Privacy & Data Security Policy

1. Introduction & Commitment

Friendly Loans For You (“we”, “our”, or “the Platform”), operating via friendlyloansforyou.com, operates as a digital Lending Service Provider (LSP) and peer-to-peer credit facilitation platform connecting individual borrowers with verified peer lenders and institutional credit partners.

We are committed to upholding the highest standards of data privacy and information security. This Policy is structured in strict accordance with the Digital Personal Data Protection Act (DPDPA), 2023, the Reserve Bank of India (RBI) Guidelines on Digital Lending, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

We only collect data that is strictly necessary for identity verification, credit underwriting, KYC compliance, and loan lifecycle processing:

3. Restricted Access & Data Restrictions (RBI DLG)

4. How We Use Your Data

• Underwriting & Sanctions: Calculating creditworthiness, generating in-principle approval limits, and preparing the Key Fact Statement (KFS).
• Disbursement & Repayment: Facilitating IMPS bank payouts through designated escrow bank accounts and scheduling automated monthly eNACH debits.
• Direct Operational Contact: Permitting our dedicated processing desk (under Officer Suhas V) to assist with status checks and documentation queries.
• Regulatory Reporting: Fulfilling statutory obligations with credit information companies (CICs) and law enforcement authorities when legally required.

5. Data Security Standards & Storage

We employ enterprise-grade administrative, technical, and physical safeguards:

• Encryption in Transit: 256-bit SSL/TLS encryption across all endpoints (https://www.friendlyloansforyou.com).
• Encryption at Rest: Database records, authentication hashes, and personal identifiers are stored using AES-256 standard encryption on secured MariaDB VPS storage.
• Data Localization: All user information and financial data are hosted on servers located within India in compliance with RBI norms.
• Zero Credential Storage: We never capture or store your net banking passwords, UPI PINs, or debit card CVVs.

6. Information Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third-party marketing companies. Data is shared strictly on a need-to-know basis with:

• Regulated NBFC-P2P lending partners and independent escrow trustees (e.g., ICICI Bank Dual Escrow).
• NPCI-certified payment rails and Account Aggregators for mandate registration and bank statements.
• Authorized CICs (TransUnion CIBIL, Experian, Equifax, CRIF High Mark) as mandated by Indian financial regulations.

7. Your Rights under DPDPA 2023

As a data principal, you hold the following statutory rights: