Background

KFin Technologies Private Limited (formerly known as Karvy Fintech Private Limited) (‘Company / KFintech’) is a Central Recordkeeping Agency (CRA) for National Pension System (NPS). KFintech is appointed as CRA by the NPS Regulator, Pension Fund Regulatory and Development Authority (PFRDA).

KFintech is an ISO 27001: 2013 Certified Company. It has laid down necessary and appropriate process and procedures for monitoring and reviewing the activities carried out on this and/or with respect to this application.

Pursuant to the said guidelines, the Company has formulated this Privacy Policy (‘Policy’) which will help you understand the manner in which the Company collects uses and protects your personal information.

Applicability

This Privacy Policy (‘Policy’) is limited in its applicability to this application namely enps.kfintech.com, nps.kfintech.com, cra.kfintech.com & ‘NPS by KFintech CRA’ Mobile App and shall not be construed as agreement between you and the Company.

We respect your right to privacy under our law. We are committed to protecting your privacy. We therefore work towards offering you an effective, safe and secure online experience in compliance with Information Technology (Reasonable Security Practices and Procedure and Sensitive Personal Data or Information) Rules, 2011 and The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.

Consent for Use of Application

By accessing to the application/website, you acknowledge and consent to the collection, processing, of the data for the limited purposes as described in this Policy.

Data Collection and use of Information

In order to avail Services offered by this application, it may be necessary for you to provide us information that may be personally identifiable to you. For the purpose of clarity, “Personal Information” as used herein shall mean any data of the user, by which he/ she/ it, as a person can be identified, including without limitation, name, gender, mobile number, business name, address, email address, date of birth, date of incorporation, any identity proof number, phone number, IP (Internet Protocol) address, browser type, ISP (Internet Service Provider) details et cetera to which we have or are likely to have access by virtue of your consensual submission.

We receive and maintain this information on your behalf in order to provide our Services, and we do not use such information for any other purpose except as set out herein, or as directed by you, or as otherwise required or permitted by applicable law.

The Personal Information that you share with us would be entitled to privacy and kept strictly confidential. The Personal Information along with all supporting documents submitted by you shall be used for the limited purpose:

a) of providing our Services effectively;
b) monitor aggregated metrics such as total number of visitors and traffic;
c) to contact you and respond to your questions or requests;
d) to deliver email notifications, One-Time Passwords, confirmations, technical notices, updates, security alerts, and support and administrative messages that you may request;
e) archival or backup purposes;
f) to alert you about updated information and such other new or updated services that may be offered by us;
g) if you contact us through the “Contact Us” function on the application, or by any other means, we will process your Personal Data to the extent it is necessary for the purpose of its legitimate interests to fulfil your request and communicate with you;
h) to cooperate with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws to the extent required.

We assure you that it will do our best to ensure the privacy and security of your Personal Information. However, we would not be responsible in any manner whatsoever for any violation or misuse of your Personal Information by unauthorised persons despite having taken all measures prescribed under law.

By accessing and using this application, you accept, (a) the policies and practices described in this Policy and all other policies made available on the Application/ Website from time to time, and (b) acknowledge and consent to the collection, use and disclosure of personally identifiable information and for the limited purposes as described in this Policy.

Data Sharing & Data Access

We shall not use your Personal Information for any commercial purposes and transfer it to, (a) any third parties unless it is required to do so in furtherance to providing the Services herein which would be only on ‘need to know basis’ by executing Non-Disclosure Agreements (‘NDAs’) before sharing any data and/or, (b) government agency unless we are required or entitled to do so pursuant to any legal requirement.

Every person who has or is provided with an access to such data, undergoes periodical training with regards data handling, data protection and is also informed and educated about all the consequences he/she may face in case of data violation.

Public Data

Data that is available in public domain shall not be govern by this Policy. The Company shall not be responsible in any manner of whatsoever nature for any violation or misuse of such Pubic Data.

Data Storage

The Company shall store and maintain your Personal Information as long as it is required for processing your request and as permitted by law in this regard. In the event, we are not in a position to process the Personal Information submitted by you in furtherance to the Services, the same shall be deleted immediately, unless is required by us to do so under law and/or as may be required for any internal or external audit purposes.

The Company is committed to comply with applicable laws to ensure all measures for storing that data are maintained are taken thereby making the data so received ‘Safe and Secure’ as prescribed by law.

