Privacy Policy

Last Updated: 1 December 2025

Introduction

This Privacy Policy (“Policy”) explains how [Roopeez Fintech] (“Company”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit our website [www.Roopeez.com] (“Website”) or submit your details for loan enquiries.

We operate as a loan advisor and direct selling agent (DSA) / loan service provider (LSP) for banks and NBFCs in India and comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable RBI digital lending guidelines, the Information Technology Act, 2000 and other applicable Indian laws. By using the Website or submitting your details, you agree to this Policy.

Who we are

• Entity Name: Roopeez Fintech

• Business: Loan advisory, lead generation and DSA / LSP services

• Registered Service Provider for India’s largest network: Andromeda Sales & Distribution Pvt Ltd.

• Website: https://www.Roopeez.com

• Registered Office: Tower D, 9th Floor, Unitech Cyber Park, Sector 39, Gurgaon 122001.

• Customer Support Email: [[email protected]]

• Customer Support Phone: 99110 37922

Data Protection / Grievance Contact

• Data Protection Officer (DPO): Sugandha P., DPO

• Email: [[email protected]]

• Address: Tower D, 9th Floor, Unitech Cyber Park, Sector 39, Gurgaon 122001.

• Grievance Officer: Shanvi S., Director

• Email: [email protected]

• Address: Tower D, 9th Floor, Unitech Cyber Park, Sector 39, Gurgaon 122001.

You may contact these officers for any questions, requests or complaints relating to your personal data.

What personal data we collect

Information you provide through lead forms

When you fill in a form on our Website, on partner landing pages, or via advertising platforms (for example, Meta/Facebook lead forms), we typically collect only the following fields:

• Full name

• Mobile number

• Email address

• City / location (if requested)

• Loan type (for example, personal loan, home loan, business loan, loan against property, credit card)

• Desired loan amount and basic preferences (tenure or other preferences, if asked)

• Preferred bank or NBFC (if you choose to specify one)

We do not ask you to upload or share documents such as PAN, Aadhaar, bank statements, salary slips, photographs or other KYC documents on our Website at the lead stage.

Information collected automatically

When you visit the Website, certain information may be collected automatically, such as:

• IP address and approximate location

• Browser type, device type and operating system

• Pages viewed, time spent, referral source and clickstream data

• Cookies, pixels and similar technologies used for security, analytics and marketing

This information is generally used in aggregated or pseudonymised form for technical, security and analytical purposes.

How we use your personal data

We use the limited personal data collected from you for the following purposes:

1 Responding to your enquiry

To contact you via phone, SMS, WhatsApp or email regarding your loan enquiry.

To understand your requirements (loan type, approximate amount, preferred bank).

2 Loan advisory and lead generation

To assess which products or Lending Partners might be suitable for your stated preferences.

To provide basic information and guidance about potential loan options.

3 Sharing leads with Lending Partners (banks/NBFCs)

With your consent, to share your basic lead details (name, contact details, loan type, loan amount, preferred bank) with one or more partner banks/NBFCs so they or we can follow up about your request.

After you are connected or redirected to a bank/NBFC, that lender becomes an independent data fiduciary/controller and its own privacy policy applies.

4 Website operation, security and improvement

To operate and maintain the Website.

To monitor performance, prevent fraud and abuse, and maintain security.

To generate anonymised statistics and insights to improve our services.

5 Marketing and communication (only if you opt in)

To send you offers, updates and information about relevant loan products or services.

To run remarketing or similar campaigns on digital platforms in compliance with their policies.
You can opt out of marketing communications at any time.

We do not use your personal data for any purpose that is incompatible with the purposes described above without first informing you and, where required, obtaining your consent.

Legal basis for processing

We process your personal data on one or more of the following legal bases:

• Consent: When you submit a form or opt in to receive updates or marketing.

• Contractual necessity: To respond to your enquiry, provide loan advisory inputs and connect you with Lending Partners as requested.

• Legal and regulatory compliance: To comply with applicable RBI digital lending guidelines, DPDP Act requirements and other laws.

• Legitimate interests: For Website security, fraud detection, internal analytics and service improvement, provided your rights and interests are not overridden.

Data sharing and disclosures

We may share your personal data in the following limited circumstances:

Lending Partners (banks/NBFCs)

With your consent, we may share your basic lead details (name, contact details, loan-type information and preferences) with one or more partner banks or NBFCs so they or we can contact you about your enquiry and process your request further. These Lending Partners are independent data fiduciaries/controllers and will process your data under their own privacy policies and regulatory obligations.

Service providers

We may share data with trusted third-party service providers who support our operations, such as:

2 Cloud hosting and infrastructure providers

3 SMS, email and communication providers

4 Analytics and CRM tools

5 IT security and maintenance providers

These parties are bound by contracts to process data only on our instructions, keep it secure, and not use it for their own unrelated purposes.

