Privacy Policy

1. About Us

Trustiva Setu (“we”, “our”, “the Company”) is a loan facilitation platform registered in India. We are not a bank or Non-Banking Financial Company (NBFC). We facilitate loan applications between borrowers and our partner banks and NBFCs.

Aarthsetu Technologies Private Limited (trading as Trustiva Setu)
5/70, Friend's Colony, Chandranagar, Moradabad, Uttar Pradesh - 244001
Website: www.trustivasetu.com

2. Scope of This Policy

This Privacy Policy applies to all personal data we collect when you use the Trustiva Setu platform, website, or services — including when you submit a loan application, use our partner portal, or contact us. It also governs data processed on behalf of healthcare clinics that are our registered partners.

3. Data We Collect

We collect the following categories of personal data:

• Identity data: Full name, date of birth, gender
• Contact data: Mobile number, email address, residential address
• Government identifiers: PAN card number, Aadhaar number (masked where required by law)
• Financial data: Monthly income, employment details, bank account details (for disbursal)
• Medical-adjacent data: Treatment category selected (e.g., dental, orthopaedic) — not detailed medical records
• Device and usage data: IP address, browser type, pages visited, timestamps
• Communication data: Records of OTPs sent, consent captured

4. How We Use Your Data

We use your personal data for the following purposes:

• Processing and evaluating your loan application
• Sharing your application with partner lenders for credit evaluation and approval
• Verifying your identity using PAN, Aadhaar, or phone OTP
• Communicating loan status, EMI schedules, and related updates
• Complying with legal and regulatory obligations (RBI, SEBI, Income Tax Act, etc.)
• Fraud prevention and security monitoring
• Internal analytics and platform improvement

5. Third-Party Sharing

We share your personal data with the following categories of third parties, solely for the purpose of facilitating your loan application:

• Partner banks and NBFCs: For credit evaluation, loan approval, and disbursal
• Credit information bureaus: As required by lender policies for credit checks
• KYC verification providers: For PAN and Aadhaar authentication
• Healthcare clinic partners: The clinic where you are receiving treatment and through whom the loan application was submitted
• Technology and cloud service providers: For hosting and data storage (subject to data processing agreements)
• Regulatory authorities: As required by law

We do not sell your personal data to third parties for marketing purposes.

6. Legal Basis for Processing

We process your personal data on the following legal bases under applicable Indian law:

• Consent: You provide explicit consent when submitting a loan application
• Contractual necessity: To fulfil our obligations in facilitating your loan
• Legal obligation: To comply with RBI directions, Prevention of Money Laundering Act (PMLA), and other applicable regulations
• Legitimate interests: For fraud prevention and platform security

7. Data Retention

We retain your personal data for as long as is necessary for the purposes outlined in this policy, and in accordance with applicable law. Loan-related records are typically retained for a minimum of 8 years as required by the Prevention of Money Laundering Act, 2002. You may request deletion of your data subject to these legal obligations.

8. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights:

• Right to access: Request a summary of personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to grievance redressal: Lodge a complaint with our Grievance Officer
• Right to nominate: Nominate another individual to exercise rights on your behalf in the event of death or incapacity

To exercise your rights, contact us at: legal@trustivasetu.com

9. Cookie Policy

We use cookies and similar tracking technologies to maintain session security and improve user experience. We do not use third-party advertising cookies. You may decline non-essential cookies using the consent banner displayed on your first visit. Essential cookies required for authentication cannot be disabled.

10. Security

We implement industry-standard technical and organisational measures to protect your personal data, including encrypted transmission (HTTPS/TLS), access controls, audit logging, and periodic security reviews. No system is completely secure; we cannot guarantee absolute security of data transmitted over the internet.

11. Children's Privacy

Our platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Grievance Officer

In accordance with the DPDP Act, 2023 and IT Act, 2000, the details of our Grievance Officer are:

[ACTION REQUIRED: Add Grievance Officer name, designation, and contact details]

Email: legal@trustivasetu.com

Response time: Within 30 days of receipt of complaint

14. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in New Delhi, India.