PayU Finance Privacy Statment
Privacy Policy Table of Contents
Who Is PayU Finance India Private Limited and How Does This Privacy Statement Work?
What Is Personal Information and What Types of Personal Information Do We Collect About You?
What Are the Lawful Grounds That We Rely on to Process Your Sensitive Personal Information?
Changes to PayU Finance Privacy Statement and Your Duty to Inform Us of Changes
1 . Who Is PayU Finance India Private Limited and How Does This Privacy Statement Work?
PayU Finance India Private Limited (“PayU Finance” “we”, “our”, “us”) is a company incorporated in India bearing CIN No. U65910MH1992PTC068664, having its registered office at Office No. 101, 1st Floor, Empressa Building, Second Road, Khar West, Mumbai, Maharashtra – 400052, India. PayU Finance is a registered non-banking financial company having a certificate of registration issued by the Reserve Bank of India ("RBI") and is engaged amongst others in the business of providing financial products and services some of which are delivered through technology platforms such as Websites, Apps and Platforms (defined below) in addition to certain data processing services to its customers and other businesses. PayU Finance provides you loans or credit facility through its Websites, Apps and Platforms which may belong to its Lending Service Providers (“LSPs”) or Digital Lending Applications (“DLAs”). PayU Finance belongs to Prosus Group of companies, i.e., Prosus N.V, a company registered with the Trade Registry for Amsterdam under 34099856 (https://www.prosus.com/companies).
The purpose of this privacy statement (“PayU Finance Privacy Statement”) is to give you information on how PayU Finance collects, stores, uses, discloses, transfers and processes your Personal Information including Sensitive Personal Information (defined below) when: (a) you use our websites (“Websites”), software applications or mobile applications including the LazyPay application hosted on Citruspay.com where the trade mark "LazyPay" has been used by PayU Finance under a license from LazyPay Private Limited(“Apps”) or platform(s) of any of our partners (“Platforms”), or (b) you avail any products or services which we may operate or offer to you either directly through our Websites or Apps or Platforms or through a merchant _; including the steps we take to protect your Personal Information. The term Websites includes all pages that are sub-domains or are associated with or exist within each Website.
By accessing the Websites, Apps, Platforms and/or using products or services provided by PayU Finance directly or indirectly, you agree that you have read and understood and agree to have read and understood this PayU Finance Privacy Statement.
While accessing the Websites, Apps, Platforms, and/or having used the products or services offered by PayU Finance directly or indirectly, in the past, present or future, you may be required to provide your specific and prior consent for us to collect, use, store, disclose or otherwise process your Personal Information and Sensitive Personal Information submitted to us in accordance with this PayU Finance Privacy Statement.
You further acknowledge and accept that your specific consent provided on our Websites, Apps, Platforms and/or during usage of products or services provided by us shall also be applicable to your Personal Information and Sensitive Personal Information submitted to us, directly or indirectly, in the past.
It is strongly recommended for you to return to this page periodically to review the most current version of this PayU Finance Privacy Statement which is amended by us from time to time.
2. What Is Personal Information and What Types of Personal Information Do We Collect About You?
“Personal information” means any information that relates to an individual, which directly or indirectly, in combination with other information available or likely to be available with us, is capable of identifying such individual.
“Sensitive Personal Information” means any Personal Information of an individual, which consists of information relating to financial information such as bank account, credit card, debit card or other payment instrument details; passwords; biometric information; sexual orientation; physical, physiological and mental health condition; and medical records and history. Information freely available or accessible in public domain is not treated as Sensitive Personal Information.
Depending on who you are (e.g., a merchant, customer, cardholder, consumer, supplier or business partner) and how you interact with us (e.g., through Website, Platform, App, telephone, IVR, API, online or offline), we may collect, use, receive, store, analyze, combine, transfer or otherwise process different categories of your Personal Information (including Sensitive Personal Information).
