2.1 SMS Permission

With your explicit consent, we may access limited SMS information available on your device to assist with identity verification, credit assessment, and fraud prevention.

This may include:

• Reading sender information from recognised financial institutions.
• Identifying transactional SMS headers from authorised banking and financial service providers.
• Collecting limited financial indicators required for loan processing.
• Verifying income and expenditure patterns.
• Detecting fraudulent or suspicious activities.
• Supporting faster loan approvals and appropriate credit limit assessments.

We do not:

• Read personal conversations.
• Access private or non-financial messages.
• Collect or store OTPs issued by third-party service providers.

Only OTPs generated by Blue Chip Finance Private Limited for authentication purposes may be processed where required.

2.2 Installed Applications

With your explicit consent, our authorised applications or service providers may collect limited information about the applications installed on your device.

This information is used solely for:

• Fraud detection and prevention.
• Device risk assessment.
• Identification of suspicious or high-risk applications.
• Strengthening credit risk evaluation.
• Enhancing the security of our lending platform.

The information collected:

• Is processed securely.
• Is used only for authorised business and regulatory purposes.
• Is never sold or rented to third parties.
• Is stored and managed in accordance with applicable Indian laws and regulatory requirements.

2.3 Location Permission

With your explicit consent, we may collect your device's location information to:

• Verify your address.
• Determine service availability.
• Complete Know Your Customer (KYC) verification.
• Support credit risk assessment.
• Detect and prevent fraudulent loan applications.
• Offer relevant financial products and services where applicable.

Location information is collected only when necessary and only after obtaining your explicit consent.

2.4 Device Information

To ensure secure access to our Platform and maintain service quality, we may collect limited technical information about your device, including:

• Device model.
• Operating system version.
• Available memory (RAM).
• Device storage capacity.
• Network connectivity status.
• Application performance and diagnostic information.

We do not collect permanently identifiable hardware information such as:

• IMEI numbers.
• Device serial numbers.
• Other permanent hardware identifiers, unless required by applicable law or regulatory obligations.

2.5 Phone State Permission

Where permitted by your device's operating system and with your explicit consent, we may access limited device and SIM-related information solely for the following purposes:

• Verifying the active SIM associated with your device.
• Confirming network availability during onboarding.
• Authenticating loan disbursement and other sensitive transactions.
• Preventing identity theft, account misuse, and fraudulent activities.

This information is used only to help ensure that financial transactions are initiated by the legitimate customer.

2.6 Additional Permissions

Depending on the products or services you choose to access, we may request additional permissions, including:

• Camera access for document capture, document upload, e-KYC, and Video KYC.
• Microphone access during Video KYC verification.
• Access to credit bureau reports, subject to your explicit consent.
• Access to bank statements, GST records, or other financial information, only after obtaining separate consent where required.
• Secure sharing of relevant information with regulated financial institutions and authorised service providers for loan processing, servicing, and regulatory compliance.

At every stage of your lending journey, Blue Chip Finance Private Limited clearly discloses the identity of the:

• Regulated Entity (RE)
• Lending Service Provider (LSP)
• Digital Lending Application (DLA)

This information is made available through the Platform, the Key Fact Statement (KFS), the Sanction Letter, the Loan Agreement, and other applicable customer communications.

3.1 Personal Information

We may collect the following personal information:

• Full Name
• Mobile Number
• Email Address
• Residential and Correspondence Address
• Date of Birth
• Permanent Account Number (PAN)
• Aadhaar or other officially valid identity documents, where permitted by applicable law
• Postal Code
• Banking information required for loan disbursement and repayment

This information is collected to facilitate customer identification, Know Your Customer (KYC) verification, loan processing, account servicing, fraud prevention, and compliance with applicable legal and regulatory obligations.

3.2 Social Account Information

If you choose to register or sign in using a third-party account, such as Google, we may collect publicly available profile information, including:

• Name
• Email Address
• Profile information made available by the selected service provider

We collect only the information that you expressly authorise us to access.

3.3 Device Information

To maintain platform security, improve service delivery, and ensure optimal application performance, we may collect limited technical information about your device, including:

• Device Model
• Operating System
• Browser Type
• Device Configuration
• IP Address
• Network Information
• Application Crash Reports
• Performance Logs
• Diagnostic Information
• Date and Time of Access

This information helps us maintain platform stability, troubleshoot technical issues, detect suspicious activities, and enhance the security of our services.

