Privacy Policy

Regulatory and policy documents are published in English, which is the version of record.

Status of this document

Published in draft. This Privacy Policy sets out the standards we hold ourselves to and follow in practice today. It has not yet been formally adopted by the Board of Directors, and this page will say so until it has. We publish it in draft rather than not at all, because a borrower is better served by knowing our position than by an empty page.

Not yet confirmed. The date on which this policy was last updated, and the retention period for enquiry information that does not lead to an application, are published here once they have been confirmed. Until then we do not print them.

Who we are

Heeraa Financial Services Limited is a non-banking financial company registered with the Reserve Bank of India, with its office at Heeraa Mansion, No. 20, General Muthiah Mudali Street, Sowcarpet, Chennai 600 079. In this policy “we” and “us” mean Heeraa Financial Services Limited.

What we collect

Enquiry details, the name, email address, area of interest, indicative amount and description you submit through the enquiry form or the email you send us.
Identity and address information, where you proceed towards a loan, the KYC documents required under law, such as PAN, Aadhaar, passport, voter identity card or driving licence, and proof of address.
Financial information, income proof, bank statements, tax returns, business financials and credit bureau records, as relevant to the facility you have applied for.
Security information, details of the asset offered as security, including valuation reports and title documents.
Website information, basic technical data such as browser type and pages visited, collected by our hosting provider for security and performance purposes.

Why we hold it

To respond to your enquiry.
To assess a loan application, verify identity, and comply with our KYC and anti-money-laundering obligations.
To administer and service a facility, including collection of dues.
To meet our obligations to the Reserve Bank of India, credit information companies, tax authorities and other regulators.
To protect our legal position, including in the recovery or enforcement of security.

Who we share it with

We do not sell personal information, and we do not share it for marketing by third parties. We share it only:

with credit information companies, as required under the Credit Information Companies (Regulation) Act, 2005;
with valuers, legal advisers, auditors and other professional advisers engaged on a specific matter;
with regulators, courts, tax authorities and law enforcement, where required by law;
with service providers who host our systems or process our data on our instructions, under obligations of confidentiality;
where you have given us your consent.

How long we keep it

Loan records, KYC documents and transaction records are retained for the periods prescribed by law and RBI directions, which are generally not less than eight years after the closure of the account.

Not yet confirmed. The source document leaves the retention period for enquiry information that does not lead to an application blank. It is published here once it has been confirmed. Until then we do not print one.

How we protect it

Physical documents are held at our office with restricted access. Pledged gold and silver are held in insured custody. Electronic records are held on access-controlled systems. Access is limited to staff who need it for their work.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will act in accordance with our legal obligations to notify the relevant authority and, where required, you.

Your rights

Subject to law and to our regulatory record-keeping obligations, you may ask us to:

confirm what personal information about you we hold, and give you access to it;
correct information that is inaccurate or incomplete;
erase information we are no longer required to keep;
withdraw a consent you have previously given, where our processing relies on that consent.

Write to pcn@heeraafinancials.com or to the office address above. We will respond within a reasonable period. If you are not satisfied with our response, our Grievance Redressal procedure applies.

This website

The site is hosted on Vercel. Everything it needs to render, including the typefaces, is served from this domain: it makes no third party requests when it loads, and it sets no cookie of any kind until you choose one.

Analytics. With your consent we use Google Analytics to count visits and see which pages are read. It sets cookies in your browser and sends Google your IP address, which we ask it to anonymise. You are asked once, on your first visit, and the site works identically if you decline. We do not use advertising cookies, we do not sell or share analytics data, and we do not attempt to identify an individual visitor from it.

The consent cookie. Whichever way you answer, we record that answer in a cookie named hfsl_consent on your own device, so that you are not asked again. It holds one word, granted or denied, expires after a year, and is never sent anywhere. You can change your answer at any time:

The enquiry form. What you type into the form on the contact page is sent to our own address at this domain and emailed to the office through Resend, our email provider, which processes it on our instructions and does not use it for anything else. The form also records the time it took to complete, purely to reject automated submissions. It is not stored in any database and it is not used for marketing.

Changes

We may update this policy. The current version is always the one published on this page, with the date of last update shown at the top.

Contact

Address: Heeraa Mansion, No. 20, General Muthiah Mudali Street, Sowcarpet, Chennai 600 079
Email: pcn@heeraafinancials.com