Privacy Policy
This Privacy Policy (“Privacy Policy”) is to inform users (“User”/”Users” or “you”) of the website https://gingerfinance.in/ (the “Website”) and the respective mobile application (the “Application” and together with “Website” – the “Platform”) owned by BEE PEE JAY FINANCE LTD. (“us”, “we”, or “Company”) of the policies regarding the collection, use and disclosure of information that received from Users while using the Platform for availing Company`s services (“Services”).
We value users` privacy and make every effort to ensure that the information you provide will not be misused. Our goal in this Privacy Policy is to be completely transparent about the data we collect, why we collect, use, share, store and protect personal information about users.
Please read this Privacy Policy carefully, since by continue using our Platform, you are acknowledging and accepting the terms of this Privacy Policy.
1. Collection of information
During the use of our Platform and/or Services, we may collect information about you from you and from third parties. While some information has to be mandatorily provided, others are optional and certain portions of the information will remain private and some will be shared with associated third parties. All the provided information is need-base, we do not require or collect any information that is not related to the Services and not required to carry out our operations.
1.1. Purpose of information collection
We identify the purpose of collecting the information provided by you to us as:
- establish identity and verify the same;
- to conduct your KYC check;
- provide our Services to you;
- identify problems, monitor, improve, and maintain our Platform, including identifying service or technical problems and maintaining security;
- offer new products and services to you;
- send notifications, and information regarding the Services availed by you or process your queries and applications made through the Platform;
- marketing and promotional purposes (promotional SMS/WhatsApp, Email) and inform you about offers and updates;
- use your information for compliance purposes according to applicable laws and regulations;
- resolve disputes and complaints;
- etc.
1.2 Scope of information that may be collected
All information you provide to us is voluntary. This information is including but not limited to the following:
- information about you when you register or when you use the Platform;
- device information and Installed Apps data;
- personal and financial information like your name, email address, contact number, gender, date of birth, contact information, address, employment information, pay slips, academic qualification, PAN no., Driving License no., Aadhar no., bank statements, net-banking credentials, etc.;
- credit related information that is collected from other sources like credit bureaus;
- information about your transaction history like spend data;
- your unique identifiers such as username and password, preferences information and transaction history;
- information collected through your Facebook, Twitter, Linkedin or other social media accounts which have been linked to using our Platform;
- information that you provide when you write directly to us (including by e-mail) or provide us over telephone;
- any other information that Company is required to collect as per specific mandate from any bank or as a requirement under applicable law;
- electronic bank statements through a 3rd party provider;
- aggregate information and electronic data – like the pages viewed, how you navigate through the website and interact with webpages, etc.
You understand that, by creating an account, we will be able to identify you by your Platform profile.
However, we will not be liable under any circumstance for the generation of your profile or the information you provide therein.
Company will also not be liable for the photographs and data that the Users might upload, the use and misuse thereof.
We will ask for your bank account details only for availing Services. All the information that you provide us is voluntary, including sensitive personal information.
You understand that Company may use certain information of yours, which has been designated as ‘sensitive personal data or information’ under the IT Rules for the purpose of providing you the Services and for sharing the information only with affiliates who are subject to this Privacy Policy, as will be explained further below.
Company stores only basic minimal data that may be required to carry out our operations and does not collect or store any biometric data.
2. Request of access
To provide you with our Services, the Platform may request access to the following:
- Mobile device
- Camera/photos/media files and microphone of your device
- Log data/SMS
- Your location
- Cookies
- Third-party service providers
We may have one-time access to use the camera to enable you to take images of the KYC documents like Selfie, Payslip, PAN card etc. each time we need it for the purpose of on-boarding/ KYC requirements.
We may have one-time access to your image gallery only to enable you to upload KYC documents each time we need it for the purpose of on-boarding/ KYC requirements.
Location information is captured at the time of login and is a useful parameter to determine the last location. We may have one-time access to your location data each time we need it for the purpose of on-boarding/ KYC requirements.
Financial and Banking applications interact with their customers via SMS and SMS and this activity is used for the purpose of on-boarding since it allows us to understand your financial ability to repay our loans.
We may ask for an access to your phone call logs as the number of calls made and received by the user is indicative of the phone usage of the user and helps in building a better profile of the user by our credit risk assessment algorithms during on-boarding process.
3. Rights of the Users
You are allowed to give or deny consent for use of specific data, restrict disclosure to third parties, data retention, revoke consent already granted to collect personal data and if required, ask us to delete/ forget the data, provided that denial, restriction or revocation of your consent is compatible with our ability to carry out our operations and will not prejudice our right to retain any data in relation to the Services provided to you or retain data required by applicable laws. Please note that you cannot continue using our Services if any such controls are exercised and new consent not provided.