3.4 Installed Application Information

Subject to your explicit consent, we may collect limited information regarding the applications installed on your device to:

• Assess device risk.
• Detect fraudulent or suspicious activities.
• Strengthen fraud prevention mechanisms.
• Improve credit risk assessment.

The information collected is limited to what is reasonably necessary for these purposes and is processed in accordance with applicable legal and regulatory requirements.

3.5 Location Information

With your explicit consent, we may collect your device's location information to:

• Verify your address.
• Determine service availability.
• Complete Know Your Customer (KYC) verification.
• Support credit underwriting.
• Detect and prevent fraudulent activities.
• Offer location-based financial products and services, where applicable.

Location information is collected only when required for legitimate business, operational, or regulatory purposes.

3.6 Camera and Microphone Access

Where required for Video KYC, document verification, identity authentication, or other regulatory processes, we may request access to your:

• Camera
• Microphone

These permissions are used solely for customer verification, regulatory compliance, fraud prevention, and the delivery of our services.

3.7 Financial Information

With your explicit consent, we may collect financial information, including:

• Bank Account Details
• Bank Statements
• Credit Bureau Reports
• Loan Repayment Information
• GST Returns, where applicable
• UPI Details for loan repayment
• Other financial information reasonably required for credit assessment, underwriting, loan processing, and servicing

Such information is collected solely for credit assessment, underwriting, loan processing, fraud prevention, regulatory compliance, and the ongoing servicing of your loan.

3.8 Information Provided by You

We may collect information that you voluntarily provide while using our Platform, including:

• Loan Application Forms
• Registration Information
• KYC Documents
• Customer Support Requests
• Feedback
• Emails and Other Correspondence
• Documents uploaded through the Platform

3.9 Non-Personal Information

We may also collect non-personal, anonymised, or aggregated information that cannot reasonably be used to identify you, including:

• Device Analytics
• Usage Statistics
• Browser Information
• Platform Performance Data
• Customer Behaviour Patterns
• Anonymous Demographic Information

This information is used to improve our products, services, platform performance, and overall customer experience.

3.10 Cookies and Similar Technologies

Our Platform may use cookies and similar technologies to:

• Remember user preferences.
• Improve website functionality.
• Analyse website traffic and usage patterns.
• Enhance platform security.
• Deliver a better browsing experience.

You may disable cookies through your browser settings. However, doing so may affect the functionality and availability of certain features of the Platform.

3.11 Information from Third Parties

Where permitted by applicable law and with your consent where required, we may receive information from:

• Credit Information Companies (Credit Bureaus)
• KYC Verification Agencies
• Payment Gateway Providers
• Banking Partners
• Lending Service Providers (LSPs)
• Government Databases
• Other authorised third-party service providers

Such information is collected and processed solely for legitimate business purposes, identity verification, credit assessment, loan servicing, fraud prevention, regulatory compliance, and other purposes permitted under applicable law.

3.12 Children's Privacy

Blue Chip Finance Private Limited does not knowingly collect or solicit personal information from individuals below the age of 18 years.

Our products and services are intended only for persons who are legally competent to enter into a binding contract under applicable Indian law.

If we become aware that personal information relating to a minor has been collected inadvertently, we will take reasonable steps to delete such information in accordance with applicable law.

4.1 Customer Identification and Verification

We use your information to:

• Verify your identity.
• Complete Know Your Customer (KYC) and Video KYC procedures.
• Authenticate your account.
• Prevent identity theft, impersonation, and fraudulent activities.
• Comply with applicable RBI guidelines and statutory requirements.

4.2 Loan Processing

Your information is used to:

• Evaluate loan applications.
• Assess eligibility for financial products and services.
• Perform credit underwriting and risk assessment.
• Approve or decline loan applications.
• Generate loan-related documents.
• Process loan disbursements.
• Manage repayments and provide ongoing loan servicing.

All lending decisions are made by Blue Chip Finance Private Limited in accordance with applicable laws and regulatory requirements.

4.3 Credit Assessment

We may use your information to:

• Assess your creditworthiness.
• Evaluate your repayment capacity.
• Review your financial behaviour.
• Determine appropriate loan limits, pricing, and repayment terms.
• Obtain credit reports from authorised Credit Information Companies, subject to your consent where required.