Below is a table of the categories of Personal Information and Sensitive Personal Information which we may collect about you:
Categories of Personal Information
Which includes information such as
“Identity and Account Log- In Information”
Full name(s), title, age, user ID, gender, and your date of birth.
“Contact Information”
Telephone/mobile number(s), permanent and current address, state/city of residence, country, pin code, email address, and chosen billing address.
“Financial Information”
Personal bank account numbers and bank account data including e-nach, NEFT, IMPS and UPI ID details, credit or debit card information, including the credit or debit card number, card type, expiry date on the credit or debit card, and name on the card, salary and income details.
“Identification Information”
Know Your Customer (KYC) documents including all proofs of identity and address, photograph, Permanent Account Number (PAN), GST Number, etc.
“Payment Information” (transactional information)
Payment gateway ID, name of issuing bank, merchant’s name, category and other identifiers along with the details of products or services purchased or paid for, mode of payment, the date, currency and amount of the transaction, whether the payment was successful, and other information provided by you directly or indirectly to us or provided to us by banks, merchants or other service providers or business partners.
“Usage and Technical Information”
IP addresses, application, device or browser type, versions and configurations, operating systems, device brand and model, time zone setting, geo-location information, content, unique identifiers associated with your device(s) and pages that you access on the Website(s), Apps or Platforms, and the dates and times that you visit the Website, App or Platform, and paths taken.
“Credit and Lending Information”
Credit or affluence related information or assessment, Credit Information and income information (e.g., employment contract, salary details, employer name, income tax returns, bank account statements, income statements, balance sheet, cashflow statement), credit or affluence score or reliability scores provided by third parties such as financial institutions , credit information companies or account aggregators or similar third parties as permitted under applicable laws of India including our business partners, independent service providers and our group entities.
“Marketing and Communications Information”
Communications with customer service support, behavioural data (for example, data collected using cookies), information about promotions, surveys, promotional campaigns and records of your decision(s) to subscribe or to withdraw from receiving marketing materials, if any.
“Information from your device(s)/Phone Data”
Mobile phone resources like file and media, call logs, telephony functions, camera, microphone, location data, or any other facility in your electronic device(s) (including your mobile phone(s)) for the purposes of on-boarding / KYC requirements in connection with your loan or credit facility application after seeking necessary permissions.
Our LSPs/DLAs may collect Phone data as a one-time activity and limit the collection to the time duration for which you complete your application for the loan or credit facility on our Websites, Apps and Platform. While our LSPs/DLAs may facilitate collection of Phone Data from you, any storage of the Phone Data will be done by PayU Finance only and the LSPs/DLAs do not have access or store any Phone Data.
We are committed to ensure that our LSPs/DLAs only store minimal data that will be required for them to enable the products and services through PayU Finance’s Websites, Apps and Platforms. We further ensure that if our DLAs/LSPs store any data at their end then the same is in accordance with the applicable laws.
We may also collect, use, process and/or share non-Personal Information or anonymized and/or aggregate data such as statistical or demographic data in accordance with this PayU Finance Privacy Statement.
As a matter of principle, we do not collect certain special categories of Personal Information about you (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health or any genetic and biometric information). However, we may collect certain Sensitive Personal Information to provide our services or products to you, such as some categories of Financial Information including bank account number, name and number on the credit or debit card and your Credit and Lending Information as described above. In such cases, we ensure that such Sensitive Personal Information is used, processed, stored and/or disclosed in accordance with this PayU Finance Privacy Statement and in in compliance with applicable laws of India.
To the extent the Websites, Apps or Platforms include links to third-party websites, plug-ins and applications (including cookies, tracking technologies and widgets by third party advertisers), it is important that you understand that by clicking on those links or enabling those connections, you may allow third parties to collect or share data about you.PayU Finance does not have oversight of these third-party websites, plug-ins and applications and we are not responsible for their processing or using of your Personal Information or Sensitive Personal Information. Any information collected by a third party in this manner is subject to that third party's own data collection, use and disclosure policies and you must make yourselves conversant with those.PayU Finance does not have oversight of these third-party websites, plug-ins and applications and we are not responsible for their processing or using of your Personal Information or Sensitive Personal Information. Any information collected by a third party in this manner is subject to that third party's own data collection, use and disclosure policies and you must make yourselves conversant with those.
