repayment processing.
• Customer support and grievance handling.
• Compliance, record keeping, audit and dispute resolution.
• Prevention of misuse, fraud and unlawful activities.
• Other purposes disclosed to the customer and permitted by applicable law.

3. Lender and LSP Roles

"Happy Credit" acts as the LSP/DLA and technology/customer interface. Relevant NBFC Partners is the lender/regulated entity responsible for the lending decision and other functions allocated to it under applicable law and contractual arrangements.

4. Consent and Lawful Processing

Where consent is required, it shall be obtained in an informed manner for specified purposes. Where permitted by law, personal data may also be processed on another lawful basis. Withdrawal of consent, where available, does not affect processing that remains lawful or is required for legal, regulatory, contractual, fraud-prevention or dispute-resolution purposes.

5. Sharing of Personal Data

• Relevant NBFC Partners
• Credit Information Companies.
• KYC and identity-verification providers.
• Payment and banking service providers.
• Technology, cloud and communication service providers.
• Fraud and risk-management service providers.
• Auditors, consultants and professional advisers.
• Regulators, government authorities and law-enforcement agencies.
• Other authorised persons where required or permitted by law.

6. Data Security

We implement reasonable technical and organisational measures designed to protect personal data from unauthorised access, misuse, alteration, disclosure, loss or destruction. Measures may include encryption, masking, access controls, authentication, monitoring, logging and backups.

7. Data Storage

Personal data shall be stored and processed in accordance with applicable law and regulatory requirements, including applicable RBI requirements relating to digital lending. Where the lender prescribes specific data-storage or processing requirements, "Happy Credit" shall follow requirements applicable to its LSP/DLA role.

8. Data Retention

Personal data shall not be retained longer than reasonably necessary for the purpose for which it was collected, except where retention is required or permitted by applicable law, RBI requirements, contractual obligations, audit, fraud prevention, legal proceedings or dispute resolution.

9. Customer Rights

Subject to applicable law and commencement/applicability of relevant provisions, customers may have rights including access, correction/update, erasure where applicable, withdrawal of consent, grievance redressal and nomination.

10. Data Breach

In the event of a personal-data breach, "Happy Credit" shall take reasonable steps to contain, investigate, mitigate and remediate the incident and provide notifications to affected persons and authorities where required by applicable law.

11. Cookies and Technical Information

The Website may use cookies, logs and similar technologies for security, functionality, analytics and service improvement. Customers may manage cookies through browser settings, subject to any impact on Website functionality.

12. Children's Data

Our services are intended for persons legally capable of entering into the relevant financial arrangements. We do not knowingly seek personal data from persons who are not legally eligible to use the relevant financial services.

13. Third-Party Services

Third-party websites and services may have separate privacy practices. Customers should review the applicable privacy policies before providing information to such third parties.

14. Privacy Grievances

Privacy-related complaints may be submitted to the designated Grievance Redressal Officer. Complaints concerning lender-controlled matters may also be addressed to the lender through its applicable grievance mechanism.

15. Changes

This Privacy Policy may be updated periodically. The revised version shall be published on the Website with the revised effective date.

16. Contact