Legal

Privacy Policy

Last updated: February 26, 2026

LoansCarton ("we", "our", or "us") is a registered Direct Sales Associate (DSA) operating at www.loanscarton.com. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our loan facilitation services.

By using our website or submitting a loan application, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

We collect information you provide directly to us, including:

• Identity Information: Full name, date of birth, PAN card number, Aadhaar number
• Contact Information: Mobile number, email address, residential and office address
• Financial Information: Monthly income, employment type, bank statements, credit score, existing loans
• Vehicle Information: Vehicle registration number, make, model, year, valuation
• Technical Data: IP address, browser type, device information, pages visited, time spent
• Communications: Messages sent through our AI chat, support emails, WhatsApp interactions

2. How We Use Your Information

We use the information we collect to:

• Process and facilitate your loan application with partner banks and NBFCs
• Match you with suitable lenders using our AI-powered eligibility engine
• Communicate with you regarding your application status via SMS, email, and WhatsApp
• Verify your identity and prevent fraud
• Improve our platform, services, and user experience
• Send relevant offers, promotions, and financial tips (you may opt out at any time)
• Comply with applicable laws, regulations, and RBI guidelines
• Generate anonymized analytics and reports for internal business purposes

3. Sharing of Your Information

We share your information only in the following circumstances:

• Partner Banks & NBFCs: We share your loan application data with our registered lending partners (e.g., HDFC Bank, ICICI Bank, Bajaj Finance, Shriram Finance) solely for loan processing purposes.
• Credit Bureaus: We may access your credit report from CIBIL/Experian with your consent to determine loan eligibility.
• Technology Providers: We use third-party AI and cloud services (including Google Gemini and OpenAI) to power our chatbot. Only anonymized, non-identifying conversation data is processed.
• Legal Requirements: We may disclose information if required by law, court order, or regulatory authority.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for all data in transit, encrypted storage for sensitive fields, role-based access controls, and regular security audits. Our infrastructure is ISO 27001 aligned and hosted on secured VPS servers with firewall protection and intrusion detection. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These include:

• Essential Cookies: Required for core functionality such as login sessions
• Analytics Cookies: Google Analytics 4 (GA4) to understand how visitors use our site
• Marketing Cookies: Facebook Pixel for ad measurement and remarketing

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Loan application data is typically retained for 7 years as required under Indian financial regulations. You may request deletion of your data by contacting us, subject to applicable legal retention requirements.

7. Your Rights

Under applicable Indian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal requirements)
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at admin@loanscarton.com.

8. Third-Party Links

Our website may contain links to third-party websites (bank portals, insurance providers, etc.). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of our services after any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: