TFSL Group – Privacy Policy
1. Introduction

1.1. This Privacy Policy (“Policy”) explains how TFSL Group (“Company,” “we,” “our,” or “us”) collects, uses, processes, stores, and discloses your personal data when you access or use our mobile application or website (collectively referred to as the “Platform”).

1.2. All services offered on or through the Platform are referred to as “Services.” Unless defined otherwise, capitalized terms used in this Policy shall carry the same meaning as in our Terms and Conditions (“Terms”). Please read this Policy together with the Terms.

1.3. At TFSL Group, we are committed to protecting your privacy and handling your personal data responsibly. This Policy sets out the basis on which we process any personal data we collect from you, or that you provide to us.

1.4. By consenting to the processing of your personal data, you acknowledge and agree that TFSL Group may collect, store, use, and disclose such data in accordance with this Policy.

2. Data We Collect About You

2.1. We may collect, use, store, transfer, or otherwise process personal data to provide you with our Services, subject to applicable laws. This includes, but is not limited to:

Identity Data: Name, date of birth, marital status, title, gender, education, employment status, organization, identification documents, and health/lifestyle information.

Profile Data: Username, password, preferences, interests, purchases, survey responses, and feedback.

Contact Data: Email address, phone number, and residential address.

Financial Data: Bank account details, income information, tax residency, and financial records.

Transaction Data: Records of transactions, payments, and services/products purchased.

Credit Data: Credit scores, reports, and related information (collected from credit bureaus with your consent).

Marketing & Communication Data: Preferences regarding receiving updates and offers.

Technical Data: IP address, browser type, device details, and operating system.

Usage Data: Information about how you interact with our Platform and Services.

2.2. We do not access your device resources such as media files or contact lists, except for document uploads required for Services. We may, however, request access to the camera, microphone, or location for verification or compliance purposes — only with your explicit consent.

2.3. Some personal data is essential to provide Services. If you choose not to provide such information, we may be unable to deliver certain Services.

2.4. We may collect aggregated or anonymized data for statistical or research purposes, which does not identify you personally.

3. How We Collect Your Data

We collect personal data through:

Direct Interaction: Information you provide when registering, transacting, or contacting us.

Automated Collection: Data gathered via cookies, analytics tools, and tracking technologies.

Third Parties: Information received from credit bureaus, business partners, and analytics providers, in accordance with applicable laws and your consent.

4. How We Use Your Personal Data

4.1. We process personal data only in compliance with applicable law, primarily for:

Registering and verifying your account.

Delivering and managing Services.

Conducting KYC and compliance checks.

Processing transactions and payments.

Enhancing Platform performance, security, and user experience.

Sending communications, offers, and updates (with your consent).

Preventing fraud, cyber incidents, and illegal activities.

Complying with legal and regulatory obligations.

4.2. Credit and financial data will only be shared with third parties where authorized by you.

4.3. We may collaborate with account aggregators, in compliance with laws and with your consent, to enhance financial services.

4.4. For customer support, we may assist via co-browsing or screen-sharing (with consent). No data is recorded or stored during these sessions.

5. Sharing Your Personal Data

With TFSL Group subsidiaries, affiliates, and trusted third-party partners (only for legitimate business purposes and in compliance with the law).

Where legally required, including by regulators or law enforcement agencies.

6. Data Security

We adopt appropriate technical and organizational safeguards to protect personal data from unauthorized access, loss, or misuse, in accordance with industry standards and applicable law.

7. Data Retention & Deletion

Personal data is retained only as long as necessary for business, legal, or regulatory purposes.

Once the retention period ends, your data will be securely deleted, anonymized, or destroyed.

8. Your Rights

You may, subject to applicable law:

Request access to, correction of, or deletion of your personal data.

Withdraw consent where processing is based on consent.

Object to certain types of processing.

To exercise these rights, you may contact our Grievance Officer (see Section 14).

9. Data Storage & Transfer

All personal data is stored securely within India. No international transfers are made.

10. Third-Party Links

Our Platform may contain links to external websites. We are not responsible for their privacy practices, which are governed by their own policies.

11. Cookies

Cookies are used to improve user experience, personalize content, and analyze traffic.

Cookies do not access data stored on your device.

You may manage cookie preferences via your browser/device settings.

Some third-party cookies may be used; however, their use is not under our control.

12. Business Transfers

In the event of a merger, acquisition, or sale, your personal data may be transferred as part of the business transaction, subject to this Policy.

13. Changes to This Policy

TFSL Group may update this Policy from time to time. Updates will be posted on this page, and where legally required, you will be notified.