Privacy Policy

Welcome to IIFL Finance Limited (the 'Company' or 'IIFL'). The domain name www.iifl.com ('Website') is owned by IIFL, a company incorporated under the Companies Act, 1956 with its registered office at IIFL House, Sun Infotech Park, Road No 16V and Plot No. B 23, MIDC, Thane Industrial Area, Wagle Estate, Thane - 400 604.

IIFL group is India's leading integrated financial services group with diverse operating businesses viz. Non-Banking and Housing Finance, Wealth and Asset Management, Financial Advisory and Broking, Mutual Funds and Financial Product Distribution, Investment Banking, Institutional Equities, Realty Broking and Advisory Services. For more information, please visit www.iifl.com .

We, at IIFL, respect the privacy of everyone who visits IIFL's Website and other digital platforms including Our mobile applications (hereinafter together maybe referred as “IIFL Platforms”) and are committed to protecting their personal information. This Privacy Policy applies to IIFL, its subsidiaries and to all visitors on the Website and the users of IIFL’s mobile applications.

For the purpose of this Privacy Policy, the term "You", "Your", "User" shall mean any natural or legal person including online and offline clients visiting the Website or using our mobile applications and the term "We", "Us", "Our" shall mean IIFL and its Subsidiaries.

Use of the Website or Our mobile applications signifies your acknowledgement and free and unconditional consent to this Privacy Policy. If, however, You object to Your information being used, processed and transferred by Us in any manner, please do not share Your information on IIFL Platforms.

This Privacy Policy is not intended to and does not create any contractual or other legal rights in favour of any user or viewer of the IIFL Platforms or any other party.

Type of Personal Information Collected

We may, for the purpose of rendering services, collect personal information as described below:

  1. Information that may be provided by You directly, such as:
    1. Identification Information: Name, gender, residential/communication address, contact number, date of birth, marital status, email address or any other contact information.
    2. PAN, KYC, Signature and Photograph.
    3. Bank account or other payment instrument details.
    4. Any other detail which may be required by Us for providing such services.
  2. Information that We may collect from Your use of Our services, such as:
    1. Transaction Information: We read, collect and monitor only financial transactional SMS for description of the transactions and the corresponding amounts for credit risk assessment. Other SMS data is not accessed.
    2. Storage Information: We may facilitate user to download and display information such as scheme commission details which a user may refer to, or to upload relevant documents as per various processes during User account management or transaction order placement.
    3. Media Information: We facilitate Users to capture/upload relevant documents as may be required to be uploaded during user account management or transaction order placement.
    4. Device Information: We collect specific information about Your device when You access Our services, including Your storage, hardware model, operating system and version, unique device identifier, mobile network information, and information about the device's interaction with Our services.
    5. Contact Information: We read Name and Phone number information when You select the contact as a reference during the loan journey. We do not upload your contact list on Our servers.
  3. Log File Information which shall be stored automatically:

    If You visit/log into Our website just to browse, read pages or download information, certain information regarding Your visit is automatically stored on our systems. This information cannot and does not identify You personally.

    The kind of information that is gathered automatically includes without limitation:

    1. the type of browser You are using (e.g. Internet Explorer, Firefox, etc.);
    2. the type of Operating System You are using (e.g. Windows or Mac OS);
    3. the domain name of Your Internet Service Provider, the date and time of Your visit and the pages on Our website.

    We sometimes use this information to improve Our website(s) design, and content, primarily to provide You with a better browsing experience.

Mobile Application Permissions

In addition to the information collected through our Website, IIFL’s mobile application/s ("App") may request certain permissions to enhance Your user experience, ensure security, and comply with regulatory requirements. Below is a detailed explanation of the permissions We request and their purposes:

Permissions Requested by the IIFL mobile apps
  1. Internet & Network Access
    The App requires internet and network access to ensure a secure and stable connection for transactions, account updates, and other online services, enhancing in-app security and seamless functionality.
  2. Notifications
    Allows the App to send you important notifications about Your account, transactions, service updates, and promotional offers.
  3. Device Information
    Enables the App to access certain device identifiers for security purposes, fraud prevention, and to ensure a seamless user experience.
  4. Storage Access
    The App requires access to device storage (for Android SDK version 32 and below) to read and save files securely, enabling users to upload documents for KYC verification and download essential files like transaction receipts and statements.
  5. Location Services

    Location permissions are used for:

    • Providing location-based services like finding nearby branches
    • Fraud prevention and security measures
    • Regulatory compliance requirements
    • Customizing services based on your location
  6. Camera
    Allows You to take photos of documents for KYC verification, upload proof of identity/address, or capture other relevant information without leaving the App.
Purpose of Permissions

All permissions requested by the App are used solely for:

  1. Enhancing Your user experience
  2. Ensuring the security of Your account and transactions
  3. Meeting regulatory compliance requirements
  4. Providing analytics to improve Our services
  5. Implementing Android in-app security measures
Managing Permissions

You can manage these permissions through your device settings. While some permissions are essential for the App's core functionality, others are optional. Disabling certain permissions may limit some features of the App.

