Privacy Policy & Data Protection

1. What Type of Information Does prestloans.com Collect?

In order to evaluate loan eligibility, conduct credit appraisals, satisfy RBI Know Your Customer (KYC) requirements, and disburse credit facilities, Prest Loans collects two primary categories of information:

A. Personal Information

Personal Information refers to any information that identifies or can be used to identify, contact, or locate the person to whom such information pertains. This includes:

• Identity & Demographics: Full Name, Date of Birth, Gender, Father’s/Spouse’s Name, Marital Status, Photograph.
• Government Identifiers: Permanent Account Number (PAN), Aadhaar number (collected via voluntary masked e-KYC/offline XML verification pursuant to UIDAI guidelines), Passport, Voter ID, Driving License.
• Contact Information: Residential Address, Registered Office Address, Phone Number, Mobile Number, Email Address.
• Financial & Credit Data: Bank account details, account statements, GST returns, Income Tax Returns (ITR), audited financial statements, loan repayment track records, and Credit Information Reports from CIBIL, Experian, Equifax, or CRIF High Mark.
• Business & Employment Details: Business incorporation papers, partnership deeds, registration certificates, nature of business turnover, employment tenure, and monthly salary slips.

B. Non-Personal & Technical Information

When you visit our Website, our servers automatically log certain non-personally identifiable information, including:

• Session & Device Data: IP Address, domain server, device hardware fingerprint, operating system, browser type and version.
• Usage Analytics: Date and time of visit, pages viewed, time spent on loan calculators, conversion funnels, and referring URL.
• Cookies: Small alphanumeric identifiers stored on your computer's browser to personalize your navigation experience and maintain active session security.

2. How Does prestloans.com Use the Collected Information?

We use the information collected from you strictly for legitimate, regulated business purposes, including:

• Conducting algorithmic credit scoring and underwriting to determine loan sanction amounts, interest rates, and loan tenure.
• Verifying identity, address, and legal capacity pursuant to RBI Master Directions on KYC and AML.
• Processing loan disbursements directly to your verified bank account.
• Setting up automatic monthly installment collections via e-NACH mandates, direct debits, and payment gateways.
• Preventing, detecting, and mitigating fraud, identity theft, cyber vulnerabilities, and unauthorized access.
• Complying with statutory reporting mandates to the Reserve Bank of India, Financial Intelligence Unit (FIU-IND), and Credit Information Companies.
• Transmitting important transactional updates, EMI reminders, sanction letters, and account statements via WhatsApp, SMS, and email.

3. Disclosure & Sharing of Information

We share information solely with authorized and regulated entities on a strict need-to-know basis:

• Credit Information Companies (CICs): Reporting loan performance, sanction details, and defaults to CIBIL, Experian, Equifax, and CRIF High Mark as mandated by RBI.
• Banking & Payment Partners: Authorized scheduled commercial banks, NPCI (NACH / e-mandate network), and RBI-licensed payment aggregators for processing disbursals and collecting EMIs.
• Verification Agencies: Third-party KYC verification, field investigation, and document authentication partners bound by strict non-disclosure agreements (NDAs).
• Legal & Regulatory Authorities: In response to court orders, summons, statutory requests from the RBI, FIU-IND, tax authorities, or law enforcement agencies under applicable law.

4. Data Security & Encryption Architecture

Prest Loans maintains rigorous administrative, physical, and technical safeguards to preserve the confidentiality, integrity, and availability of your data:

• Bank-Grade Encryption: All sensitive data transmitted between your browser and our servers is protected using 256-bit Secure Socket Layer (SSL) encryption.
• Perimeter Firewalls: Multi-tiered web application firewalls (WAF) and automated intrusion detection systems prevent unauthorized penetration.
• Role-Based Access Control: Strict least-privilege access permissions ensure only authorized underwriting and credit operations personnel can access customer financial files.
• Secure Data Storage: Customer files and databases are hosted on certified enterprise cloud infrastructure located physically within India in compliance with RBI data localization mandates.

5. Data Retention & Erasure Standards

In compliance with the Prevention of Money Laundering Act (PMLA) 2002 and RBI Master Directions on NBFCs, the Company is statutorily obligated to maintain customer records, identity documents, and account transaction histories for a minimum period of five (5) years after the closure of the loan account or cessation of the lending relationship. Following the expiry of statutory retention periods, records are securely shredded or irreversibly anonymized.

6. Your Rights & Consent Management

You enjoy the following rights regarding your personal information:

• Right of Review: You may request a review of the personal and financial information you have provided to ensure its accuracy.
• Right of Correction: If any personal details are outdated or inaccurate, you may submit updated documentary proof to rectify our records.
• Promotional Opt-Out: You may opt out of non-essential promotional SMS or newsletters by clicking unsubscribe or emailing us at unsubscribe@prestloans.com. (Note: Mandatory transactional notices, EMI reminders, and regulatory communications cannot be opted out).

7. Privacy Grievances & Data Protection Officer

In accordance with the Information Technology Act 2000 and Digital Personal Data Protection standards, the contact details of our designated Grievance Officer for privacy and data-related queries are provided below: