Privacy Policy

1. Introduction

Aarthsetu Technologies Private Limited ("Company", "we", "us", or "our"), operating the Trustiva Setu platform, is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.trustivasetu.com and use our loan facilitation services.

This Policy is compliant with the Digital Personal Data Protection (DPDP) Act, 2023 of India and applicable RBI guidelines on data privacy.

2. Information We Collect

We collect information you provide directly to us, including:

• Identity Information: Full name, date of birth, gender
• Contact Information: Email address, phone number, city/region
• Financial Information: Loan amount requested, treatment type, approximate budget
• Employment/Business Information: Clinic name, specialty, designation (for clinic partners)
• Documents: Resume/CV (for job applications only)
• Usage Data: IP address, browser type, pages visited, time spent on pages
• Device Data: Device type, operating system, unique device identifiers

[ACTION REQUIRED: Verify this list reflects actual data collected by your platform.]

3. How We Use Your Information

We use the information collected to:

• Facilitate loan applications and connect you with partner lenders
• Process clinic and hospital partnership enquiries
• Send you communications about your enquiry or application
• Improve our platform, products, and services
• Comply with legal and regulatory obligations
• Prevent fraud and ensure security
• Analyse usage patterns to enhance user experience

4. Sharing of Information

We may share your information with the following categories of third parties:

• Partner Lenders (Banks & NBFCs): To facilitate loan applications. These entities are bound by their own privacy policies and applicable RBI guidelines.
• Partner Clinics/Hospitals: To coordinate patient financing at the point of care.
• Service Providers: Technology partners (including Supabase for data storage, email service providers) who process data on our behalf under confidentiality agreements.
• Regulatory/Legal Authorities: When required by law, court order, or regulatory directive.

We do not sell your personal data to third parties for marketing purposes.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Loan application data is retained for [ACTION REQUIRED: specify retention period, e.g., 7 years per RBI guidelines]. You may request deletion of your data subject to legal and regulatory retention obligations.

6. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Obtain a summary of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Grievance Redressal: File a complaint with our Data Protection Officer
• Nomination: Nominate another individual to exercise these rights in the event of death or incapacity

To exercise your rights, contact us at: legal@trustivasetu.com

Data Protection Officer: [ACTION REQUIRED: Appoint a DPO and add their name/contact]

7. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience. You can control cookie preferences through our cookie consent banner. Declining cookies may affect some features of the website. For more information, see our Cookie Policy [ACTION REQUIRED: Create separate Cookie Policy if required].

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately at legal@trustivasetu.com.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of our platform constitutes acceptance of the updated Policy.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and applicable RBI guidelines. Any disputes shall be subject to the exclusive jurisdiction of courts in [ACTION REQUIRED: Specify jurisdiction, e.g., Moradabad / Delhi].

13. Contact Us