Data Privacy Policy

TABLE OF CONTENTS

1. Policy Scope 

2. Policy Objective 

3. Personal Information we collect 

4. Use of Personal Information 

5. Storage of Information 

6. Disclosure of Information 

7. Retention of Information 

8. Security of Personal Information 

9. What are your Rights and how you can exercise them 

10. Cookies 

11. Marketing and Promotional Activities 

12. Severability and Exclusion 

13. Disclaimer 

14. Governing Law and Dispute Resolution 

15. No Waiver 

16. Third Party Website and Services 

17. Changes to this Data Privacy Policy 

    Annexure 1 – References 

    Annexure 2 – Definitions 

1. ‌Policy Scope

   This Data Privacy Policy sets out the requirements for ensuring that Hero FinCorp Ltd. (hereinafter referred to as “HFCL” or “we” or “us”) collect, use, retain and disclose personal information in a fair, transparent and secured way.

   This Policy is applicable to personal information of all the users (hereinafter also referred to as “You”, “Your” or “User”) of HFCL’s services, including users of HFCL website, mobile application and its social media accounts. It excludes independent data held by third-parties, but includes:

   1. Personal information collected or processed by third parties on behalf of HFCL; and

   2. Personal information collected directly by HFCL.

   This Policy applies regardless of whether you use a computer, mobile phone, tablet, or any other media or electronic resource to access HFCL Services.

    

2. Policy Objective

   This Data Privacy Policy provides guidance on processing of personal information, which includes, but is not limited to, collecting, using, retaining/storing, accessing and/or disclosing such information by Hero FinCorp as often as is necessary.

   It is the goal of Hero FinCorp to balance the benefits of a global and centralized business with the individual’s right to privacy and having his or her personal information protected. HFCL is committed to respecting the individual’s privacy rights and expectations and to protecting the individual’s personal information collected by HFCL from unauthorized access, use, retention/storage and/or disclosure. Meeting this commitment is a primary management objective and collective responsibility of all HFCL employees as well as third parties conducting business with or on behalf of Hero FinCorp.

    

3. ‌Personal Information we collect

   HFCL asks for and uses your personal information and is committed to keeping this information secure. HFCL has expended considerable time, effort, and resources, and has implemented technical and organizational measures to maintain the security of your Personal Information. Only personal information required for authorized and legitimate business activities shall be collected from the information provider.

   HFCL collects the following types of information:

   Information you provide us directly:

   1. Identification Information: Your name, email address, phone number, mobile number, signature and photograph, any other contact details, government or other identity documents, date of birth, gender, employment, educational background, PAN, Aadhaar number, driver’s license number, passport number, your other relevant KYC documents as required by HFCL;

   2. Media Information: Documents / Media files as may be required uploaded directly by users during user account management or transaction order placement;

   3. Bank account or other payment instrument details;

   4. Any other detail which may be required by HFCL for providing Services including but not limited to other historical, contact and demographic information;

   5. We may request for one-time access to your camera, microphone, location and mobile device and store such information only for the purpose of onboarding or KYC requirements with your explicit consent. We do not access your other mobile resources including file and media, contact list, call logs, etc.

   Information that HFCL may collect from Your use of Our Services, such as:

   1. SMS Information: We may read SMS to retrieve OTP sent by HFCL during login or transaction related authentication;

   2. Location Information: We may collect information about the location of device used to access our website or application(s);

   3. Device Information: We may collect specific information about devices used to access our Services, such as hardware model and version, operating system and version, unique device identifier, network information and information about the device’s interaction with our services;

   4. Use Information: We may collect information about how you use our Services, including your access time and Internet Protocol (“IP”) address.

   Information Hero FinCorp Collect from Other Sources:

   Hero FinCorp may collect information about you from third parties, including third-party verification services, credit bureaus and publicly available sources. This may include without limitation credit-related information with any credit reporting agency or credit bureau, and any person or corporation with whom you have had, currently have, or may have a financial relationship, including without limitation past, present, and future places of employment and personal reporting agencies in accordance with the applicable laws and wherever necessary with your authorization.