3 . How Do We Collect Your Personal Information?
How we collect Personal Information (including Sensitive Personal Information) will depend on the following broader situations:
3.1 If we receive or collect it directly from you
We collect Personal Information (including Sensitive Personal Information) directly from you in different ways on the Websites, Apps, Platforms or product or service offerings. For example, you give us your Personal Information (including Sensitive Personal Information) when you:
give us your Contact Information so that we can contact you about our services and products;
conclude a contract or verify to us who you are (whether by email, phone or electronic verification);
provide your Personal Information (including Sensitive Personal Information) on the Apps, Websites, Platforms or the checkout pages in order to register for availing our services or for completing a transaction(s);
apply for our products or services directly with us or through our business partners (such as various third party websites, resellers or credit providers);
directly register with us for availing any products or services including initiating an account-based relationship with us;
are prompted to give us your Identity and Account Log- In Information, Contact Information, Financial Information, Identification Information, Credit Related Information and/or Payment Information on our App, Website or web-checkout /payment pages or via other similar channels to register or complete a transaction;
give us your Credit and Lending Information to avail any loans or services directly from us, or from our business partners and third party service providers;
enter a competition, promotion or survey or you consent to be provided with marketing materials to be sent to you;
send us a support request for any of our products or services through one or more of our support desks; or
access, use and/or browse our Website(s), Apps or Platforms;
give us permission to access, collect and store Phone Data, and other sources available through various means including cookies.
3.2 If we collect it from third parties, or from publicly available sources
We obtain Personal Information (including Sensitive Personal Information) through third parties including our business partners, independent service providers and our group entities, third parties or from publicly available sources, if publicly available, as permitted under applicable laws of India, including:
from various merchants, marketplaces, re-sellers, banks, payment partners, payment aggregators, payments systems, payment service providers and financial institutions. For example, a merchant can share your Personal Information with us for the purpose of doing an eligibility check for our services.We encourage you to read such third parties’ privacy statements to learn more on how they process your personal information.
from our LSPs/DLAs while offering our services through their Platforms. We encourage you to read the LSPs/DLAs privacy policies to learn more on how they process your personal information;
from group entities or independent third parties for other activities. For example we may receive information as may be required for our internal analysis, credit checks etc. from PayU Payments Private Limited. We may also receive your information from various third parties in the process of providing services to such third parties or ;
From third parties within the group of companies to which PayU Finance belongs, i.e., Prosus N.V., https://www.prosus.com/ including its affiliates and subsidiaries, subject to applicable laws of India;
from credit reference agencies, credit bureaus, banks, or other financial institutions in accordance with applicable laws in India, including through our LSPs/DLAs and the Central KYC Registry. For example, if PayU Finance offers credit and lending products to you, certain credit reference agencies or bureaus will provide us Credit and Lending Information about you to conduct a credit check or credit assessment. PayU finance being an NBFC is authorized to obtain certain ‘Credit Information’ as per applicable laws (including the Credit Information Companies (Regulation) Act, 2005 (“CICRA”). All products and services that involve Credit Information shall qualify only for the purposes of making effective credit decisions, credit worthiness, risk assessments and reviewing and evaluating PayU Finance’s risk in compliance with the provisions of CICRA.
from social platforms and networks when you give us permission to do so either directly or through a cookie. For example, depending on your social media settings, if you choose or consent to connect your social media account to a PayU product or do not disable cookies while accessing the Website(s), Platform or an App, certain information from your social media account may be shared with us (which may include information that is part of your profile);
from financial institutions and fraud prevention agencies for the purposes of conducting fraud and risk assessments or analysis. For example, before we provide or enable the provision of any services, goods or finances to you (as applicable), we may undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to collect information about you from our business partners and independent service providers including technology providers who have entered into contracts with us;
from third party service providers or technology providers, including service providers engaged in the business of collecting data from publicly available sources, who have entered into contracts with us to assist us with business operations;
from third parties such as merchants or e-commerce platforms who have either entered into a contract with you or have obtained your consent or through any other legal means as may be available in accordance with applicable laws of India, to share your information with other parties;and
from publicly available sources in accordance with applicable laws of India;
4 . What Are the Lawful Grounds That We Rely on to Process Your Sensitive Personal Information?
