At KwikSalary, a unit of Gagan Metals Limited (RBI: B-14.01740), we prioritize your privacy and the security of your personal information. As a trusted Non-Banking Financial Company (NBFC) offering Advance Salary Loans, Personal Loans, Medical Loans, Travel Loans, and Emergency Loans, we ensure transparency in handling your data. This Privacy Policy outlines how we collect, use, store, and protect your information when you interact with our website (https://kwiksalary.com/), apply for a loan, or contact us. We comply with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and Reserve Bank of India (RBI) guidelines. Our commitment is to provide fast, reliable financial solutions while safeguarding your personal data with the highest standards of care.

Scope of This Policy
This policy applies to all users in Delhi/NCR, Mumbai, Bengaluru, Pune, and Hyderabad who visit our website, apply for a loan, or engage with our services online or offline. It covers personal information (e.g., name, contact details, financial data) collected with your explicit consent. By providing your data, you consent to its processing as outlined here, which you can withdraw at any time. We aim to ensure that you fully understand how your data is handled, empowering you to make informed decisions about sharing your information with us.

Information We Collect
We collect only necessary information to provide loan services, adhering to the principle of data minimization:

• Personal Information: Name, address, email, phone number, date of birth, PAN card (via CERSAI for CKYC compliance).
• Financial Information: Income details, bank statements (last 3–6 months), salary slips (last 1–3 months) for loan eligibility assessment.
• Employment Information: Employer name, job title, salary details (minimum ₹40,000/month) to ensure responsible lending.
• Technical Information: IP address, browser type, device data (via cookies, with your consent) to enhance your browsing experience.
• Other Information: Feedback, inquiries, or complaints you voluntarily provide during interactions with us.
  We do not collect biometric data or data from individuals under 18 without verifiable parental consent, as mandated by DPDPA requirements for protecting children’s privacy.

How We Use Your Information
We use your data responsibly to deliver our services:

• Process loan applications for Advance Salary, Personal, Medical, Travel, and Emergency Loans, ensuring timely funding.
• Verify identity and income through KYC processes to comply with RBI’s responsible lending guidelines.
• Communicate loan status, repayment reminders, or inquiry responses via email, phone, or SMS.
• Improve our website and services by analyzing user feedback and website usage patterns.
• Comply with legal obligations, including anti-money laundering laws and RBI audits.
• Resolve grievances efficiently within 5 working days through our dedicated redressal cell.
  We ensure your data is used only for the purposes stated, with your consent, and in compliance with applicable laws.

How We Share Your Information
We share your data only in specific, necessary circumstances:

• With trusted third-party partners (e.g., credit bureaus like CIBIL, payment processors) under strict confidentiality agreements to facilitate loan processing and repayments.
• With regulatory authorities, law enforcement, or courts for legal compliance, such as RBI audits or KYC requirements.
• During business transfers (e.g., mergers, acquisitions), with prior notice and appropriate safeguards in place.
  If data is transferred outside India (e.g., to cloud servers), we ensure compliance with DPDPA and RBI cross-border data transfer norms, using secure protocols and contractual safeguards. We do not sell, rent, or share your data for marketing purposes with unaffiliated third parties.

Data Security Measures
We implement robust, industry-standard measures to protect your data:

• Encryption of sensitive data (e.g., PAN card details, bank statements) using AES-256 standards during transmission and storage to prevent unauthorized access.
• Secure servers hosted in compliance with RBI’s IT Framework for NBFCs, with access restricted to authorized personnel through multi-factor authentication.
• Regular security audits, vulnerability assessments, and penetration testing to identify and address potential risks.
• Employee training on data protection practices to ensure compliance with DPDPA and RBI guidelines.
• Firewall protection and intrusion detection systems to safeguard against cyber threats.
  In case of a data breach, we will notify you and the Data Protection Board of India (DPBI) within 72 hours, as per DPDPA requirements, and take immediate steps to mitigate risks.

Your Rights and Choices
Under DPDPA, you have the following rights:

• Access: View the personal data we hold about you.
• Correction: Request corrections to inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to RBI retention requirements.
• Portability: Transfer your data to another service provider.
• Nomination: Appoint a representative to manage your data in case of incapacitation.
• Withdraw Consent: Stop data processing at any time by contacting us.
• Opt-Out: Unsubscribe from non-essential communications (e.g., promotional emails).
  To exercise these rights, contact our Data Protection Officer (DPO) at info@kwiksalary.com. We’ll respond within 5 working days, ensuring transparency and accountability.

Cookies and Tracking Technologies
We use cookies and similar technologies (with your consent) to enhance your experience, track website usage, and secure loan application processes. Cookies help us remember your preferences, analyze site performance, and ensure secure logins. You can manage cookie preferences through your browser settings. Disabling cookies may affect some website features, such as loan application forms. For more details, email us at info@kwiksalary.com.

Third-Party Links
Our website may link to third-party sites (e.g., payment gateways, credit bureaus). These sites have their own privacy policies, and KwikSalary is not responsible for their practices. We recommend reviewing their policies to understand how your data is handled on those platforms.

Retention of Data
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with RBI KYC norms, and meet legal obligations. Loan-related data is retained for 5–7 years as per RBI guidelines. After this period, we securely delete or anonymize your information using industry-standard data erasure techniques to ensure it cannot be recovered.

User Responsibilities
To help us protect your data, we encourage you to:

• Use strong, unique passwords for your KwikSalary account and avoid sharing them with others.
• Avoid accessing our services over unsecured public Wi-Fi networks, which may pose risks to your data.
• Keep your contact information up to date to ensure we can reach you for important updates or security alerts.
• Report any suspicious activity related to your account immediately to info@kwiksalary.com so we can take prompt action.
  By taking these steps, you contribute to a safer and more secure experience for yourself and other users.

Changes to This Policy
We may update this policy to reflect changes in our services, DPDPA requirements, or RBI guidelines. Any updates will be posted on this page, and significant changes will be notified via email or website announcements. The revised policy takes effect immediately upon posting, ensuring you’re always informed of how your data is handled.

Language Accessibility
This policy is available in English and Hindi, as required by DPDPA. To request a Hindi version, contact us at info@kwiksalary.com, and we’ll provide it promptly to ensure accessibility for all users.

Contact Us
For questions, concerns, or to exercise your rights, reach our Data Protection Officer:

• Email: info@kwiksalary.com
• Phone: +91-9289566951 (Mon-Sat, 10 AM–6:30 PM)
• Address: C-56/32, 2nd Floor, C Block, Industrial Area, Sector 62, Noida, Uttar Pradesh 201301
  We are committed to addressing your inquiries with care and transparency.

Grievance Redressal
If you have complaints about our services or privacy practices, contact our Grievance Redressal Cell at info@kwiksalary.com. We’ll investigate and resolve issues within 5 working days. Our process includes:

• Acknowledging your complaint within 24 hours.
• Investigating the issue with relevant teams (e.g., IT, customer support).
• Providing a detailed resolution or explanation within the 5-day timeline.
  For unresolved concerns, you may escalate to the RBI’s Banking Ombudsman, as per RBI guidelines. Contact details for the Ombudsman will be provided upon request. We ensure all grievances are handled with fairness and in compliance with regulatory standards