Privacy Policy

1. Introduction

Akaal Advisory ("we", "us", "our", or "Company") is committed to protecting your privacy and ensuring transparency in how we handle your personal information. This Privacy Policy explains our data collection, usage, and protection practices.

We comply with applicable data protection laws and regulations, including GDPR principles and Indian data protection standards. Please read this policy carefully to understand our privacy practices.

2. Information We Collect

Personal Information You Provide

When you interact with our services, we may collect:

• Contact Information: Name, email address, phone number, postal address
• Financial Information: Income, employment details, credit score (with permission), loan amount needed
• Identity Information: Government ID numbers (Aadhar, PAN), date of birth, nationality
• Account Information: Username, password (encrypted), user preferences
• Communication Data: Messages, feedback, support inquiries

Information Collected Automatically

When you visit our website or use our applications, we automatically collect:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, clicks, searches, referral source
• Cookies & Analytics: Session information, user preferences, tracking data
• Location Data: Approximate location based on IP address (with permission)

Information From Third Parties

We may receive information from:

• Credit bureaus and credit reporting agencies (for credit assessment)
• Your employer or financial institutions (with your consent)
• Payment processors and banking partners
• Social media platforms (if you link your account)

3. How We Use Your Information

We use the information we collect for:

• Service Provision: Processing loan applications, providing loan recommendations, matching with lenders
• Communication: Sending updates, notifications, responses to inquiries, service announcements
• Verification: Verifying identity, preventing fraud, compliance with KYC/AML requirements
• Personalization: Customizing your experience, providing relevant loan options, tailored recommendations
• Analytics: Analyzing user behavior, improving services, conducting research
• Marketing: Sending promotional content (with your consent), newsletters, special offers
• Legal Compliance: Meeting regulatory requirements, responding to legal requests, protecting our rights
• Risk Management: Detecting fraud, preventing financial crimes, managing security risks

4. Data Sharing & Disclosure

When We Share Your Information

We may share your information with:

• Lending Partners: Banks and financial institutions to process your loan applications
• Credit Bureaus: CIBIL, Equifax, Experian for credit assessment and reporting
• Service Providers: Payment processors, data analytics providers, website hosting companies
• Legal Authorities: Government agencies and law enforcement when required by law
• Business Partners: Companies with whom we collaborate for service delivery

Data Sharing Practices

We ensure that all third parties:

• Are bound by confidentiality agreements
• Use data only for specified purposes
• Maintain appropriate security measures
• Comply with data protection laws

5. Data Security & Protection

Security Measures

We implement industry-leading security practices to protect your information:

• Encryption: SSL/TLS encryption for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, authentication requirements, audit trails
• Firewalls & Intrusion Detection: Network security systems to prevent unauthorized access
• Regular Security Audits: Third-party penetration testing and vulnerability assessments
• Employee Training: Data protection awareness and security protocols for all staff
• Incident Response: Procedures for detecting and responding to data breaches

Data Breach Notification

If a security breach occurs that affects your personal data, we will:

• Notify you without unreasonable delay (typically within 48 hours)
• Inform relevant authorities as required by law
• Provide steps you should take to protect your information
• Investigate the breach and implement corrective measures

6. Cookies & Tracking Technologies

What Are Cookies?

Cookies are small files stored on your device that help us remember your preferences and improve your experience.

Types of Cookies We Use

• Essential Cookies: Required for website functionality (login, security)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Track usage patterns to improve our services
• Marketing Cookies: Enable targeted advertisements (with your consent)

Cookie Management

You can control cookies through your browser settings:

• Accept or reject cookie categories
• Clear existing cookies
• Set preferences for future cookies

7. Your Privacy Rights & Choices

Right to Access

You have the right to request a copy of the personal information we hold about you.

Right to Rectification

You can request corrections to inaccurate or incomplete information.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

You can request limitations on how we use your information.

Right to Data Portability

You have the right to receive your data in a structured, commonly used format.

Right to Opt-Out

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in emails or contacting us.

Exercising Your Rights

To exercise any of these rights, please contact us at the information provided below with a clear description of your request.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Retention Periods

• Account Information: Retained as long as your account is active, plus 2 years after closure
• Transaction Records: Retained for 7 years for audit and compliance purposes
• Marketing Preferences: Retained until you opt-out
• Website Analytics: Typically retained for up to 13 months

We securely delete data that is no longer necessary, unless legal retention is required.

9. International Data Transfers

Some of our service providers may be located outside of India. When we transfer data internationally, we ensure:

• Appropriate safeguards are in place (Standard Contractual Clauses)
• The recipient country has adequate data protection standards
• We comply with international data transfer regulations
• Your data remains protected under equivalent privacy standards

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect information from children. If we discover that a child has provided personal information, we will delete it immediately and terminate the child's account.

Parents or guardians who believe their child has provided information to us should contact us immediately.

11. Third-Party Websites & Services

Our website may contain links to third-party websites. This Privacy Policy applies only to our services. We are not responsible for the privacy practices of external websites. We recommend reviewing their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be effective immediately upon posting. We encourage you to review this policy regularly to stay informed about how we protect your information.

Continued use of our services after changes constitute your acceptance of the updated Privacy Policy.

13. Privacy Contact Information

If you have questions about our privacy practices or wish to exercise your privacy rights, please contact:

Response time for privacy requests: Within 7 business days