XYZ Pe Fintech Private Limited ("XYZ Pe," "we," "our," or "us") is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website (https://XYZ Pe.in), and any other applications or platforms we operate (collectively, the "Services").

Last Updated: June 30, 2025

1. Who We Are

Our Office Address:

XYZ PE Fintech Private Limited
WeWork DLF Forum,
DLF Cyber City, Phase III,
Gurugram, Haryana 122002, India

Email: info@xyzpe.in
Website: https://xyzpe.in

2. Information We Collect

We may collect various types of information from and about you, including:

• Personal Identification Information:
  • Name
  • Contact details (email address, phone number, mailing address)
  • Date of birth
  • Gender
  • PAN (Permanent Account Number)
  • Aadhaar number (if applicable and legally permissible for specific services)
  • Other government-issued identification numbers
• Financial Information:
  • Bank account details (account number, IFSC code)
  • Transaction history
  • Credit card or debit card details (encrypted and processed by secure payment gateways)
  • Income details
  • Investment details
  • Loan details
• Demographic Information:
  • Occupation
  • Education
  • Household income
• Technical and Usage Information:
  • IP address
  • Browser type and version
  • Operating system
  • Device type
  • Referring URLS
  • Pages viewed and time spent on our website/app
  • Clickstream data
  • Usage patterns and preferences
  • Cookies and similar tracking technologies (please refer to our Cookie Policy for more details)
• Location Information:
  • Precise or approximate location data from your mobile device if you enable location services.
• Communications:
  • Records of your correspondence with us (e.g., emails, chat transcripts, customer service calls).
• Information from Third Parties:
  • We may receive information about you from third-party sources, such as credit bureaus, identity verification services, and financial partners, to the extent permitted by law.

3. How We Collect Information

We collect information in several ways:

• Directly from You: When you register for an account, apply for a product or service, fill out forms, contact customer support, or otherwise interact with our Services.
• Automatically: Through cookies, web beacons, and similar technologies as you navigate and use our website and mobile application.
• From Third Parties: From our business partners, service providers, credit bureaus, and other public or commercial sources as permitted by law.

4. How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Maintain Our Services:
  • Processing your applications for financial products and services.
  • Verifying your identity and conducting due diligence.
  • Facilitating financial transactions.
  • Providing customer support and responding to your inquiries.
  • Managing your account and preferences.
• To Improve Our Services:
  • Analysing usage trends and patterns to enhance user experience.
  • Developing new products, features, and functionalities.
  • Troubleshooting and resolving technical issues.
• For Security and Fraud Prevention:
  • Detecting, preventing, and investigating fraudulent or unauthorized activities.
  • Ensuring the security of our systems and data.
  • Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations.
• For Communication:
  • Sending you important service-related notices, updates, and alerts.
  • Providing marketing and promotional communications about our products and services, where you have consented to receive them.
  • Responding to your feedback and requests.
• For Legal and Regulatory Compliance:
  • Complying with applicable laws, regulations, legal processes, and government requests.
  • Enforcing our terms and conditions.
• For Research and Analytics:
  • Conducting research and analysis to understand market trends and user behaviour (anonymized or aggregated data where possible).

5. Disclosure of Your Information

We may share your information with third parties in the following circumstances:

• With Your Consent: We may share your information with third parties when you give us explicit consent to do so.
• With Service Providers: We may share your information with trusted third-party service providers who perform functions on our behalf, such as:
  • Payment processors
  • Data analytics providers
  • Cloud hosting services
  • Customer support providers
  • Identity verification services
  • Marketing and advertising partners
  • Credit bureaus

  These service providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them.

• For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
  • Comply with a legal obligation.
  • Protect and defend the rights or property of XYZ Pe.
  • Prevent or investigate possible wrongdoing in connection with the Services.
  • Protect the personal safety of users of the Services or the public.
  • Protect against legal liability.
• Business Transfers: In the event of a merger, acquisition, restructuring, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information.
• Affiliates: We may share your information with our affiliates, who will adhere to this Privacy Policy.
• Aggregated or Anonymized Data: We may share aggregated or anonymized information that does not directly identify you for research, marketing, analytics, or other purposes.

6. Data Security

We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Using industry-standard encryption protocols (e.g., SSL/TLS) for data in transit and at rest.
• Access Controls: Implementing strict access controls to limit who can access your information.
• Firewalls: Utilizing firewalls to protect our systems from unauthorized access.
• Regular Security Audits: Conducting regular security audits and vulnerability assessments.
• Employee Training: Training our employees on data privacy and security best practices.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This includes retaining your information to comply with legal, regulatory, tax, accounting, or reporting requirements.

8. Your Privacy Rights

Depending on applicable laws, you may have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal information we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Erasure (Right to be Forgotten): In certain circumstances, you may have the right to request the deletion of your personal information.
• Right to Restrict Processing: In certain circumstances, you may have the right to request that we restrict the processing of your personal information.
• Right to Data Portability: You may have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal information in certain circumstances, including for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@xyzpe.in. We will respond to your request in accordance with applicable law.

9. Third-Party Links

Our Services may contain links to third-party websites or applications that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: info@xyzpe.in