Privacy Policy
Document Version: 1.0
Effective Date: July 2026
Review Frequency: Annually or upon regulatory change
Company Name: Metrocity Finance Private Limited
CIN: (As registered with MCA)
Regulated By: Reserve Bank of India (RBI) — NBFC under RBI Act, 1934
Executive Summary — Plain-Language Overview
What this policy covers
Metrocity Finance Private Limited is a Non-Banking Financial Company (NBFC) regulated by the Reserve Bank of India. This Privacy Policy explains, in plain language, what personal information we collect from visitors to our website, why we collect it, how we use and protect it, with whom we may share it, and what choices you have regarding your asset financing data.
Key points at a glance
We collect only the minimum data necessary to provide specialized vehicle financing services and meet RBI regulatory requirements.
We do not sell, rent, or trade your personal data under any circumstances.
Data may be shared with the RBI, statutory credit bureaus, and authorized technology partners solely as required by law.
You have rights to access, correct, and request deletion of your data (subject to active asset loans) — contact our Grievance Officer to exercise them.
We use industry-standard security practices, secure database structures, and encryption to protect your information.
This website is not directed at children under 18 years of age.
1. Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
Company / We / Us / Our: Metrocity Finance Private Limited, an NBFC registered under the Companies Act and regulated by the Reserve Bank of India.
Personal Data: Any information that identifies or can identify a natural person, directly or indirectly, including name, identification number, contact details, vehicle registration numbers, financial profiles, or online identifiers.
Sensitive Personal Data / Information (SPDI): As defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — including passwords, financial bank statements, biometric logs, and official credit history records.
Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
User / You / Your: Any individual, vehicle asset buyer, or dealership representative who accesses or uses the Metrocity Finance website or submits an enquiry or loan application.
Cookies: Small text files stored on your device by your browser to enable website functionality, secure portal logins, and personalization.
KYC: Know Your Customer — the process of verifying the identity and address of vehicle loan borrowers as required by RBI Master Directions on KYC.
RBI: Reserve Bank of India — the regulatory authority governing NBFCs under the Reserve Bank of India Act, 1934.
2. Data We Collect
We apply the principle of data minimization — we collect only the information that is strictly necessary for the vehicle lending and financing purposes described in this Policy. The categories of data we may collect are set out below.
2.1 Information You Provide Directly
Identity Information: Full name, date of birth, gender, and operational driving license status.
Contact Information: Verified mobile number, official email address, residential address, and field verification profiles.
Vehicle & Asset Information: Vehicle registration copy (RC), dealership proforma invoice, vehicle valuation details, and chassis numbers.
Financial Information: Loan enquiry details, bank statements, income range, IT returns, and employment type.
KYC Documents: Government-issued identity proof (e.g., PAN) and address proof, as required under RBI KYC Master Directions. Core identification blocks are systematically handled using redacted placeholders or secure inputs as mandated by Indian financial data laws.
Correspondence: Messages, feedback, queries, or complaints you submit via our customer contact forms, email, or digital chat systems.
2.2 Information Collected Automatically
Device and Technical Data: IP address, browser type and version, operating system, and unique device identifiers used to log into our portals.
Usage Data: Pages visited, time spent on pages, vehicle finance calculator inputs, referring URLs, and click-stream data.
Cookie Data: As described in Section 10 (Cookies and Tracking Technologies).
2.3 Information From Third Parties
Credit bureaus and licensed credit information companies (e.g., CIBIL, Experian, CRIF Highmark) — for mandatory credit risk assessment, as permitted under applicable Indian law.
Regulatory databases and VAHAN/RTO verification portals — for confirming asset ownership, hypothecation records, and KYC compliance.
Note: We do not knowingly collect Sensitive Personal Data or Information (SPDI) beyond what is required for statutory KYC compliance, vehicle asset valuation, and loan underwriting under applicable RBI regulations. Any SPDI collected is handled with enhanced security measures.
3. How We Use Your Data
We use your personal data for the following purposes only:
Service Delivery: To process vehicle loan enquiries, evaluate asset values, perform credit eligibility assessments, and provide the two-wheeler, car, commercial vehicle, and tractor loan services offered through the website.
KYC & Regulatory Compliance: To verify customer identity and address as mandated by RBI Master Directions on KYC, Prevention of Money Laundering Act (PMLA), and other applicable statutory financial frameworks.
