Privacy notice
NBFC Desk is operated by SintraCap Advisors LLP ("we", "us"), 3501-B World View, World Towers, Lower Parel, Mumbai. We are the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it. This notice explains what personal data we process, why, and how you can exercise your rights.
What we collect and why
| When | Personal data | Purpose |
|---|---|---|
| You request access on this website | Your name, your NBFC's name, work email, phone number (optional) and anything you write in the message | To respond to your request, check that you represent an NBFC, and set up your access |
| You have an account on the NBFC Desk dashboard | Name, work email, organisation, role, sign-in records (time, IP address, browser), and authenticator set-up data | To sign you in securely, control what you can see, protect the platform, and keep a record of changes |
| You use the dashboard | Messages you send in deal threads, and actions you take (for example, indicating interest) | To run the funding process you are part of and keep an audit trail |
| A borrowing NBFC shares diligence documents | Documents may include personal data of the NBFC's directors, promoters, signatories or customers | To screen the NBFC and share its diligence only with lenders on that NBFC's raises, under our agreement with that NBFC |
We process personal data with your consent, or where the DPDP Act otherwise permits it, such as data you give us voluntarily for a stated purpose. We do not sell personal data, use it for advertising, or use tracking cookies. This website sets no cookies; the dashboard uses only the cookies needed to keep you signed in.
Who we share it with
- Participants on the same deal, only as needed for that deal. Lenders never see other lenders' details.
- Service providers who host the platform and send email for us, acting on our instructions under contract.
- Authorities, where the law requires us to.
We store personal data in India.
How long we keep it
We keep personal data only as long as the purpose needs it, then erase it, unless a law requires us to keep it longer. Access requests are erased once dealt with or when you withdraw consent. Account records and logs are kept for at least one year, as the DPDP rules require, and longer where other laws that apply to financial transactions require it. Where the rules require it, we will tell you before erasing your data.
Your rights
- Withdraw consent at any time, as easily as you gave it, by writing to the contact below. Withdrawal doesn't affect processing done before it. Without the data, we may be unable to give you access.
- Get a summary of the personal data we process about you and who we have shared it with.
- Correct, complete, update or erase your personal data.
- Raise a grievance with us, and we will respond within 90 days.
- Nominate someone to exercise your rights if you die or become unable to.
To exercise any right, contact: Vinod Vyas, SintraCap Advisors LLP, 3501-B World View, World Towers, Lower Parel, Mumbai. Email: grievance@nbfcdesk.com. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
How we protect it
Accounts are by invitation and every sign-in needs an emailed code and an authenticator app. Data is encrypted in transit, access is limited by role and by deal, and changes are recorded in an audit log. If a personal data breach occurs, we will inform you and the Data Protection Board as the law requires.
Children
NBFC Desk is for businesses and is not meant for anyone under 18. We do not knowingly collect children's personal data.
Changes to this notice
If we change this notice we will update the version above and, where the change affects how we use data you gave us, ask for your consent again.
Contact
Vinod Vyas, SintraCap Advisors LLP, 3501-B World View, World Towers, Lower Parel, Mumbai. Email: grievance@nbfcdesk.com
Already have an account? Sign in.