This policy has been prepared in accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and applicable RBI guidelines.

This Privacy Policy ("Policy") describes the policies for collection, use, storage, processing, disclosure and protection of any information provided by you while using the Platform owned and operated by Credilab Micro Finance Private Limited (CIN: U65990DL2021PTC380666), operating under the brand name "NCR Fincorp", at https://ncrfincorp.com/.

By visiting/accessing the Platform, using our Services, and voluntarily providing us with information, you are consenting to our use of your information in accordance with this Policy. If you do not agree, please do not proceed to use this Platform.

I. Collection of Information

A. Information Provided by You

For provision of Services, we may collect personally identifiable information including your name, email address, gender, date of birth, postal address, phone number, marital status, family details, and business information ("Personal Information").

We shall collect all Personal Information with your explicit, auditable and revocable consent. We will request only such information that is lawfully and operationally required for providing Services to you.

Categories of Data Collected

CategoryExamplesPurpose
Identity DataFull name, mobile numberIdentification, contract fulfillment
Contact DetailsEmail, address, push notificationsCommunication, notifications
Security & Fraud PreventionDevice type, location, biometricFraud prevention, security
Customer Due DiligenceEmployment, income, sources of fundsCredit assessment, AML compliance
Government-issued DataAadhaar, PANKYC verification
Bank Account DataBank account number, branchDisbursement, repayment
Loan Application DataComplete loan application detailsCredit underwriting
Analytics DataCookies, usage patternsService improvement

B. Information from Other Sources

From Financial Partners: We may receive information related to your loan transactions from our Financial Partners for collection of outstanding dues or for processing your loan application.

From UIDAI: We may receive information from UIDAI servers for e-KYC and e-Sign services on the basis of your request and consent. We do not retain or store Aadhaar data beyond what is permitted under UIDAI and applicable law.

Through Cookies: We use cookies to improve the quality of our Platform, store your preferences, improve search results, and track user trends. You always have the option to decline cookies, though this may affect certain services.

II. Use of Personal Information

We use your Personal Information to:

  • Facilitate your use of the Platform's Services and account registration
  • Verify your identity and contact details
  • Process transactions and send notices about your transactions
  • Communicate with you and process your requests
  • Offer surveys, promotions, and marketing communications
  • Improve our Platform content and Services
  • Respond to inquiries, comments, or concerns
  • Provide customer support
  • Exercise our legal rights for protection of our interests

Account Aggregator (AA) Framework: We may access your financial information through licensed Account Aggregators regulated by the RBI, strictly with your explicit consent, for credit assessment or risk profiling. You will have the ability to review and approve each data sharing request.

KYC via DigiLocker: We may facilitate electronic KYC through DigiLocker. By opting for this, you provide consent to being redirected to DigiLocker for Aadhaar-based authentication and authorise us to retrieve specific documents for regulatory compliance and identity verification.

III. Sharing of Personal Information

We may share your Personal Information with the following entities:

  • Our Financial Partners to provide you with loan services
  • Affiliates and subsidiaries to assist in service provision and fraud prevention
  • Marketing partners for promotional offers (with your consent)
  • Another business entity in the event of merger, acquisition, or restructuring
  • Third-party service providers bound by confidentiality obligations

Third-Party Partners

EntityWebsitePurpose
Experian Credit Information Company of India Limitedexperian.comCredit Bureau Check
Cashfree Payments India Private Limitedcashfree.comPayment Processing / NACH
Other service providersncrfincorp.comAs notified on Platform

IV. Your Rights

A. Right to Deny

You may deny consent to provide any information, restrain us from sharing information with Financial Partners or third parties, or not provide us the right to contact you.

B. Right to Withdraw Consent and Right to be Forgotten

You have the right to withdraw consent previously provided and require the Platform to delete/forget your data. We shall purge the information where there is no legal requirement to retain it. We reserve the right to retain information to comply with applicable laws, enforce legal rights, or provide information to regulatory authorities.

C. Right to Rectify

You have the right to review, correct, update, and/or amend your information to ensure it is accurate, complete, and up to date. You can do this by contacting us at help@ncrfincorp.com.

V. Security

We implement appropriate technical and organisational safeguards to protect your Personal Information against unauthorised access, alteration, disclosure, or destruction. These include SSL encryption, secure servers, and strict access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

VI. Data Retention

We retain your Personal Information only for the duration necessary to fulfil the purpose for which it was collected or as mandated by applicable law. After this period, we securely delete or anonymise your information.

VII. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

VIII. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Policy on the Platform and updating the "Effective Date" at the top of this page. Your continued use of the Platform following the posting of changes constitutes acceptance of those changes.

IX. Contact Us

Data Protection / Grievance Officer

Name: Authorised Officer – NCR Fincorp
Email: grievance@ncrfincorp.com
Support Email: help@ncrfincorp.com
Address: A-48, Wazirpur Industrial Area, Delhi – 110052
Website: https://ncrfincorp.com/

Version: 1.0.0  |  Effective Date: June 2026