    

4. ‌Use of Personal Information

   As per regulatory requirement we collect personal information for performing KYC of the customer, bank account statements are collected to establish credit worthiness of the customer, bank account details are collected for collection of dues/loan repayment.

   We use personal information to provide you with services you explicitly requested with your explicit consent for, including but not limited to –

   1. To resolve disputes, troubleshoot concerns, help promote safe services, assess your interest in our services, inform you about offers, products, services, updates, customize your experience, detect and protect us against errors, fraud and other criminal activity, enforce our terms and conditions, etc.

   2. To send you communication regarding various services/facilities which HFCL or its group companies may, from time to time, launch.

   3. We also may use information about you to measure, customize, and enhance our Services, including the design, content, and functionality of our website or mobile application, or to track and analyse trends and usage relating to our Services.

   Further, HFCL or any third party, as may be authorized by HFCL may use information about you to provide, maintain, and improve our Services, such as:

   1. To develop credit risk models and perform risk assessment;

   2. To detect and prevent fraud;

   3. To diagnose or fix technology problems;

   4. To conduct statistical and market analysis;

   5. To develop and test new products and features;

   6. To verify information that you have provided;

   7. To process your financial and non-financial transaction requests;

   8. To find adequate references for your loan application;

   9. To deliver relevant information, including technical notices, security alerts, and support and administrative messages;

   10. To establish contact with you when necessary by email, SMS, letter, telephone or in any other way to respond to your queries and feedback or inform about our products and services;

   11. To provide you with the services that might be required by you;

   12. To take up and investigate any complaints/claims/disputes;

   13. To maintain records or fulfil the requirements of applicable laws / regulations and / or court orders / regulatory directives received by us;

   14. For any other legitimate purpose.

   The personal information shall be used for the purpose for which it has been collected. The privacy risks shall be taken into consideration, before the collection, use, retention or disclosure of personal information, such as in a new system or as part of a project.

    

5. ‌Storage of Information

   We store and process your personal information in a secured manner. We use reasonable safeguards to preserve the integrity and security of your information against loss, theft, unauthorised access, disclosure, reproduction, use or amendment. To achieve the same, we use reasonable security practices and procedures as mandated under applicable laws for the protection of your information. Information you provide to us may be stored on any of our secure servers located within India.

    

6. ‌Disclosure of Information

   The Information provided by you may be disclosed to:

   1. RBI, SEBI, CIBIL, Credit Bureaus, Credit Rating Agencies, Databanks, KYC Registration Agencies (KRAs), collection partner and other such agencies,

   2. Another business entity to carry out any business activity or re-organization, amalgamation, restructuring of business or for any other such reason;

   3. Any actual or proposed assignee, transferee, participant or sub-participant of HFCL;

   4. To comply with applicable law, directions from Government agencies mandated under law for prevention and investigation of offences, or to comply with an order issued by a competent court;

   5. Any judicial, government or regulatory bodies, statutory authorities, quasi-judicial authorities;

   6. Any other banks, NBFCs or financial institutions;

   7. Auditors, professional advisors;

   8. Any Affiliate, business partners, associate, office of HFCL and to their employees;

   9. Any other authorized third-party service providers.

   We may share your information with third parties under a confidentiality agreement for provision of Services which inter alia restricts such third parties from further disclosing the information unless such disclosure is for the purpose as detailed under that confidentiality agreement.

   Hero FinCorp may transfer sensitive personal data or information to any other entity or person that ensures the same level of data protection that is adhered to by Hero FinCorp under the IT Rules of 2011. Transfer of information shall be allowed only if it is necessary for the performance of lawful contract entered into between Hero FinCorp or any person on its behalf and the information provider or where the information provider has consented to such transfer. Adequate protection mechanism shall be provided for personal information when it is transferred outside Hero FinCorp’s network.