We process Sensitive Personal Information only when we have obtained your consent in manner provided hereinunder.
For collecting, processing (including using and storing), disclosing or sharing your Sensitive Personal Information as described in this PayU Finance Privacy Statement, we hereby through this PayU Finance Privacy Statement, seek your consent and give you a notice regarding collecting, processing (including using and storing), and sharing your Sensitive Personal Information for one or more of the purposes detailed herein. For any purposes, where, as per applicable laws of India, a specific consent is required, we will seek such specific consent from you from time to time.
In relation to information obtained by third parties or group entities (such as PayU Payments Private Limited), we rely on the consent taken by these parties on their respective platforms in our favour for us to process the information.
You may, of course, decline to share certain information with us, in which case we may not be able to provide to you some or all of the features and functionalities of the Websites, Apps and the Platform. This may also affect our ability to process your Personal Information (including Sensitive Personal Information) and may therefore lead to the non-availability or discontinuation of the services for which such Personal Information (including Sensitive Personal Information) are to be used or was being used, at our sole discretion.
5 . The Purposes for Which We Process Your Personal Information
We process your Personal Information (including Sensitive Personal Information) for the purposes mentioned below:
5.1. To verify, authenticate and authorize your use of our products or services
We process your Personal Information (including Sensitive Personal Information) for creating login credentials or establishing an account based relationship, doing KYC evaluation and risk assessments in order to authenticate and authorize your use of our products or services depending on if you are a merchant, consumer or customer, and your choice of services or products. The type of Personal Information (including Sensitive Personal Information) typically required is Identification Information, Identity, Credit and Lending Information and Account Log-In Information, Contact Information and Financial Information. This is necessary in order for PayU Finance to assess your application and is also necessary to fullfill our legal obligations under certain applicable laws of India.
5.2. To process the transactions
The types of Personal Information (including Sensitive Personal Information) we require to provide a product or service depends on the specific product made available by PayU Finance (LSPs/DLAs) or the merchant or a third party service provider, including financial institutions and any additional information required by PayU Finance or the merchant or the third party service provider, including financial institutions.
PayU Finance offers multiple types of credit products, which are subject to product specific service terms (contracts) and legal obligations. For example, when PayU Finance offers a LazyPlus or other credit facility on the Websites, Apps or Platforms, PayU Finance processes Personal Information (including Sensitive Personal Information) received from you, merchants, business partners and service providers together with transaction details, including details of the transactions such as amounts and other information relating to the product or service purchased in order to complete the payment by PayU Finance on your behalf to the merchant for purchasing a product or service. In other cases, certain credit and payment transactions require you to provide Personal Information (including Sensitive Personal Information) directly to us onto the Websites, Apps and/or Platforms in order for us to process a transaction, for example when you avail a credit facility and make a drawdown on that credit facility for the purposes of either receiving credit or paying for a product or service using such credit facility.
We may also collect and process Personal Information to evaluate any applications made by you for availing a loan or credit facility ith PayU Finance and/or (through) our LSPs/DLAs for the purpose of (i) conducting a credit assessment on you in relation to such loan or credit facility (ii) your onboarding in relation to such loan or credit facility (iii) conducting due diligence in relation to such loan or credit facility and (iv) monitoring your credit worthiness in relation to such loan or credit facility.
5.3. To provide products and services to you
We also process your Personal Information (including Sensitive Personal Information) to provide you products or services being offered by us, our group companies or our business partners. We may also process your Personal Information (including Sensitive Personal Information) for improving and expediting your journey on the Platforms, Websites, Apps, merchant platforms, etc.