Legal and regulatory requirements

We may disclose your data if required to do so by law, regulation, court order or regulatory authority, or when necessary to:

• Comply with legal obligations and RBI / other regulatory directions;

• Protect our rights, property or safety, or that of users or the public;

• Detect, prevent or address fraud, security or technical issues.

Business transfers

If we undergo a merger, acquisition, reorganisation or sale of assets, your data may be transferred as part of that transaction, subject to this Policy or an equivalent policy providing comparable protection.

No sale of data

We do not sell your personal data to third parties for their independent marketing or data monetisation purposes.

Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy or as required by law or regulation. As a general guide:

3 Lead data (name, contact details, basic loan preferences) is retained for a limited period required to follow up on your enquiry, manage our relationship with you, comply with audit and regulatory requirements, and handle any disputes.

4 Website analytics and technical logs may be retained in identifiable form for a limited period and may thereafter be anonymised and retained in aggregated form.

When personal data is no longer required, it is deleted or irreversibly anonymised using appropriate measures, unless retention is mandated by law.

Your rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Right to be informed – to clear information about how your data is used (via this Policy and notices).

• Right of access – to request a summary of the personal data we hold about you and details of how it is processed.

• Right to correction – to request correction or updating of inaccurate or incomplete data.

• Right to erasure – to request deletion of your personal data in certain circumstances, subject to legal and regulatory retention requirements.

• Right to withdraw consent – to withdraw consents given for specific purposes, such as marketing or sharing data with certain partners.

• Right to grievance redressal – to lodge a complaint with our Grievance Officer and, if unsatisfied, escalate to the appropriate authority when provided under law.

To exercise these rights, please contact our DPO or Grievance Officer using the contact details in the “Who we are” section. We may need to verify your identity before responding to your request, and some requests may be subject to legal limitations or exemptions.

Cookies and tracking technologies

Our Website may use cookies, pixels and similar technologies to:

4 Enable core site functionality and security;

5 Understand how visitors use the Website;

6 Improve user experience and content;

7 Support permitted marketing and remarketing activities.

You can manage cookies through your browser settings and, where available, Website cookie preferences. Disabling certain cookies may affect functionality or performance of the Website.

Data security

We implement reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including (among other things):

• Secure servers and controlled access

• Encryption and access controls where appropriate

• Regular monitoring and updates of systems

• Internal policies and staff training on data protection and confidentiality

Despite these measures, no system can be completely secure. You are encouraged to protect your own information by using secure devices and channels when communicating with us.

International transfers

As a general principle, we aim to store and process your personal data within India, in line with applicable regulatory expectations. If personal data needs to be transferred outside India (for example, to service providers in other jurisdictions), such transfer will be carried out in compliance with applicable law and using appropriate contractual or other safeguards. Where required, we will obtain your consent.

Special note on advertising platforms (Linkedin, Google, Meta / Facebook, etc.)

When you interact with our ads or submit your details through lead forms on platforms such as Meta (Facebook, Instagram) or other advertising networks:

5 The platform may independently collect and process your data under its own terms and privacy policies.

6 We receive only the data you choose to submit (for example, name, email, phone, loan-related preferences) and use it strictly in accordance with this Policy.

7 We comply with “Special Ad Category: Financial Products and Services” rules, including non-discriminatory targeting and clear disclosure of our identity and purpose.

You should review the privacy policies of such platforms to understand their independent processing of your data.

Third-party links

Our Website and communications may contain links to websites, apps or services of third parties (including banks, NBFCs and other partners). We are not responsible for the privacy practices, content or security of such third-party properties. You should review their privacy policies separately before providing them with your data.

Changes to this Policy

We may update this Policy from time to time to reflect changes in law, regulation, technology, or our services. The “Last Updated” date at the top indicates the latest revision.

Material changes may be communicated by email, prominent notice on the Website, or updated consent flows where required. By continuing to use the Website or our services after such changes, you accept the revised Policy.

Contact and grievance redressal

If you have any questions, requests, or complaints regarding this Policy or your personal data, please contact:

• Data Protection Officer:

• Name: Sugandha P.

• Email: [email protected]

Address: Tower D, 9th Floor, Unitech Cyber Park, Sector 39, Gurgaon 122001.

• Grievance Officer:

• Name: Shanvi S.

• Email: [email protected]

Address: Tower D, 9th Floor, Unitech Cyber Park, Sector 39, Gurgaon 122001.

We aim to acknowledge grievances within 48 hours and seek to resolve them within 30 days, subject to the nature and complexity of the issue and applicable legal requirements.

Governing law and jurisdiction

This Policy is governed by the laws of India. Subject to applicable law, any disputes arising out of or relating to this Policy or the processing of your personal data shall be subject to the exclusive jurisdiction of the competent courts at [Gurugram, Haryana], India.