   Reasonable due diligence activities shall be conducted to ensure that the third party has appropriate security & privacy controls in place prior to sharing of any personal information (including sensitive personal data or information). You also have the ability to restrict disclosure of your information to third parties, however, please note that this may affect your seamless access to such product/ service as opted by you. Please refer to Section 9 of this policy for further information.

    

7. ‌Retention of Information

   HFCL shall not retain or store such information for periods longer than is required for the purposes except when the information may lawfully be used or is otherwise required under any other law for the time being in force.

    

8. ‌Security of Personal Information

   There shall be adequate protection for the personal information collected, used, retained and disclosed to support our business activities by following the relevant usage, technical and organizational policies, standards and processes:

   1. Hero FinCorp has comprehensive documented information security program and information security policies that contain managerial, technical, operational and physical security control measures.

   2. Hero FinCorp complies with ISO 27001:2022 Standard on ‘Information Technology – Security Techniques’.

   However, Hero FinCorp will not be responsible for any loss, unauthorized access or any harm caused to the information provider by any misuse of his or her personal information, unless it is a direct and foreseeable consequence of negligence and non-compliance on the part of Hero FinCorp only. The information provider hereby acknowledges that Hero FinCorp will not be responsible, in particular, for any third-party action or action on the part of the information provider leading to loss, damage or harm to such information provider or any other person.

    

9. ‌What are your Rights and how you can exercise them

   By accepting this Privacy Policy, you hereby grant consent to HFCL to share, receive, record, store, and process your Personal Information and Sensitive Personal Information as outlined in this document. HFCL is committed to protecting your personal information and honouring all the rights provided to you under applicable laws. At any time while availing the services or otherwise, you have following rights:

   1. Right to Withdraw Consent: You have an option to withdraw you consent that was given earlier. Such withdrawal of the consent shall be sent in writing to HERO FINCORP on registered address: Hero FinCorp Ltd., A-44, Mohan Co-Operative Industrial Estate, Mathura Road, New Delhi – 110044; or through email - Customer.Care@HeroFinCorp.com.

      In case the provider of information withdraws his / her consent in relation to personal information, Hero FinCorp shall evaluate the request and take appropriate action. If an individual does not provide their personal information or subsequently, withdraws consent in relation to personal information, Hero FinCorp shall have the option to not provide services for which the said information was sought. In all such cases, Hero FinCorp may retain some data to meet its obligations under applicable law. This right is provided in accordance with RBI’s Digital Lending Guidelines for regulated entities and may not be applicable for every consent that was provided by you while availing HFCL services.

   2. Right to Correction of Information: Hero FinCorp has defined processes in place to enable the providers of information, as and when requested by them, to review the information they had provided and ensure that any personal information or sensitive personal data or information found to be inaccurate or deficient shall be corrected or amended as feasible. Hero FinCorp shall not be responsible for the authenticity of the personal information or sensitive personal data or information supplied by the provider of information. Hero FinCorp shall ensure that the data provided by customers is correct through verification of documents submitted by them as per process laid out in the ‘AML / KYC Policy’.

      You must keep your Personal Information up to date, and intimate HFCL forthwith of any change in Personal Information.

      To review, correct or update their personal information, you can write to us at Customer.Care@HeroFinCorp.com or reach out to us on our registered address at Hero FinCorp Ltd., A-44, Mohan Co-Operative Industrial Estate, Mathura Road, New Delhi – 110044.

   3. Right to Grievance Redressal: HFCL has a structured grievance redressal mechanism in practice where all grievances will be attended as per a defined time schedule.

      Customers can write to us at Customer.Care@HeroFinCorp.com or reach out to us on our registered address at Hero FinCorp Ltd., A-44, Mohan Co- Operative Industrial Estate, Mathura Road, New Delhi – 110044.

      For any grievances related to any part of this policy, the Grievance Officer Details are:

      Mr. Anshul Mangla,

      Email: datagrievance.officer@herofincorp.com

      Address: Hero FinCorp Ltd., A-44, Mohan Co-Operative Industrial Estate, Mathura Road, New Delhi – 110044.