5.4. To do internal risk assessments and analysis
We may process your Personal Information (including Sensitive Personal Information) for the purposes of risk assessments and evaluations, to improve our services, reduce fraud rates, build risk models, etc.
5.5. To generate variables, affluence and reliability scores
We process your Personal Information available with us to generate variables, assign scores and use the same internally and also share it with other group entities including PayU Payments Private Limited, Lazypay Private Limited and Paysense Services Private Limited (collectively referred as “PayU Entities”) and our business partners for the purpose of enabling such entities to market and provide other goods and services to you. PayU Entities or such business partners may further provide PayU Finance with analysis generated by them which PayU Finance may combine with data available with it to synthesize its own analysis. PayU Finance and PayU Entities may also share such analysis with our or their business partners who may rely on the same to make decisions regarding whether to offer their products or services to you. Such analysis as described above does not usually utilise any Sensitive Personal Information about you and mostly your Personal Information is used for these purposes.
5.6. To ensure compliance with the law
We process your Personal Information (including Sensitive Personal Information) to meet the requirements of applicable laws, regulations, standards, rules, codes and the requirements as may be applicable on non-banking financial institutions and other codes with which PayU Finance must comply. This includes:
authenticating and validating your access to your account or to mitigate and protect against identity theft or fraud. To do this, some of your Personal Information (including Sensitive Personal Information) and non-Personal Information may be collected by PayU Finance or these may be directly or indirectly delivered to PayU Finance by merchants, group companies or other business partners of PayU Finance. PayU Finance will use this Personal Information (including Sensitive Personal Information) for the purpose of anti-fraud systems and this may be retained by us for our future use for reference and cross-reference of information.
consulting and reporting your Personal Information (including Sensitive Personal Information) and behaviour on monetary obligations to legitimately constituted financial, commercial or service risk centres, or to other financial institutions, under applicable laws of India or in furtherance to contracts;
verifying your identity and comparing your Personal Information (including Sensitive Personal Information) to verify accuracy for reporting obligations under applicable laws or payment scheme rules or KYC norms;
processing your information for the purpose of ensuring compliance under applicable laws and for resolving or contesting any claims made by or against you against PayU Finance, PayU Entities, our group companies, our business partners or any other third party;
processing or using your Personal Information (including Sensitive Personal Information) if you exert your right of refusal for any of our services or any services provided by PayU Entities, our group companies, our business partners or any other third party; and
processing (including storing or using) your Personal Information (including Sensitive Personal Information) to ensure business continuity of our businesses and appropriate disaster recovery for the Websites, Apps, Platforms, services and products.
5.7. To manage our relationship with you
If you contact us or otherwise give us your Contact Information (for example by registering, by completing an enquiry form on the Website/s, Apps and / or Platforms, or by subscribing to receipt of support and service status communications from us regarding security or fraud monitoring alerts), we process your Personal Information (including Sensitive Personal Information):
to inform you about our products or services and any changes to these products or services and any associated legal documents;
to notify you if there is any interruption of services or products;
to ask you to provide information on how we can improve or develop services or products and to otherwise effectively communicate with you;
to provide you with service assistance and problem solutions or to contact or send you notifications related to the services or products we offer to you;
to use your Personal Information (including Sensitive Personal Information) in transactional or fraud monitoring reports (or both) as part of the performance of our contracts with PayU Entities, our group companies, our business partners or any other third party and to comply with any regulatory obligations. You have the option to unsubscribe from such reports in accordance with the terms of our contract.
5.8. To market our products and services including products and services of our business partners
We use your Personal Information to market our products and services including products and services of our business partners, independent service providers and /or our group entities and to notify you about events, offers, sponsorships, marketing programmes and similar marketing campaigns.
We may also process and analyse your Personal Information (including Sensitive Personal Information) to understand your usage trends and preferences, and to develop and market (either ourselves or through PayU Entities, our group companies, our business partners or any other third parties) new products, services, features and functions to you based on such analysis of your Personal Information (including Sensitive Personal Information).