Purpose of Collection and Usage of Information

On our Website and mobile applications, we collect, retain, and use information about you only when we reasonably believe that it will help administer our business or provide products, services, and other opportunities to you. Such information is collected for specified business purposes, such as:

  1. to provide You with the services that You may require,
  2. to process Your financial and non-financial transaction requests,
  3. to undertake research and analytics for offering or improving Our services,
  4. to check and process Your submitted applications, if any, for availing any financial services,
  5. to share with You any updates/changes in Our services and their terms and conditions,
  6. to take up and investigate any complaints/claims/disputes,
  7. to respond to Your queries and feedback submitted by You,
  8. for verification of Your identity and other parameters,
  9. to fulfil the requirements of applicable laws/regulations and/or court orders/regulatory directives received by Us.
Disclosure of Information

The information provided by You may be disclosed to:

  1. RBI/SEBI/Stock Exchanges/Registrar and Transfer Agents/Collecting Banks/KYC Registration Agencies (KRAs) and other such agencies, solely for the purpose of processing Your transaction requests for serving You better,
  2. Another business entity to carry out any business activity or re-organization, amalgamation, restructuring of business or for any other reason whatsoever,
  3. Any judicial, statutory or regulatory body,
  4. Auditors,
  5. Law enforcement or any government bodies,
  6. Other third-party service providers.

We shall not publish the sensitive personal data or information or disclose it further, without Your explicit consent, for any purpose other than stated above.

The information collected shall be used for the purpose for which it has been collected.

Retention of Information

IIFL shall not retain or store such information for periods longer than is required except when the information may lawfully be used or is otherwise required under any other applicable law for the time being in force.

By agreeing to avail services offered by IIFL, You have agreed to the collection and use of your Sensitive Personal Data or Information, as well, by Us. You always have the right to refuse or withdraw Your consent to share/disseminate your Sensitive Personal Data or Information by contacting the customer care. However, in the event of Your refusal or withdrawal of personal data, You shall not be able to fully avail any services of IIFL.

Communications & Notifications

When You use the Website, Our mobile applications or send emails or other data, information or communication to us, You agree and understand that You are communicating with Us through electronic mode and You consent to receive communications from Us periodically. We may send You notifications via email or in writing as a hard copy notice, or through conspicuous posting of such notice on our Website, or through push notifications on your mobile device. You may choose to opt out of certain means of notification as You may deem fit.

Updating or Reviewing Your Information

You may, upon written request to us, review the personal data or information provided by You. You shall ensure that any personal information or sensitive personal data or information found to be inaccurate or deficient shall be corrected or amended as feasible.

Reasonable Security Practices for Protecting Your Information

We use commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of Your personal information. These include internal reviews of Our data collection, storage and processing practices and security measures, viz. appropriate encryption and physical security measures to guard against unauthorized access to systems where We store personal data.

All information gathered on the Website and Our mobile applications are securely stored within Our controlled database. The database is stored on secured servers; access to which is password-protected and is strictly limited.

To protect Your privacy and security, IIFL takes reasonable steps (such as requesting a unique password) to verify Your identity before granting You access to Your account. You are responsible for maintaining the secrecy of Your unique password and account information, and for controlling access to Your email communications from IIFL, at all times.

IIFL does not knowingly collect data for minors as these services are not intended for child under the age of 18. IIFL verifies the age at the time of signing up for Our services.

Although We use security measures to help protect Your personal information against unauthorized disclosure, misuse or alteration, as is the case with all computer networks linked to the internet, We cannot, however, ensure or guarantee the security of any information You transmit to Us and You do so at Your own risk and We are not liable for any damages, losses, or consequences resulting from such events. Once We receive Your transmission of information, We make commercially reasonable efforts to ensure the security of such information.

We shall not be liable for any direct, indirect, incidental, consequential, or punitive damages resulting from Your use of the IIFL Platforms, loss of data, security breaches, or unauthorized access to your personal information.

Links to Other Websites

Please note that this Privacy Policy does not extend to third party websites linked to Our Website and Our mobile applications. IIFL is not responsible for the content and the privacy practices of such linked websites. It is advisable to read each such linked website's privacy statement prior to sharing any information.

Changes to Our Privacy Policy

Please note that Our Privacy Policy may change from time to time. If We change our privacy policies and procedures, We will post the changes on the Website and Our mobile application to keep You updated. Changes to this Privacy Policy shall become effective for Website and our mobile application on the day they are posted on the Website and Our mobile application respectively. Please visit Our Website to keep yourself abreast of any changes to the Privacy Policy.

Grievance Redressal:

Any discrepancies and grievances related to the processing and use of Your information, including concerns about app permissions, can be raised to the grievance officer appointed by IIFL. For further details please visit Grievance Redressal Procedure.

Cookie Policy

IIFL uses cookies on the “www.iifl.com” website (the "Website"). By using the Website, You consent to the use of cookies.

Our Cookies Policy explains what cookies are, how We use cookies, how third parties We may partner with, may use cookies on the Website, Your choices regarding cookies and further information about cookies.

Contact Us:

In case if You may want to share Your concern, We welcome You to easily reach out to Us through multiple contact options displayed on https://www.iifl.com/contact-us