4.4 Fraud Detection and Risk Management

Your information may be processed to:

• Detect and prevent fraudulent loan applications.
• Identify suspicious or unusual activities.
• Prevent financial crimes.
• Reduce operational and credit risks.
• Prevent money laundering and terrorist financing.
• Strengthen the security and integrity of our Platform.

These measures help protect both our customers and the overall lending ecosystem.

4.5 Customer Support and Service Delivery

We use your information to:

• Respond to customer enquiries.
• Resolve complaints and disputes.
• Provide technical support.
• Process service requests.
• Improve customer experience.
• Communicate important information relating to your loan account and our services.

4.6 Regulatory and Legal Compliance

Your information may be processed to comply with applicable legal and regulatory obligations, including:

• Reserve Bank of India (RBI) regulations and directions.
• Digital Personal Data Protection Act, 2023.
• Information Technology Act, 2000.
• Prevention of Money Laundering Act, 2002 (PMLA).
• Income Tax laws and other applicable statutory requirements.
• Orders or directions issued by courts, tribunals, regulatory authorities, or government agencies.

4.7 Platform Improvement

We may analyse your information to:

• Improve our products and services.
• Enhance Platform functionality.
• Identify and resolve technical issues.
• Monitor application performance.
• Strengthen security measures.
• Develop new products, features, and services.

Where reasonably possible, such analysis is performed using anonymised or aggregated information.

4.8 Communication

We may use your contact information to:

• Send updates regarding your loan application.
• Share loan status notifications.
• Deliver repayment reminders.
• Communicate important account-related information.
• Send regulatory notices and mandatory disclosures.
• Notify you of changes to our products, services, policies, or terms.

Where permitted by applicable law and subject to your communication preferences, we may also send information regarding new financial products, offers, or promotional campaigns.

4.9 Personalisation

We may use your information to:

• Provide customised loan offers.
• Recommend relevant financial products and services.
• Improve your overall user experience.
• Personalise content and services based on your interactions with our Platform.

4.10 Research and Analytics

We may use anonymised or aggregated information for:

• Business analytics.
• Statistical reporting.
• Market research.
• Product development.
• Service improvement.
• Internal business planning and decision-making.

Such information does not identify you personally and cannot reasonably be used to identify any individual.

4.11 Other Legitimate Purposes

We may also process your information where reasonably necessary to:

• Protect our legal rights, interests, and property.
• Enforce our Terms and Conditions and other contractual obligations.
• Conduct internal audits and compliance reviews.
• Recover outstanding dues.
• Resolve disputes.
• Fulfil any purpose for which you have provided your consent or which is otherwise permitted or required under applicable law.

5.1 Regulated Financial Institutions

We may share your information with banks, Non-Banking Financial Companies (NBFCs), and other regulated financial institutions where necessary for:

• Loan processing and underwriting.
• Credit assessment and verification.
• Loan disbursement.
• Repayment management.
• Co-lending or financing arrangements.
• Compliance with applicable legal and regulatory requirements.

Such disclosures are made only to the extent necessary and in accordance with applicable laws and regulatory guidelines.

5.2 Lending Service Providers (LSPs)

Where authorised Lending Service Providers (LSPs) assist us in delivering our products and services, they may process your personal information strictly on our behalf and only for the purposes authorised by Blue Chip Finance Private Limited.

All LSPs are contractually required to:

• Maintain the confidentiality of customer information.
• Implement appropriate technical and organisational security measures.
• Process personal information only in accordance with our instructions.
• Comply with applicable data protection laws, RBI guidelines, and contractual obligations.

LSPs are not permitted to retain or use customer information beyond the period necessary to provide the requested services, unless such retention is required by applicable law.

5.3 Digital Lending Applications (DLAs)

Where our loan products are offered through authorised Digital Lending Applications (DLAs), limited customer information may be shared to facilitate:

• Customer onboarding.
• Identity verification.
• Loan application processing.
• Customer communication.
• Loan servicing and service delivery.

Such sharing is carried out only through authorised channels and in compliance with applicable legal and regulatory requirements.

5.4 Service Providers

We may engage trusted third-party service providers to perform services on our behalf, including:

• Identity verification and e-KYC.
• Payment processing.
• Banking integrations.
• Credit bureau services.
• Technology infrastructure and cloud hosting.
• Fraud detection and risk management.
• Customer support services.
• Communication and notification services.
• Analytics, monitoring, and system maintenance.

