Privacy Policy

01 Information We Collect

Personal Information You Provide

• Full name, date of birth, and government-issued ID details (PAN, Aadhaar)
• Contact details — email address, phone number, residential and office address
• Financial information — income details, bank account information, credit history
• Employment details — employer name, designation, and income documents
• Insurance inquiry details and preferences

Information Collected Automatically

• IP address, browser type, and device information
• Pages visited, time spent, and clickstream data
• Cookies and similar tracking technologies
• Geolocation data (with your consent)

Information from Third Parties

• Credit bureaus (CIBIL, Experian, Equifax) for credit assessment
• KYC verification partners and government databases
• Banking partners for account verification

02 How We Use Your Information

We use the information we collect for the following purposes:

03 Sharing of Information

We do not sell your personal information. We may share it only in the following circumstances:

• Regulatory authorities: RBI, SEBI, IRDAI, income tax authorities, and courts as required by law.
• Credit bureaus: CIBIL, Experian, CRIF High Mark for credit reporting obligations.
• Service providers: Technology vendors, KYC partners, payment processors — bound by confidentiality agreements.
• Insurance partners: For policy underwriting, quote generation, and claim processing.
• Business transfers: In the event of a merger, acquisition, or sale of assets, with appropriate notice to you.
• With your consent: Any other sharing will only occur with your explicit consent.

04 Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website.

You can control cookies through your browser settings. Note that disabling essential cookies may impair functionality.

05 Data Security

We implement robust security measures to protect your data:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Regular security audits and penetration testing
• Role-based access control and multi-factor authentication
• ISO 27001-aligned information security management practices
• Dedicated security team and incident response procedures

06 Data Retention

We retain your personal data as long as necessary for the purposes outlined in this policy and as required by applicable laws:

• Insurance policy details: 10 years after policy expiry (regulatory guidelines)
• KYC documents: 5 years after account closure (PMLA mandate)
• Website analytics: 26 months
• Marketing data: Until you opt out or 3 years, whichever is earlier
• Contact form submissions: 2 years

07 Your Rights

Under India's Digital Personal Data Protection Act, 2023 and applicable RBI guidelines, you have the following rights:

• Right to Access: Request a copy of your personal data we hold.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal obligations).
• Right to Grievance Redressal: Raise complaints with our Data Protection Officer.
• Right to Withdraw Consent: Opt out of marketing communications at any time.
• Right to Nominate: Nominate another individual to exercise rights in the event of death or incapacity.

To exercise your rights, email: dpo@bhpfin.in or write to our registered office. We will respond within 30 days.

08 Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their personal information, please contact us immediately and we will delete such information.

09 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting a prominent notice on our website
• Sending an email to registered users
• Updating the "Last Updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the revised policy.

10 Contact Us