Data Controller & Contact Details
This Privacy Policy is issued by UTTHAAN CORPORATION PRIVATE LIMITED, operating under the brand name Utthan Capital, a company incorporated under the laws of India.
Legal Entity Name
UTTHAAN CORPORATION PRIVATE LIMITED
Corporate Identification Number (CIN)
U01139RJ2025PTC106370
Registered Address
63 Pawan Putra Colony, Karni Palace Road, Panchyawala, Jaipur, Jaipur, Rajasthan, India, 302034
Grievance Officer Email
Support Phone
04843519355
Types of Personal Data Collected
We collect the following categories of personal data to provide our lending services:
Identity Information
Full name, date of birth, gender, photograph, PAN, Aadhaar (as permitted by law)
Contact Information
Email address, mobile number, residential and office address
KYC Documents
Identity proof, address proof, and other documents as required under RBI KYC norms
Financial & Income Information
Bank statements, salary slips, ITR, employment details, existing loan obligations
Device & Technical Information
IP address, device type, browser type, operating system, access timestamps
Cookies & Tracking Data
Session cookies, analytics cookies, and similar technologies (see Section 7)
Legal Bases for Processing
We process your personal data under the following legal bases as applicable under Indian law:
Consent
Where you have given explicit consent for specific processing activities, such as receiving marketing communications or sharing data with third parties beyond what is necessary for service delivery.
Contractual Necessity
Processing necessary to perform our loan agreement with you, including loan assessment, disbursement, collection, and account management.
Legal Compliance
Processing required to comply with applicable laws including RBI regulations, Prevention of Money Laundering Act (PMLA), Income Tax Act, and other statutory requirements.
Purposes of Processing
Your personal data is processed for the following purposes:
- Loan eligibility assessment
- Credit scoring & risk analysis
- Loan disbursal & servicing
- Credit bureau reporting
- Fraud prevention & detection
- KYC & AML compliance
- Customer support & communication
- Marketing (opt-in only)
Note: Marketing communications are sent only with your explicit opt-in consent. You may opt-out at any time by contacting us or using the unsubscribe link in our emails.
Data Sharing
We may share your personal data with the following categories of recipients:
Credit Information Companies (CICs)
E.g., CIBIL, Experian, Equifax, CRIF High Mark — for credit score checks and reporting loan performance
Payment Gateways & Banking Partners
For loan disbursement, EMI collection, and mandate registration
KYC & Verification Vendors
E.g., DigiLocker, NSDL, UIDAI-authorized entities — for identity and document verification
Legal & Regulatory Authorities
RBI, courts, law enforcement, tax authorities — when required by law or legal process
We ensure all third parties are bound by appropriate confidentiality and data protection obligations.
Retention Schedule
We retain your personal data for the following periods:
| Data Category | Retention Period |
|---|---|
| KYC Documents & Records | 8 years after account closure or loan settlement |
| Transactional Records | 7 years from the date of transaction |
| Marketing Preferences | Until you opt-out or withdraw consent |
After the retention period, data is securely deleted or anonymized in accordance with our data disposal procedures.
Security Measures
We implement robust technical and organizational measures to protect your data:
Encryption
AES-256 at rest, TLS 1.3 in transit
Access Control
Role-based access, MFA for staff
Regular Audits
Periodic security assessments & VAPT
Incident Response
24/7 monitoring & breach protocols
International Data Transfers
Your personal data is primarily stored and processed within India. However, in limited circumstances, data may be transferred to service providers located outside India for cloud hosting, analytics, or technical support purposes.
When such transfers occur, we ensure appropriate safeguards are in place, including:
- Contractual clauses requiring equivalent data protection standards
- Selection of vendors with recognized security certifications (ISO 27001, SOC 2)
- Compliance with applicable Indian regulations on cross-border data flows
You may contact us to obtain more information about our international transfer safeguards.
Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your data (subject to legal retention requirements)
Right to Object
Object to processing for marketing or certain other purposes
Right to Portability
Receive your data in a structured, commonly used format
How to Exercise Your Rights
- Send an email to GRIEVANCE@UTTHANCAPITAL.in with "Data Subject Request" in the subject line
- Include your full name, registered email/phone, and specific request details
- Attach a copy of your identity proof for verification
- We will acknowledge your request within 3 business days
- Your request will be processed within 30 days (or as required by law)
Grievance Redressal
If you have any concerns about how we handle your personal data, you may reach out to our Grievance Officer:
Grievance Officer
UTTHAAN CORPORATION PRIVATE LIMITED
Email: GRIEVANCE@UTTHANCAPITAL.in
Phone: 04843519355
Acknowledgement: Within 3 business days of receiving your complaint
Resolution Target: Within 30 days from the date of complaint
Escalation: If unresolved, you may escalate to the relevant regulatory authority
RBI Escalation: If your grievance is not resolved within 30 days, or you are not satisfied with our response, you may lodge a complaint with the Reserve Bank of India under its Integrated Ombudsman Scheme at https://cms.rbi.org.in
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.
When we make material changes:
- We will update the "Last updated" date at the top of this page
- For significant changes, we will notify you via email (if you have an account with us)
- We may also display a prominent notice on our website or app
- Continued use of our services after the effective date constitutes acceptance of the updated policy
We encourage you to review this page periodically to stay informed about our data practices.
Consent Checkbox Snippet
Use the following consent checkbox text in your application forms:
I have read and agree to the Privacy Policy of Utthan Capital (operated by UTTHAAN CORPORATION PRIVATE LIMITED).
Preview
How to Contact Us
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us: