This Privacy Policy (“Policy”) describes the manner in which Gromor Finance Private Limited, a company incorporated under the Companies Act, 2013 (“Company”, “Gromor”, “we”, “our” or “us”), collects, receives, stores, processes, uses and discloses information obtained from users (“User” or “you”).
This Policy applies to the Company’s website ( www.gromor.in ) and any other electronic or physical interactions through which personal information may be collected by the Company.
This Policy is published in accordance with the provisions of:
By accessing the Company’s website or interacting with the Company through electronic or physical channels, the User consents to the collection, processing and use of information in accordance with this Policy.
1.1 Personal Information means any information relating to a natural person which, either directly or indirectly, in combination with other information available with the Company, is capable of identifying such person.
1.2 Sensitive Personal Data or Information (SPDI) shall have the meaning assigned under the SPDI Rules and includes financial information, passwords and other information specified under applicable law.
1.3 Processing means any operation performed on personal information including collection, storage, use, disclosure, transfer, or deletion.
1.4 User means any person who accesses the Company’s website or otherwise interacts with the Company through digital or physical channels.
2.1 This Policy applies to:
2.2 This Policy governs the collection, use, storage and disclosure of personal information obtained through the Company’s website, electronic communication channels and physical documentation.
The Company may collect the following categories of information.
The Company may collect personal information including but not limited to:
For the purpose of evaluating eligibility for financial products, the Company may collect financial information including:
In compliance with applicable regulatory requirements, the Company may collect identity verification information including:
When users access the Company’s website, certain technical information may automatically be collected including:
Such information is used for system administration, security monitoring and website performance analysis.
4.1 The Company may use cookies and similar technologies to enhance user experience and improve website performance.
4.2 Cookies may be used for the following purposes:
4.3 Users may disable cookies through browser settings; however certain website features may not function properly if cookies are disabled.
The Company may collect and process personal information for the following purposes:
The Company processes personal information only where there is a valid legal basis to do so.
Such legal bases may include:
7.1 The Company collects only such information as is reasonably necessary for the purposes described in this Policy.
7.2 The Company endeavours to ensure that personal information collected is adequate, relevant and not excessive in relation to the purposes for which it is processed.
8.1 The Company may share personal information with third parties where necessary for providing services or complying with legal obligations.
8.2 Such third parties may include:
8.3 The Company ensures that third parties receiving personal information are bound by confidentiality and data protection obligations.
8.4 The Company does not sell personal information to third parties for marketing purposes.
Personal information may be stored or processed on servers located outside India where such transfer is necessary for providing services.
The Company shall ensure that appropriate contractual safeguards and security measures are implemented for such transfers.
Personal information collected by the Company may be stored on servers located within India or in jurisdictions where the Company’s service providers maintain infrastructure.
The Company ensures that adequate data protection measures are implemented for storage and processing of such information.
The Company retains personal information only for the duration necessary for the purposes for which it was collected or as required under applicable laws.
Personal information may be retained for regulatory compliance, audit requirements, dispute resolution and fraud prevention.
Information collected solely for credit assessment or underwriting shall be retained only for the duration necessary to complete such assessment.
Upon completion of the assessment process, such information shall be securely deleted, anonymized or archived, unless retention is required under applicable law or regulatory obligations.
The Company implements reasonable security practices and procedures in accordance with the SPDI Rules.
Security safeguards include:
The Company endeavours to align its information security framework with recognized standards such as ISO/IEC 27001 or equivalent frameworks.
The Company complies with applicable CERT-In cyber security directions.
In the event of a cyber security incident, the Company may:
Users may:
Requests may be submitted through the grievance mechanism provided in this Policy.
Users undertake that the information provided to the Company is true, accurate and complete.
The Company shall not be responsible for any consequences arising from inaccurate or incomplete information provided by the User.
The Company may disclose personal information without prior consent where such disclosure is required:
Based on internal records and available information, the Company represents that no material data breach involving personal information has been reported to date.
The Company maintains mechanisms for detecting and responding to potential cyber security incidents.
The Company’s website may contain links to third-party websites.
The Company shall not be responsible for the privacy practices of such third-party platforms.
If the Company introduces additional digital platforms, including mobile applications or other electronic interfaces in the future, such platforms shall also be governed by this Policy unless otherwise specified.
The Company reserves the right to modify this Policy from time to time.
Any revised version of the Policy shall be published on the Company’s website and shall become effective upon publication unless otherwise stated.
By accessing the Company’s website or interacting with the Company through digital channels, the User acknowledges and consents to the collection, processing and disclosure of information in accordance with this Policy.
While the Company implements reasonable security practices and procedures to protect personal information, the User acknowledges that transmission of information over the internet cannot be guaranteed to be completely secure.
The Company shall not be liable for unauthorized disclosure of personal information caused by circumstances beyond its reasonable control.
In accordance with applicable laws, the Company has appointed a Grievance Officer.
Name: Rashi Kataria
Email: rashi.kataria@gromor.in
Address:
Gromor Finance Private Limited
B-202, 2nd Floor
SBI Pallavi CHSL
Veera Desai Road
Andheri (West)
Mumbai - 400058
The Grievance Officer may be contacted between 10:00 AM and 6:00 PM on working days.