5.9. To conduct research and to develop and improve our products and services
We use Personal Information (including Sensitive Personal Information) that we collect:
to research and gain insights into market trends and needs and to develop or innovate our technologies, products and services to meet such market trends and needs. We may use machine learning and artificial intelligence techniques to conduct research to gain such insights;
to analyze visitor use of the Websites, Apps, Platform, products or services in accordance with this PayU Finance Privacy Statement;
to improve and personalize our merchant and customer relationships; and
to provide PayU Entities, our group companies, our business partners or any other third party with statistical insights and reports based on your information we receive from them
6 . When and to Whom Do We Disclose Your Personal Information?
6.1 We may share your Personal Information (including Sensitive Personal Information) with group companies of PayU Finance (including PayU Entities), from the group of companies to which PayU Finance belongs, i.e., the Prosus group (https://www.prosus.com/companies). We may disclose your Personal Information (including Sensitive Personal Information) to these companies, to:
provide support services and technical services to these PayU Finance and PayU Entities and to receive some of these services from them;
ontribute to the research, data analytics and studies in order to improve the products and services that PayU Finance and other group companies of PayU Finance (including PayU Entities) and third parties respectively provide.
to offer their products and services to you including offering combined products and services.
6.2 We may also share with, or disclose, subject to applicable laws, your credit information, and/or any other information(s) / document(s) received by us such as KYC details or documents held with or received by us from our affiliates and/or group companies and/or LSPs/DLAs and any agents or service providers including our affiliates and/or group companies and/or with any regulatory or government authority.
6.3 We may share your Personal Information (including Sensitive Personal Information) with external third parties such as:
Other third parties and financial institutions for the purpose of enabling such entities to market and offer their products and services to you. We may also share your Personal Information (including Sensitive Personal Information) with such third parties and financial institutions to assist them in understanding your interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions and such third parties and financial institutions may market and offer their products and services to you based on this.
credit bureaus and credit providers to report financial information as may be required in accordance with applicable laws including CICRA; and to conduct credit scoring to determine affordability, as permitted under applicable law. PayU finance being an NBFC may disclose your ‘Credit Information’ or the analysis on the basis of your Credit Information, only in accordance with the provisions of CICRA, for qualified purposes such as making effective credit decisions, credit worthiness, risk assessments and reviewing and evaluating PayU Finance’s risk. For the sake of clarity, it is clarified that PayU Finance does not share any Personal Information with any other entity where any such sharing is restricted by CICRA.
merchants in accordance with our technology or service agreements (also referred to as our terms and conditions or contracts). For example, to provide buy now pay later service to the merchant, PayU Finance will share your data with the merchant so as to enable the merchant to extend trade credit to you.
CKYC (Central KYC Registry) as a mandatory requirement under applicable laws in India.
authorized financial institutions and banking partnerswith whom we partner to jointly create and offer products and services.
service providers or vendors under contract who assist us with our business operations, including in relation to completion of your KYC process, eligibility checks and storage of such information or data, as required under applicable laws. This would also include any other third parties which may be engaged by us or our LSPs/DLAs which may include their affiliates and/or group companies, agents and service providers.
companies that we plan to merge with or entities that we may acquire or be acquired by subject to the provisions of applicable laws,in which situation we will require that the new combined entity or the acquired/ acquiring entity follows this PayU Finance Privacy Statement with respect to your Personal Information.
when required by law enforcement,government officials, fraud detection agencies, financial institutions or other third parties and when we are compelled to do so under applicable laws (such as via a subpoena, court order, regulatory query or similar procedure).
Phone logs and SMS and Information from your device(s) with our Lending Service Partners for operational reasons including reaching out to you for referrals, etc.
international entities we partner with for the offer and/or development of products and services subject to the requirements under this PayU Finance Privacy Statement and applicable laws.
