Privacy Policy & Data Governance

This Privacy Policy ("Policy") governs the collection, processing, storage, and protection of personal data by L&T Finance Limited (formerly L&T Finance Holdings Limited), an RBI-registered Systemically Important Non-Deposit taking Non-Banking Financial Company (NBFC-ND-SI), having its corporate office at Brindavan, Plot No. 177, C.S.T Road, Kalina, Santacruz (East), Mumbai - 400098.

This Policy applies to all borrowers, loan applicants, and visitors accessing:

• Digital Platforms: Primary web portal (ltfinancepvtltd.com / ltfs.com), mobile applications (PLANET app), and specialized financial calculators/widgets.
• Loan Products: Personal Loans, SME Business Credit, Home Loans, Vehicle Financing, Gold Loans, and Micro-financing.
• Lending Service Providers (LSPs): Authorized digital lending apps operating under RBI Digital Lending Guidelines.

To perform accurate credit risk assessment and fulfill statutory NBFC obligations, we collect the following data points with your explicit consent:

• 1. Identity & Contact Information: Legal name, date of birth, gender, residential address, mobile number, email address.
• 2. Statutory KYC Identifiers: PAN, Aadhaar number (via UIDAI masked OTP or offline XML), Voter ID, Passport, or CKYC ID.
• 3. Financial & Employment Profile: Monthly income, salary slips, ITR filings, bank statements, existing loan EMIs, and credit histories.
• 4. Technical & Device Info (RBI Compliant): IP address, OS type, browser, unique device IDs, and coarse location (strictly collected with explicit prompt for fraud prevention).
• 5. Video KYC (V-CIP): Video recordings and facial match scores captured during Video KYC under RBI guidelines.

We process your personal information only when backed by valid legal grounds under the DPDP Act 2023 and RBI guidelines:

• Loan Processing & Underwriting: Evaluating credit eligibility, verifying employment, and disbursing funds directly to your verified bank account.
• Statutory & RBI Compliance: Reporting to the Reserve Bank of India, Credit Information Companies (CICs), and FIU-IND under PMLA directives.
• Fraud Detection & Risk Management: Identity verification via Video KYC, preventing duplicate loan fraud, and AML screening.
• Loan Lifecycle Management: Sending EMI reminders, interest rate notices, Statement of Accounts (SOA), and customer service support.

As a regulated NBFC, L&T Finance reports loan performance to credit bureaus and statutory regulators:

• Credit Rating Agencies / Credit Bureaus: We report loan inquiries, sanctioned limits, EMI payment records, and defaults to TransUnion CIBIL, Experian, Equifax, and CRIF High Mark.
• Co-lending Bank Partners: In co-lending arrangements, loan records are shared securely with partner commercial banks for joint underwriting.
• Payment Gateways & NPCI: Sharing bank account details with e-NACH, NACH aggregators, and NPCI for processing automated EMI collections.
• Statutory Authorities: Disclosure when required under judicial summons, tax investigations, or regulatory audits.

We enforce robust cybersecurity standards to protect your financial records:

• 100% Data Localization: All customer data is hosted on MeitY-empanelled cloud servers located strictly within the geographical territory of India.
• Encryption Standards: Data is encrypted using 256-bit AES at rest and TLS 1.3 in transit.
• ISO 27001 Certified: Systems undergo regular vulnerability testing (VAPT) and third-party security audits.
• Data Retention: Loan logs are retained for 8 to 10 years after loan closure as mandated under RBI and PMLA guidelines for statutory audit.

Our web portals use cookies to maintain login sessions, store preferences, and analyze site performance.

Under the Digital Personal Data Protection Act 2023, you hold the following rights regarding your personal records:

• Right to Access: Obtain a summary of your personal information processed by L&T Finance.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Withdraw Consent: Opt-out of non-transactional marketing communications and calls.
• Right to Erasure (Non-Statutory): Request deletion of promotional records (statutory loan logs & CIBIL records must be retained per RBI rules).

L&T Finance services are strictly intended for individuals who have reached 18 years of age or older (or legally competent borrowers under the Indian Contract Act 1872). We do not knowingly process data of minors.

In accordance with RBI Ombudsman Scheme and DPDP rules, L&T Finance has appointed a Nodal Grievance Redressal Officer to handle data protection and service queries:

This Policy is updated periodically to stay aligned with statutory directives and technological enhancements.