These service providers are granted access only to the information necessary to perform their services and are required to maintain appropriate confidentiality, security, and data protection standards.

5.5 Credit Information Companies

With your consent, where required by applicable law, we may share relevant information with authorised Credit Information Companies (Credit Bureaus) for the following purposes:

• Credit assessment.
• Credit history verification.
• Reporting loan performance.
• Updating repayment records.

Information reported to Credit Information Companies may influence your credit score and future borrowing eligibility.

5.6 Legal and Regulatory Authorities

We may disclose your personal information where required or permitted by applicable law, including where such disclosure is necessary to:

• Comply with statutory or regulatory obligations.
• Respond to lawful requests from government authorities.
• Comply with court orders, legal proceedings, or judicial directions.
• Cooperate with law enforcement agencies.
• Meet RBI reporting or regulatory requirements.
• Protect the rights, safety, property, or legitimate interests of Blue Chip Finance Private Limited, our customers, or the public.

5.7 Corporate Transactions

In the event of a business transaction involving Blue Chip Finance Private Limited, including:

• Merger.
• Acquisition.
• Amalgamation.
• Corporate restructuring.
• Sale or transfer of assets.
• Investment or financing transactions.

your personal information may be transferred to the successor entity or authorised parties involved in the transaction, subject to appropriate confidentiality obligations and compliance with applicable laws.

5.8 Business Protection

We may disclose your information where reasonably necessary to:

• Prevent or investigate fraud.
• Investigate security incidents.
• Enforce our Terms and Conditions and other contractual rights.
• Recover outstanding dues.
• Protect our legal rights and interests.
• Resolve disputes.
• Defend legal claims or proceedings.

5.9 With Your Consent

Apart from the circumstances described in this Privacy Policy, we will share your personal information with third parties only after obtaining your explicit consent, where such consent is required under applicable law.

5.10 No Sale of Personal Information

Blue Chip Finance Private Limited does not sell, lease, rent, trade, or otherwise commercially exploit your personal information.

Your personal information is processed solely for legitimate business purposes, regulatory compliance, fraud prevention, and the provision of our financial products and services.

Cross-Border Data Transfers

Blue Chip Finance Private Limited primarily stores and processes customer information within India.

Where any cross-border processing becomes necessary, such processing shall be carried out only in accordance with applicable Indian laws and regulatory requirements.

10.1 Right to Access

You may request access to the personal information that we hold about you, subject to applicable legal and regulatory requirements.

10.2 Right to Correction

You may request the correction, updating, or completion of inaccurate, incomplete, or outdated personal information held by us.

10.3 Right to Withdraw Consent

Where the processing of your personal information is based on your consent, you may withdraw such consent at any time, subject to applicable legal and regulatory requirements.

Withdrawal of consent may affect our ability to provide certain products or services.

10.4 Right to Erasure

You may request the deletion or erasure of your personal information where permitted under applicable law.

Certain information may continue to be retained where required for legal, regulatory, contractual, audit, fraud prevention, or dispute resolution purposes.

10.5 Right to Restrict Processing

Where permitted by applicable law, you may request that we restrict the processing of your personal information under specified circumstances.

10.6 Right to Grievance Redressal

You may contact our Grievance Officer regarding any concern, complaint, or request relating to the processing of your personal information.

We will acknowledge and address your request in accordance with applicable laws, regulatory requirements, and prescribed timelines.

Grievance Redressal Officer

We will acknowledge your grievance promptly and make every reasonable effort to resolve it within the timelines prescribed under applicable laws and the guidelines issued by the Reserve Bank of India (RBI).

If your grievance remains unresolved or you are not satisfied with our response, you may escalate your complaint through the Reserve Bank of India's Complaint Management System (CMS) or other grievance redressal mechanisms made available by the RBI.

For additional consumer awareness and to report concerns relating to unauthorised financial entities, customers may also visit the RBI Sachet Portal.

RBI Complaint Management System (CMS): https://cms.rbi.org.in

RBI Sachet Portal: https://sachet.rbi.org.in

Registered Office:

RZF 779/7, Basement, Street No. 17
Raj Nagar-2, New Delhi – 110077

Corporate Office:

2nd Floor, Plot No. 34
Udyog Vihar, Phase-4
Gurugram, Haryana – 122015