Credit Assessment: To evaluate your repayment capacity by accessing credit bureau reports with your explicit consent, as part of our formal loan appraisal process.
Communication: To respond to your queries, send application status updates, issue EMI payment reminders, and dispatch service-related notifications.
Security & Fraud Prevention: To detect, prevent, and investigate fraudulent vehicle listings, double-hypothecation attempts, unauthorized access to internal repositories, or malicious behavior.
Legal & Compliance Obligations: To comply with court orders, regulatory directions, audit requirements, and other legal obligations applicable to NBFCs in India.
Website & CRM Improvement: To analyze aggregated and anonymized usage data to improve the functionality, internal dashboard flows, and user experience of our website and secure portals.
Grievance Redressal: To address and resolve complaints in accordance with our Grievance Redressal Policy and RBI guidelines.
We do not use your personal data for automated decision-making that produces legal or similarly significant financial effects without human oversight.
4. Legal Bases for Processing
Our processing of your personal data is based on one or more of the following legal grounds:
Contractual Necessity: Processing required to enter into, execute, or perform a contract with you (e.g., verifying asset parameters or executing a Vehicle Loan Agreement).
Legal Obligation: Processing necessary to comply with RBI regulations, PMLA, Income Tax Act, and RTO hypothecation rules.
Consent: Where you have given explicit consent (e.g., allowing access to your bureau logs). You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, vehicle verification, portal security), provided such interests are not overridden by your fundamental privacy rights.
5. Data Retention
We retain personal data only for as long as necessary to fulfill the asset financing purposes for which it was collected, subject to any longer retention period required by law. The following retention periods apply:
#Category of DataRetention PeriodBasis1KYC Documents & Customer Vehicle Records8 years from the end of the active business/loan relationshipPMLA, RBI KYC Master Directions2Loan Application Data (Approved Assets)Duration of active loan + 8 years post-closure & NOC issuanceRBI Prudential Norms3Vehicle Loan Application Data (Rejected Files)3 years from the date of rejectionInternal asset policy & legal limitation4Website Usage / Analytics DataUp to 24 months (permanently anonymized after 6 months)Legitimate business interest5Cookie DataAs per cookie category (see Section 10)Consent / Legitimate interest6Grievance & Repossession Dispute Records5 years from final resolutionRBI Grievance Guidelines
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share your data only under the following limited circumstances:
6.1 Regulatory and Legal Authorities
We may disclose personal data to the Reserve Bank of India, Financial Intelligence Unit – India (FIU-IND), Income Tax authorities, Regional Transport Offices (RTOs), or any other government, law enforcement, or regulatory body when required by law, regulation, court order, or official request.
6.2 Credit Information Companies
We may share repayment data, delayed EMI logs, and account statuses with licensed credit bureaus (e.g., CIBIL, Experian, Equifax, CRIF High Mark) as permitted under the Credit Information Companies (Regulation) Act, 2005, for credit assessment and reporting purposes.
6.3 Service Providers and Technology Partners
We engage carefully vetted third-party service providers (e.g., cloud hosting infrastructure, secure payment gateways, automated KYC verification platforms, IT support, and vehicle evaluation field agents) who process data on our behalf and are strictly bound by contractual data protection obligations. They are not permitted to use your data for their own independent marketing purposes.
6.4 Business Transfers
In the event of a corporate merger, acquisition, asset restructuring, or joint venture expansion involving Metrocity Finance Private Limited, your personal data may be transferred to the successor entity, subject to the same privacy protections. You will be notified of any material change in data control.
6.5 With Your Consent
We may share data with other third parties (such as specialized vehicle insurance providers) where you have provided specific, informed consent for such sharing.
7. International Data Transfers
Metrocity Finance Private Limited processes and stores personal data strictly within the sovereign territory of India. If any analytical data is processed through secure global cloud infrastructure, we ensure that adequate safeguards are in place, including:
Contractual clauses that replicate the strict protections required under Indian data protection laws;
Transfers only to infrastructure nodes with equivalent or superior data security standards; and
Strict compliance with any applicable RBI data localization requirements for regulated financial and credit data.
As of the effective date of this Policy, all primary servers and operational data storage facilities are located within India.