       

10. ‌Cookies

    Cookies are small data files that a Website stores on your computer. We may use cookies on our Website similar to other lending websites and online marketplace websites. Use of this information helps us identify the User behaviour, the products that the User browses, in order to make our Website more user friendly and to be able to provide you with information relating to Products that may be of interest to you. We might also use this information to display advertising from third party companies. Most browsers will permit you to decline cookies but if you choose to do this it might affect service on some parts of our Website.

     

11. ‌Marketing and Promotional Activities

    Marketing and promotional communications shall be sent to providers of information / customers after obtaining required consent from them in adherence with applicable law.

    At any time, if you want to discontinue receive marketing and promotional communications you may withdraw your consent by following steps mentioned in “Section 9 – What are your rights and how you can exercise them” of this document.

     

12. ‌Severability and Exclusion

    We have taken every effort to ensure that this Policy adheres with the applicable laws. The invalidity or unenforceability of any part of this Policy shall not prejudice or affect the validity or enforceability of the remainder of this Policy. This Policy does not apply to any information other than the information collected by HFCL. This includes, but is not limited to, information posted in any public areas.

     

13. ‌Disclaimer

    Kindly note that HFCL does not collect personal information about you unless you use our website or mobile application or services. We may also receive information about you from third-party services if you are already connected with those services. HFCL shall, at all times, ensure to implement reasonable security practices and procedures (such as managerial, operational, physical and technical) for the purpose of protection and safeguarding of your personal data and information as the same is of vital importance to HFCL. At HFCL, we are strongly committed to protecting the personal and financial information that you submit to us. Personal information of individual users will not be sold or otherwise transferred to unaffiliated third parties.

    HFCL ensures to safeguard the security and confidentiality of any information you share with us. Any of your personally identifiable information obtained by us shall not be used or shared other than for the purposes to which you consent.

    Your information/inputs/queries as a registered user are required to serve you better and the same shall not be shared with anyone without your consent. However, we may disclose your personal data to agents or contractors of HFCL and/or its group companies/affiliates to enable processing of transactions or communications with you “on need” basis. Your aforesaid information may be further used for assessment and analysis of our market, customers, products, and services and to understand the way people use our Services so that we can improve them and develop new products and services. However, it shall be on the basis that the agents are required to keep the information confidential and will not use the information for any other purpose other than to carry out the services they are performing for HFCL and/or its group companies/affiliates.

     

14. ‌Governing Law and Dispute Resolution

    This Policy shall be governed by and construed in accordance with the laws of India. The courts at Delhi, India shall have exclusive jurisdiction in relation to any disputes arising out of or in connection with this Policy.

     

15. ‌No Waiver

    The rights and remedies available under this Policy may be exercised as often as necessary and are cumulative and not exclusive of rights or remedies provided by law. It may be waived only in writing. Delay in exercising or non- exercise of any such right or remedy does not constitute a waiver of that right or remedy, or any other right or remedy.

     

16. ‌Third Party Website and Services

    Hero FinCorp's website and services may contain links to third party services, and give the user the ability to access such third-party websites, products, and services. Please proceed to the use of such third-party website or service at your own risk. Hero FinCorp will not be held liable for any outcome or harm arising as a result of such use of such third-party websites or services. Please read the privacy policies of any third party before proceeding to use their websites, products or services.

     

17. ‌Changes to this Data Privacy Policy

    Hero FinCorp may periodically revise or update this Data Privacy Policy. Continued use of Hero FinCorp's website, mobile application and / or services after the effective date of the Data Privacy Policy means that the user accepts the revised Data Privacy Policy. If the user does not wish to agree with any such revised terms, at any time you can do so by withdrawing your consent and by no longer accessing Hero FinCorp's website, mobile application and / or services.

     

‌Annexure 1 – References

Annexure 2 – Definitions