Data Purging

The Company has necessary mechanism and tools in place to ensure all the data that are collected and stored are deleted as soon as the purpose as described in this Policy is completed, unless it is mandated by law to be maintained by the Company.

Any data destroyed shall be disposed of in a manner that protects the privacy of the Personal Information received by us from the user in an appropriate manner as per the industry standard practices and norms.

Data Security

The Company is committed to protecting the security of any Personal Information and uses reasonable efforts including a variety of security technologies and procedures to help protect such Personal Information from any unauthorized access, loss, use or disclosure.

The Company shall endeavour to take reasonable measures to prevent unauthorized access to and improper use of your Personal Information submitted to us by you. It shall adopt all the suitable measures to diagnose any problems with its server and to administer the application including by blocking certain addresses that it feels are inappropriately using its application. In the event of any breach or attempted breach by any third party, in compliance with the applicable information technology laws, it will try to rectify the problems as soon as possible.

The Company are committed to providing you safe and secure environment for ensuring that the Personal Information is processed in line with the reasonable security standards prescribed under law. In view thereof, the Company shall be entitled to collect the following information:

a) anonymous data from every visitor of the application and/or Website to monitor traffic and fix bugs which includes (without limitation) information like web requests, the data sent in response to such requests, the Internet Protocol address, the browser type, the browser language, unique identifiers of the device through which the application is accessed, such as VPN, information of Wi-Fi connectivity and a timestamp for the request; and
b) log file information is automatically reported by your browser each time the application is viewed. The server supporting the application logs may include information such as web request, Internet Protocol (IP) address, Analytical Code, Geo Stamp, browser type, browser language, referring/exit pages and Universal Resource Locators (URL), platform type, number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular page, the date and time of the request (“Log File Information”). Such Log File Information collected is not associated with any Personal Information and is only tagged to the unique identifier for a particular device.

Liability

The Company shall in no manner be liable for any violation of data, if the data,

a) is in public domain; or
b) is a result of any illegal and unlawful misuse; or
c) is provided by an Incompetent Person (defined under section 11 of Indian Contract Act, 1972).

Intellectual property

Any information and/or intellectual property (including but not limited to trademark, logo, designs, et cetera) that are displayed, used, mentioned on our application and/or website, is the property of the Company.

Nothing on our application / website shall be construed as a (a) grant of license; or (b) right to use any of our intellectual property. The Company retains all proprietary rights that are mentioned, used, displayed on our application and/or website.

You are not entitled to use, modify, reproduce, copy, store, transmit, distribute, reverse engineer any intellectual property that is made available on the application and/or website.

Use by Incompetent Persons

No legal relationship can be established with persons who are rendered Incompetent Persons as per the Law of Contracts like minors, persons of unsound mind, et cetera.

In view thereof, Parents and Guardians are requested to ensure that Personal Information is not provided by such persons here on this application and provided only by them with respect to any Service offered by this application.

Use of Cookies

A cookie is a piece of software code that an internet web site sends to your browser when you access information at that site. You may opt-out of collection and usage of data through cookies by changing your settings on your browser. It is generally used for small text files which an application / website can use to recognize repeat users, facilitate the user’s ongoing access to and use of the site, allow a site to track usage behaviour and compile aggregate data that will allow content improvements, et cetera.

You are requested to note that certain information and/or data may be automatically collected through the standard operation of the Company or through the use of ‘cookies’.

These Cookies themselves do not personally identify you, but they do identify your computer. You can erase or block this information by changing the settings on your computer. If you do erase or block this information you may not be able to utilise some features of the application.

Link to other sites

For your convenience, this page may contain certain hyperlinks to other sites. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content or the privacy practices employed by other sites. We recommend that you check the policy of each site you visit and contact the owner or operator of such website if you have any concerns or questions.

Modification or Changes in Policy

The Company reserves the right to change this policy at any time. If the Company decides to change this policy, such changes will be intimated to you as soon as possible.

Any such change of policy may be effective from the date announced by the Company.

Reach out to us

In the event of any query, clarification or grievance regarding our privacy policy, kindly reach out to us at https://uatnps.kfintech.com/RegisterGrievanceEnquiry/GrievanceEnquiry.

STATEMENT OF CONSENT

I hereby confirm that I have read and fully understand the ‘terms of usage’ of my Personal Information. I hereby give my consent to you to the collect, process, store, share and purge the information in line with the ‘terms of use’ of the Privacy Policy. I also agree that the Application / Website may disclose such of my Personal Information as may be set out above and in the Privacy Policy.