The detailed list of third parties is provided here
PayU Finance ensures that every third party involved in the processing of your Personal Information (including Sensitive Personal Information) has the required organizational and technical protections in place as may be required in accordance with applicable laws in India. PayU Finance will take an explicit consent from you before sharing your Personal Information (including Sensitive Personal Information) with third-parties, except in cases where the information is to be shared for regulatory or statutory purposes.
In case you need further details about service providers/third parties with whom your data will be shared, please write to us at privacy@payufin.com
7 . Marketing
In relation to the products and services provided by us or PayU Entities or by third parties with whom we share your Personal Information and Sensitive Personal Information as per this PayU Finance Privacy Statement, you may receive marketing communications from PayU Finance or such other PayU Entities or third parties, by messages, or email or through other digital modes, on Platforms, Websites and Apps or such other platforms including social media platforms, or on such third party platforms Websites and Apps including social media platforms, if you have provided us your Personal Information or Sensitive Personal Information. We may market our own products or services including the products and services offered by PayU Entities and the product and services being offered by third parties using such communication.
The provision of such marketing activities shall be in accordance with applicable laws. For the marketing activities done by us, we execute contracts with our merchants, service providers, banks, PayU Entities or other third parties. You are entitled to opt out from receiving such marketing communication by either clicking on opt-out link (if available) or un-subscribe by clicking the link provided (if available) or by writing to us at privacy@payufin.com.
PayU Finance may also use Marketing and Communications Information in order to improve and customize the content of our ads, promotions and advertising that may be of interest to you.
8. International Data Transfers
Your Personal Information and Sensitive Personal Information may be processed either locally in India, or in any other country where our approved third-party service providers operate, worldwide, as permitted by applicable laws, provided that all payments-related data transaction related data i.e. data pertaining to our products and services provided to you will be be stored in India. Through this PayU Finance Privacy Statement, we hereby seek your consent to transfer your Personal Information (including Sensitive Personal Information) to our approved PayU Entities and third party service providers under designated contracts for the purposes defined under this PayU Finance Privacy Statement or as may be communicated to you from time to time. Should your Personal Information (including Sensitive Personal Information) move outside India, we will ensure to comply with the provisions of applicable laws and will also ensure that PayU Entities or our third party processors shall also comply with the same level of data protection as are applicable in India under applicable laws.
9. Data Retention
PayU Finance may store your Personal Information and Sensitive Personal Information for as long as the same is required o fulfil the purposes for such information was collected, including till you continue to have a loan or credit facility with us. The retention of Personal Information and Sensitive Personal Information by PayU Finance is determined by considering compliance with legal (contractual, statutory or regulatory requirements), accounting and compliance reporting requirements. For instance:
In accordance with the applicable KYC norms in India, the data relating to KYC is required to be retained for at least a period of 5 years. Accordingly, we will be retaining all documents and information relating to your KYC at least for a period of 5 years.
As per CICRA, the Credit Information is required to be retained for at least a period of 7 years. Accordingly, Credit Information relating to you will be stored for at least a period of 7 years and after the expiry of this period, shall be destroyed, erased or made anonymous.
Subject to the rights provided to you, the storage and purpose limitation restrictions provided within this Privacy Statement, and applicable laws, PayU Finance shall retain your Personal Information and Sensitive Personal Information for a maximum period of 10 years.
10. Individual Privacy Rights
We ensure that you are able to exercise your individual privacy rights under applicable laws and as per our internal policies. This means that PayU Finance seeks to provide reasonable assistance to cater to requests from individuals regarding the processing of their Personal Information and the right to amend their Personal Information and withdraw permission to the processing of their Sensitive Personal Information. In accordance with applicable laws and as per our policies, you can exercise the following rights:
Review, Correct or Rectify your Personal Information: You can ask us to have inaccurate Personal Information (including Sensitive Personal Information) we process about you, reviewed, fixed or changed in the time frame as specified in the applicable law.
Right to Access: You may request record of your Personal Information (including Sensitive Personal Information) being processed by us, upon the verification of your identity.