Privacy policy

Who this policy covers

This Privacy Policy explains how Sunhil Capital Private Limited ("Sunhil Capital," "we," "us," "our"), a Sunhil Group company, collects, uses, shares and protects your personal data when you visit our website, use our enquiry form, chat with us on WhatsApp, call us, or otherwise get in touch about a loan or financial service.

By using our website or sharing your details with us, you're agreeing to this policy. If you don't agree, please don't share your personal data with us: you can still browse the general pages of the website.

What we are, in plain terms

Sunhil Capital helps individuals, businesses, corporates and industries get loans and financial services from public sector banks, private sector banks and financial institutions. We are not a lender. We collect your details to understand what you need, prepare your file, and take it to approved banks: the banks decide on approval, interest rate and terms. Under the DPDP Act, we act as a "Data Fiduciary" for the personal data you share with us: the one responsible for deciding why and how it's processed.

What personal data we collect

Only what we genuinely need to help you, including:

• Contact details: your name, mobile number, email (if you give it), and city.
• Enquiry details: the type of loan or service you're asking about and the approximate amount.
• Documents and financial information: identity proof, address proof, income proof, bank statements, property or business documents, and similar: only once you're taken further in the process, and only what the relevant bank needs. (See each loan page's "documents usually needed" list for examples; the bank decides the final requirement.)
• Communication records: messages, calls or WhatsApp chats with our advisors, kept so we can follow up accurately.
• Website usage data: basic technical information such as browser type and pages visited, used to keep the site working well. We use only the cookies needed for the site to work and basic analytics, and we do not use them to identify you.

We do not knowingly collect more than this, and we never ask for your passwords, PINs, OTPs or card details on our website.

Why we collect it

We only use your personal data for clearly stated purposes, consistent with the DPDP Act's rule that data must be collected for a specific, lawful purpose and used only for that purpose:

• To understand your loan or financial-service requirement.
• To prepare and check your application file.
• To submit your file to approved banks and follow up with them on your behalf.
• To contact you about your enquiry, by phone, SMS, email or WhatsApp.
• To meet legal, regulatory or audit requirements that apply to us.
• To improve our website and services.

We do not sell your personal data, and we don't use it for unrelated marketing without asking you first.

Your consent

Before we collect or use your personal data, we ask for your clear, specific and informed consent: for example, through an unticked checkbox on our enquiry form that you choose to tick yourself. We tell you what we're collecting and why at the point we ask for it.

You can withdraw your consent at any time, as easily as you gave it, by contacting us using the details in §11 below. If you withdraw consent, we'll stop using your data for the purposes you've withdrawn consent for, though we may need to keep some records where the law requires it (for example, for audit or fraud-prevention purposes).

Who we share your data with

To do the job you've asked us to do, we share relevant parts of your data with:

• Approved banks and financial institutions you're applying to, so they can assess your application.
• Service providers who work on our behalf (such as document verification or communication tools), under confidentiality obligations and only for the purpose we've engaged them for.
• Regulators or authorities, where we're legally required to.

We do not share your data with anyone else for their own marketing purposes.

We do not plan to transfer your personal data outside India. If that changes, we will update this policy and describe the safeguards used.

How long we keep your data

We keep your personal data only for as long as it's needed for the purpose we collected it for, or as long as the law requires us to (for example, regulatory record-keeping). When it is no longer needed, we delete it or make it anonymous.

How we protect your data

We use reasonable technical and organisational measures to protect your personal data from unauthorised access, loss or misuse. These include encrypted connections, access controls and limiting access to staff who need it. No system is completely secure, and we take any suspected data breach seriously, informing the relevant authority and affected individuals as required by law if one occurs.

Your rights

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we're using it.
• Correct or update inaccurate or incomplete data.
• Erase your personal data once it's no longer needed for the purpose it was collected for, subject to any legal requirement to retain it.
• Withdraw consent, as described in §5.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance with us first, and with the Data Protection Board of India if you're not satisfied with our response.

To use any of these rights, contact us using the details in §11.

Children's data

Our services are meant for adults who can legally enter into a loan agreement. We don't knowingly collect personal data from children. If you believe a child's data has reached us, please contact us so we can act on it.

How to reach us

For any question about this policy, to exercise your rights, or to raise a concern about how your data is handled:

Grievance Officer / Data Protection contact: Email [email protected] or call 0120-4610860 and mention "Grievance". We acknowledge every complaint and keep you updated until it is resolved.

Registered office: Sunhil Group, B-8 & 9, 2nd Floor, Sector-1, Noida, Uttar Pradesh 201301 Phone: 0120-4610860 · Email: [email protected]

Changes to this policy

We may update this policy from time to time, for example when our services or the law changes. We'll update the "Last updated" date above when we do, and we encourage you to check back periodically.