Your Privacy is our Priority.

1. Overview & Commitment

This Privacy Policy details how Bhardwaj Financial Services ("BFS", "we", "our", or "us") securely collects, utilizes, and shares your personal and financial information across our website, mobile applications, and digital platforms.

As a leading financial advisory in Agra, partnered with major institutions like PNB, HDFC, and IDBI, we adhere strictly to the guidelines set forth by the Reserve Bank of India (RBI) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

To accurately compute your borrowing power and process retail loans, we collect only the minimal data points necessary under RBI guidelines and the DPDP Act, 2023:

• Name & Identity Details: Full name as per official government records (Aadhaar / PAN card).
• Contact Number: Active mobile phone number for application updates, OTP authentication, and relationship advisor callbacks.
• Income Bracket: Monthly in-hand salary or verified business turnover to match eligible lending programs.
• CIBIL / Credit Score Range: Self-declared or bank-verified credit tier to identify the lowest interest rate partner banks.
• Technical & Consent Metadata: Client IP address, explicit consent timestamp, and browser details recorded strictly for regulatory compliance auditing.

3. How We Use Your Data

Your information is processed in highly secure, restricted environments strictly for business and regulatory purposes:

4. Information Sharing & Third Parties

BFS acts as a bridge between you and the financial ecosystem. We do not sell, rent, or trade your personal information. We only share data with authorized entities:

• Banking Partners: Authorized partner banks (PNB, IDBI, HDFC, Central Bank) solely for the purpose of credit assessment and loan disbursement.
• Government Authorities: The Income Tax Department, MSME Ministry, and regulatory bodies (RBI, SEBI) when mandated by law or for official filings on your behalf.
• Technology Providers: Vercel (Hosting), Google (Analytics & Workspace), and authorized SMS gateways. These vendors are bound by strict Non-Disclosure Agreements (NDAs).

5. Bank-Grade Security Measures

We deploy cutting-edge security architecture to thwart unauthorized access, alteration, disclosure, or destruction of your data:

• Transit Encryption: All data transmitted between your browser and our servers is secured via TLS 1.3 (HTTPS).
• Rest Encryption: Sensitive KYC documents and PAN data are encrypted at rest using AES-256 bit encryption.
• Access Control: Strict Role-Based Access Control (RBAC) ensures only authorized senior managers can view your financial data.

6. Cookies & Tracking Technologies

We utilize cookies and similar tracking technologies to elevate your browsing experience and analyze our website traffic.

When you engage with our Global Cookie Consent Banner, your explicit preference is stored locally on your device. We use Google Analytics and Meta Pixel to understand traffic patterns and optimize our digital marketing. If you choose to accept cookies, these platforms may collect anonymized data. You can clear your cookies via your browser settings at any time.

7. Data Retention Policy

We retain your personal and financial information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by Indian banking and tax laws (typically up to 8 years for tax records and loan agreements). Once the retention period expires, your data is securely purged or anonymized.

8. Your Privacy Rights & Right to Erasure

Under India's Digital Personal Data Protection (DPDP) Act, you possess clear rights regarding your personal records:

• Right to Access: Request a full copy of the personal and application data we hold about you.
• Right to Rectification: Request correction or updating of inaccurate or outdated contact information.
• Right to Erasure (Data Deletion): You have the absolute right to have your personal data permanently purged from our systems. Simply send an email to grievance@bfsfin.com with the subject line "Data Erasure Request". Our compliance desk will process your deletion request and confirm within 48 working hours (subject only to statutory loan retention laws).
• Right to Withdraw Consent: You can revoke marketing or communication permissions at any time.

9. Grievance & Compliance Desk

If you have concerns about your privacy or wish to exercise your rights, please reach out to our dedicated Grievance Officer immediately.