Privacy Policy

1. Introduction & Scope

NextWise Finserv ("NextWise Finserv", "we", "us", or "our") is a Direct Selling Agent (DSA) that facilitates loan and financial product referrals between individuals/businesses ("you", "User", or "Data Principal") and partner banks, non-banking financial companies (NBFCs), and insurance providers. We do not ourselves sanction, disburse, or service loans.

This Privacy Policy explains what personal data we collect through our website (the "Website"), WhatsApp, telephone, and in-person interactions, why we collect it, how it is used, with whom it may be shared, and the rights available to you under Indian law. By submitting your information through our Website or otherwise engaging with us, you consent to the practices described in this Policy.

2. Key Definitions

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under Section 2(t) of the DPDP Act.
• "Data Fiduciary" means NextWise Finserv, which determines the purpose and means of processing your Personal Data.
• "Data Principal" means the individual to whom the Personal Data relates — i.e., you.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, sharing, or erasure.
• "Consent Manager" means a registered entity (where applicable) through which you may manage, review, or withdraw your consent, as contemplated under the DPDP Rules, 2025.

3. Information We Collect

We collect the following categories of Personal Data when you use our Website's application forms, contact us, or apply for a referral:

We do not knowingly collect more Personal Data than is necessary for the purposes described in this Policy ("data minimisation").

4. Legal Basis & Consent

Under the DPDP Act, we process your Personal Data on the basis of your free, specific, informed, unconditional and unambiguous consent, given through a clear affirmative action — such as submitting an application form on our Website. Where required, we process data for "certain legitimate uses" recognised under Section 7 of the DPDP Act (for example, where you have voluntarily provided your data for a loan enquiry and its use is reasonably expected).

You may withdraw your consent at any time by contacting our Grievance Officer (Section 14 below), with effect from the date of withdrawal, without affecting the lawfulness of processing carried out before such withdrawal.

5. How We Use Your Information

We use the Personal Data we collect to:

• Assess your eligibility and match you with suitable banks, NBFCs, or insurance partners for the product you have enquired about;
• Contact you via phone, WhatsApp, SMS, or email regarding your application and its status;
• Prepare and forward your application, along with supporting information, to relevant lending/insurance partners with your consent;
• Improve our Website, services, and customer experience;
• Comply with applicable legal, regulatory, and RBI DSA-reporting obligations; and
• Detect, prevent, and address fraud, security incidents, or technical issues.

We do not use your Personal Data for any purpose incompatible with the purpose for which it was collected, except with your fresh consent or as permitted by law.

6. Sharing & Disclosure of Information

As a DSA, sharing your information with lending partners is central to the service you have requested. We may share your Personal Data with:

• Partner Banks, NBFCs, and Insurance Companies — to process your loan/insurance application and enable them to contact you directly regarding sanction, disbursal, and servicing;
• Service Providers — such as our email/communication service providers, strictly to the extent necessary to operate our Website and respond to your enquiry;
• Regulators & Authorities — including the Reserve Bank of India, the Data Protection Board of India, or courts of law, where required under applicable law, regulation, or a valid legal process; and
• Successors — in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.

We do not sell your Personal Data to third parties for their independent marketing purposes.

7. Data Storage & Security

We implement reasonable security practices and procedures, as contemplated under Section 43A of the IT Act, 2000 and the IT (Reasonable Security Practices) Rules, 2011, including access controls, encrypted transmission (HTTPS/TLS) for form submissions, and restricted internal access to Personal Data on a need-to-know basis. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, or as required to comply with our legal, accounting, RBI/DSA-agreement, or regulatory obligations — typically not exceeding the period necessary for the loan enquiry to be processed and closed, plus any statutory record-retention period applicable to us or our lending partners. Upon expiry of the applicable retention period, we will securely delete or anonymise your Personal Data, unless a longer retention is legally mandated.

9. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the Personal Data we hold about you and the processing activities undertaken;
• Correction & Updating of inaccurate or incomplete Personal Data;
• Erasure of your Personal Data that is no longer necessary for the purpose it was collected, unless retention is required by law;
• Grievance Redressal — to have any complaint regarding processing of your Personal Data addressed within a reasonable time;
• Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity; and
• Withdraw Consent at any time, as described in Section 4 above.

To exercise any of these rights, please contact our Grievance Officer using the details in Section 14. We will respond within a reasonable timeframe as prescribed under the DPDP Rules.

10. Cookies & Tracking Technologies

Our Website may use essential cookies and third-party analytics tools (such as Google Analytics, where enabled) to understand website usage and improve user experience. These cookies collect non-identifying technical data such as browser type, pages visited, and time spent on the Website. You can disable cookies through your browser settings; doing so may affect certain Website functionality.

11. Third-Party Links

Our Website may contain links to third-party websites, including those of our partner banks and NBFCs. We are not responsible for the privacy practices or content of such third-party websites. We encourage you to review the privacy policy of any third-party website you visit.

12. Children's Privacy

Our services are intended only for individuals who are at least 18 years of age and legally competent to enter into a contract under the Indian Contract Act, 1872. We do not knowingly collect Personal Data from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such data promptly.

13. Data Breach Notification

In the event of a personal data breach that is likely to affect you, we will notify you and the Data Protection Board of India in the manner and within the timelines prescribed under the DPDP Rules, 2025, including a description of the nature and likely consequences of the breach and the measures taken to mitigate it.

14. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, 2000, we have designated the following person as our Grievance Officer / Data Protection point of contact:

If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India, constituted under the DPDP Act, once the relevant grievance-redressal provisions are in force.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last Updated" date at the top of this page indicates when this Policy was last revised. Material changes will be notified through a prominent notice on our Website.

16. Governing Law & Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts at Ahmedabad, Gujarat.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data-handling practices, please reach out to us:

• Email: nextwise.finserv@gmail.com
• Phone: +91 98795 22949
• Address: B-501, Ratnakar Nine Square, Opp ITC Narmada, Mansi Cross Road, Ahmedabad, Gujarat & Office-1105, 11th Floor, Shivalik Satyamev, Nr. Ambli-Bopal Junction, Ambli, Ahmedabad, Gujarat