With this regard you may refer to our e-mail defined in this Privacy Policy.
4. Data / Cookies
We may set cookies to track your use of the Platform. These are used to enhance your experience with our Platform. We use cookies to help us identify who you are, so your login experience is smooth each time. Cookies also allow us to collect Non-Personally Identifiable Information from you, like which pages you visited and what links you clicked on. Use of this information helps us to create a more user-friendly experience for all visitors. In addition, we may use Third Party Advertising Companies to display advertisements. By using the Platform, you signify your consent to our use of cookies.
5. Data storing
We maintain administrative, technical and physical safeguards designed to protect the security, confidentiality and integrity of your personal information. We store all the customer data on cloud servers in India to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. Some of the safeguards we use are firewalls, SSL data encryption and access authorization controls.
All data is stored only for the period of your consent granted, which equals for the term necessary to provide you with our Services. We may also retain and use the minimal personal information inter alia as name, contact number, transactional details and address details as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements which shall always be in accordance with applicable laws. Subject to this section, we may delete your data upon reasonable written request for the same at any stage, provided that such deletion is compatible with our ability to carry out operations under the agreement(s) with you.
You hereby confirm that you understand and accept that no data transmission over the Internet can be guaranteed to be completely secure. We cannot ensure or warrant the security of any information that you transmit to us, and you do so at your own risk. Data pilferage due to unauthorised hacking, virus attacks, technical errors is possible, and we take no liabilities or responsibilities for it.
After the end date of the storage term unless the new consent on data storage is received the data is destroyed. The information is destroyed securely so that it cannot be reconstituted e.g. via shredding for paper or full deletion for electronic files.
The data is subject to a very strict access controls involving both physical security and authorised use logon with additional security measures in place. Access will not be granted in public areas and output such as printouts must be to areas where only those organisation staff who are authorised to the information asset can reach it.
In case of any security breach, the incident is reported to senior management immediately and flagged as a major incident. Such incidents are recorded and investigated in accordance with the security incident management procedures.
6. Third Party websites
This Privacy Policy only addresses the use and disclosure of information we collect from you. Other websites/apps that may be accessible through Platform have their own privacy policies and data collection, use and disclosure practices. If you link to any such website, we urge you to review such website′s privacy policy. We are not responsible for the policies or practices of third parties.
We will share all information we collect from you, including the personal information with any third party if we in good faith believe it is required for the purposes of our compliance with any applicable law, regulation, legal process or enforceable governmental request/ action or any manner required for the purposes of protecting our rights or interests.
These third party websites and advertisers or internet advertising companies working on our behalf, sometimes use technology to send or serve data that appear on the Platform. They automatically receive your IP address when that happens. They may also use cookies, JavaScript, web beacons and other technologies to measure the effectiveness of their advertisements and to personalize advertising content.
Please be advised that we do not have access to or control over cookies or other features that they may use, and the information practices of these advertisers and third party websites are not covered by this Privacy Policy.
Therefore, we are not responsible for the information or content they may contain, nor are we responsible for the privacy practices employed therein. Please contact them directly for more information about their privacy policies.
7. Disclosure to third parties (service providers and partners)
We will share your information only with third parties that we partner with for facilitation of Services on the Platform. We may employ third-party companies and individuals due to the following reasons:
- To assess User’s credit risk;
- To provide the Service on our behalf;
- To perform Service-related services; or
- To assist us in analysing how our Services are used.
Such third-parties may include (the list is not exhaustive):
- Credit bureaus of India (CIBIL, Experian, Equifax and Crif Highmark)
- Karza, IDfy
- Facebook, Twitter, Linkedin
- Cashfree, InstaMojo and other payment aggregators
- Collection agencies
We may share your personal information with the regulatory and governmental authorities, quasi-governmental authorities, judicial authorities and quasi-judicial authorities if we are acting under any duty, request or order as part of our legal obligations and in accordance with the applicable laws.
By accepting this Privacy Policy, you give your explicit consent to your information to be shared with the third parties performing the tasks assigned to them on our behalf.
8. Users` age and Children’s Privacy
We provide our Services to users under the age of 22. At the same time, our Platform is not addressed to anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. In the case we discover that a child under 18 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
9. Electronic document
This Privacy Policy is published in accordance with the provisions of Rule 3 (1) of the Information Technology (Intermediaries Guidelines) Rules, 2011 and is an electronic record in terms of the Information Technology Act, 2000 and rules there under in force, and the provisions pertaining to electronic records in various statutes as amended by the Information Technology Act, 2000 from time to time. This electronic record is generated by a computer system and does not require any physical or digital signatures.
10. Changes to this Privacy Policy
We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.
11. Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at: [email protected].