8. Your Rights
You have the following rights in relation to your personal data. We will respond to all valid requests within 30 days (or sooner where required by law):
#Your RightWhat It MeansHow to Exercise1Right of AccessRequest a copy of personal and vehicle data we hold about youEmail our Grievance Officer2Right to CorrectionAsk us to correct inaccurate or incomplete asset/contact dataEmail / Written request to branch3Right to DeletionRequest erasure of data (Only applicable if all vehicle loans are closed)Email our Grievance Officer4Right to ObjectObject to processing for purposes beyond core vehicle credit managementWritten notice to Grievance Officer5Right to PortabilityReceive your loan statement and details in a structured, machine-readable formatDigital portal / Email request6Right to Withdraw ConsentWithdraw consent for optional processing without affecting prior data validityEmail / Written request
To exercise any of the above rights, please contact our Grievance Officer (see Section 13). We will verify your identity before processing your request to prevent fraud. Certain rights are limited by legal, ongoing recovery, or RBI regulatory retention obligations.
9. Security Measures
We are committed to protecting your personal data against unauthorized access, disclosure, alteration, or destruction. We implement robust technological measures in accordance with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and RBI cybersecurity guidelines:
Complete encryption of data in transit using industry-standard TLS/HTTPS protocols across all website forms.
Access controls limiting internal data visibility to authorized loan officers and field verifiers based on the principle of least privilege.
Regular security reviews, vulnerability assessments, and database monitoring.
Secure storage of vehicle registration documents, asset valuation reports, and customer KYC paperwork with restricted physical and digital access.
Employee training on financial data privacy, customer confidentiality, and data handling practices.
Structured incident response procedures to detect, contain, and address data anomalies promptly.
While we take all standard precautions, no method of transmission over the internet or electronic storage is 100% secure. In the event of a significant data anomaly, we will notify you and the relevant regulatory authorities as mandated by law.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to optimize functionality. Below is a summary of the types of cookies we use:
#Cookie TypePurposeDurationCan Be Disabled?1Strictly NecessaryRequired for core website security, vehicle calculator continuity, and portal authenticationSessionNo — Essential for the site to function safely2FunctionalRemember your loan preferences and streamline application entryUp to 12 monthsYes — Via browser settings3AnalyticsCollect anonymized data on how visitors interact with our vehicle loan pagesUp to 24 monthsYes — Via cookie preferences4Marketing / Third-PartyWe do not currently use invasive marketing or tracking cookies for external advertisingN/AN/A
You can manage your cookie preferences through your web browser settings. Disabling strictly necessary cookies may affect certain interactive financial functionalities on the portal.
11. Children’s Privacy
Our website and vehicle financing services are directed exclusively at adults who are 18 years of age or older and possess valid legal contractual capacity. We do not knowingly collect, use, or store personal data from individuals under the age of 18. If you believe that a minor has submitted personal data to us, please contact our Grievance Officer immediately, and we will take prompt steps to delete such data.
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our lending operations, vehicle financing portfolios, or updated RBI Master Directions. When we make material changes, we will:
Update the ‘Effective Date’ at the top of this Privacy Policy;
Post the revised Policy transparently on our website.
We encourage you to review this Policy periodically. Your continued use of our website following the publication of updates constitutes your formal acknowledgment of those changes.
13. Contact Us — Grievance Officer
If you have any questions, concerns, or complaints about this Privacy Policy, our data practices, or if you wish to exercise any of your data rights, please contact our designated Grievance Officer:
Designated Officer: Grievance Redressal Officer
Company Name: Metrocity Finance Private Limited
Registered & Corporate Office Address: B-3, B-4, Band Bees Dukhan, Frontier Colony, Raja Park, Jaipur – 302004, Rajasthan, India
Primary Verified Helpline: +91 91161 45447
Official Corporate Email: info@metrocityfin.org
Communications Subject Line: ‘Privacy Grievance — Metrocity Finance Desk’
We will acknowledge your complaint within 7 working days and endeavor to resolve it within 30 days. If you are not satisfied with the resolution provided by the Company, you may escalate the matter to the Reserve Bank of India’s online complaints portal ([https://cms.rbi.org.in](https://cms.rbi.org.in)) or the RBI Ombudsman for NBFCs. iss policy ko hindi aur english main complete dedo jaise terms and conditions ki banai hai , poori kuch katna mat word to word bana do pdf file
