RBI Registered NBFC  ·  CIN: L65100DL1993PLC053936

Privacy Policy

Last updated: January 2025

Privacy Policy


1. Background

This Privacy Policy is framed in accordance with Section 43A of the Information Technology Act, 2000, read with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

It governs the manner in which Dhvija Finance ("Dhvija Finance") collects, receives, possesses, stores, processes, handles, transfers, and discloses personal information.


2. Purpose

The purpose of this Privacy Policy is to:

  • Protect the privacy of customers, employees, contractors, vendors, and business partners.

  • Ensure compliance with applicable laws and regulations.

  • Safeguard personal, sensitive personal, and financial information against unauthorized access or misuse.

  • Inform users about how their information is collected, used, stored, and shared.

Note: Information collected offline or through channels other than this website is not governed by this Privacy Policy.


3. Definitions

Dhvija Finance / We / Us / Our

Refers to Dhvija Finance.

Site

Refers to the official website, mobile website, and applications operated by Dhvija Finance.

You / Your

Refers to any individual who accesses or uses the Dhvija Finance website or its services.

Personal Information

Information relating to a natural person that can directly or indirectly identify that person.

Sensitive Personal and Financial Information

Information including, but not limited to:

  • Passwords

  • Financial information

  • Medical records

  • Physical, physiological and mental health conditions

  • Sexual orientation

Such information is generally not publicly available.


4. Scope

This Privacy Policy applies to:

  • Dhvija Finance Employees

  • Customers

  • Vendors

  • Contractors

  • Business Partners

  • Third parties handling personal information on behalf of Dhvija Finance

All personnel handling personal information are expected to comply with this Privacy Policy.

Personally Identifiable Information (PII) is stored in:

  1. Cloud-based Data Centers of authorized service providers.

  2. www.dhvijafinance.com


5. Collection of Information

Personal information may be collected both online and offline.

Regardless of the method of collection, the same privacy standards apply.

Personal information will only be collected when:

  • Valid and informed consent has been obtained.

  • It is necessary for contractual obligations.

  • Required by applicable law.

  • Required to protect the vital interests of the data subject.

  • Necessary for public interest purposes.

Dhvija Finance follows these principles:

  • Collect only information necessary for providing services.

  • Optional information is clearly identified.

  • Avoid unnecessary collection wherever possible.

  • Use de-identified information whenever feasible.

  • Ensure third-party vendors comply with this Privacy Policy.

  • Conduct annual reviews of collected information and obtained consent.

  • Obtain Board approval before adopting new electronic collection methods.

  • Review privacy policies of third-party data providers before accepting information.


6. Use, Retention and Disposal of Information

Information is used for:

  • Customer Due Diligence (CDD)

  • Compliance with KYC Directions, 2016

  • Credit underwriting

  • Processing loan applications

  • Ongoing monitoring of customer relationships

Information Retention

Personal information is retained only for as long as necessary for:

  • Business purposes

  • Legal obligations

  • Regulatory compliance

Information Disposal

When no longer required:

  • Information is securely destroyed, or

  • Permanently de-identified to prevent identification.

Dhvija Finance maintains documented procedures regarding retention periods and disposal practices.

Personal information shall be erased where:

  • Storage violates applicable laws, or

  • It is no longer required by Dhvija Finance or the data subject.


7. Sharing and Transfer of Information

Personal information may be shared only:

  • With the consent of the data subject.

  • For purposes specified in the contract.

  • As permitted or required by applicable law.

Dhvija Finance ensures:

  • Prior notification when information is shared for new purposes.

  • Communication of privacy obligations to third parties.

  • Execution of Non-Disclosure Agreements (NDAs) before sharing personal information.

  • Protection of Personally Identifiable Information (PII) by all partner organizations.


8. Security of Information

Dhvija Finance maintains reasonable security practices to protect personal information.

Security measures include:

  • Logical and physical access controls.

  • Board-approved Business Continuity and Disaster Recovery Policies.

  • Incident response procedures.

  • Secure storage, handling, transfer, and disposal of personal information.

  • Information asset classification and labeling.


9. Cookies and Web Beacons

Dhvija Finance uses cookies to enhance user experience.

Cookies may collect information such as:

  • Browser preferences

  • IP address

  • Login session details

  • Website usage patterns

This information helps:

  • Improve website functionality.

  • Personalize user experience.

  • Maintain secure sessions.

Web Beacons

Dhvija Finance may use web beacons (single-pixel GIFs) to:

  • Analyze website traffic.

  • Measure email campaign effectiveness.

  • Track user engagement with website pages and communications.

All collected information is stored securely in cloud-based infrastructure.


10. Links to Third-Party Websites

Dhvija Finance's website may contain links to third-party websites.

Please note:

  • Dhvija Finance does not endorse third-party websites.

  • Dhvija Finance is not responsible for their privacy practices.

  • Information submitted on third-party websites is governed by their own Privacy Policies.

Users are encouraged to review the Privacy Policy of every external website they visit.


11. Children's Information

Dhvija Finance is committed to protecting children's privacy.

  • Dhvija Finance does not knowingly collect Personal Information from children below the age of 13 years.

  • Parents or guardians who believe their child has provided personal information should immediately contact Dhvija Finance.

  • Dhvija Finance will promptly remove such information from its records wherever applicable.


12. Consent

By using the Dhvija Finance website, you:

  • Consent to the collection of your information.

  • Consent to its storage and processing.

  • Consent to its transfer and sharing as described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should discontinue using the website and its services.


13. General

Dhvija Finance may update this Privacy Policy from time to time due to:

  • Legislative amendments.

  • Regulatory changes.

  • Functional enhancements.

  • Website improvements.

Changes will apply prospectively.

Users are encouraged to periodically review this Privacy Policy.

This Privacy Policy does not create any contractual or legal rights beyond those provided under applicable law.


14. Disclaimer

The information available on the Dhvija Finance website is published in good faith for general informational purposes only.

Dhvija Finance makes no representations or warranties regarding:

  • Accuracy

  • Completeness

  • Reliability

Any reliance on information available on the website is solely at the user's own risk.

Dhvija Finance shall not be liable for any direct or indirect loss or damage arising from the use of the website.

The website may contain links to external websites over which Dhvija Finance has no control. Dhvija Finance is not responsible for:

  • Their content

  • Privacy practices

  • Availability

  • Terms of Service

Users should review the Privacy Policy and Terms of Service of external websites before using them.


15. Review of the Policy

This Privacy Policy shall be reviewed annually by the management.

Where necessary:

  • Modifications shall be submitted for Board approval.

  • Regulatory amendments shall be incorporated promptly.

  • Revised policies shall be presented at the next Board Meeting following notification of regulatory changes.