shield Legal & Compliance

Privacy Policy

At Rightway Gold, your privacy is fundamental to how we operate. This document outlines what information we collect, the purpose behind it, and how we safeguard it.

event Effective: June 24, 2026 business RightWayPe Pvt Ltd verified_user RBI Compliant
info

Overview

Who we are and the scope of this policy

RightWayPe Pvt Ltd (CIN: U70200KA2025PTC208912 | GSTIN: 29AAPCR0786G1ZT), operating under the brand Rightway Gold, is a registered fintech company headquartered in Bangalore, Karnataka. We provide gold and silver loan services through our website at rightwaygold.com and the RightWay Gold Loan Provider mobile application.

This Privacy Policy governs the collection, use, storage, and protection of personal information across all our digital touchpoints — including our website, mobile application, and any associated services. It applies equally to prospective customers, registered users, and visitors to our platforms.

By accessing our website or using our application, you acknowledge that you have read and understood the terms outlined in this policy. If you do not agree with any part of this policy, please discontinue use of our services.

Our commitment: We do not sell, lease, or trade your personal data to any third party for commercial purposes. Every piece of information we collect is used exclusively to deliver, maintain, and improve the services we provide to you.
storage

Information We Collect

Categories of data gathered through our services

Identity & Personal Details

  • check_circleFull name, date of birth, and gender
  • check_circleGovernment-issued identification — Aadhaar Card, PAN Card, Voter ID, or Passport
  • check_circleResidential address and supporting address proof documents
  • check_circlePhotograph submitted during KYC verification

Contact Information

  • check_circleMobile number and email address
  • check_circleEmergency or nominee contact details, where voluntarily provided

Financial & Loan Information

  • check_circleBank account number and IFSC code for loan disbursement and repayment
  • check_circleLoan application details including requested amount and tenure
  • check_circleGold or silver ornament details — description, weight, purity, and assessed value
  • check_circleHistorical transaction records and repayment activity

Technical & Device Information

  • check_circleDevice model, operating system version, and unique device identifier
  • check_circleApplication version, crash diagnostics, and performance telemetry
  • check_circleIP address and network connection type

Location Information

  • check_circleApproximate or precise location data, collected only when explicit permission is granted, used for doorstep service coordination and branch discovery
tune

How We Use Your Information

Purposes for which personal data is processed

Purpose Information Used
Processing loan applicationsIdentity, financial, and asset details
KYC verification per RBI mandatesAadhaar, PAN, photograph, address proof
Loan disbursement and repayment processingBank account details, transaction records
Doorstep service schedulingLocation data, contact information
Customer support and correspondenceName, mobile number, email address
Application performance monitoringDevice information, crash logs
Fraud prevention and securityDevice ID, IP address, usage patterns
Regulatory reporting per RBI guidelinesLoan records, transaction history
share

Sharing & Disclosure

Circumstances under which your data may be disclosed

Rightway Gold does not sell, rent, or share your personal information with any third party for marketing or commercial purposes. Disclosure occurs only in the following defined circumstances:

  • verified_userRegulatory and Government Authorities — The Reserve Bank of India, income tax authorities, or other statutory bodies, where required under applicable law
  • verified_userKYC Service Providers — Authorized identity verification agencies engaged for mandatory KYC compliance as prescribed by RBI
  • verified_userPayment Infrastructure — Secure payment gateways processing online transactions via UPI, IMPS, or RTGS
  • verified_userCloud and Hosting Partners — Technology service providers operating under strict confidentiality and data processing agreements
  • verified_userLegal Proceedings — When compelled by a valid court order, government direction, or applicable statutory requirement
All service providers who receive access to your data are contractually bound to use it solely for the agreed service and are prohibited from any independent use or further disclosure.
lock

Data Security

Measures in place to protect your information

We employ a layered security framework designed to protect your personal data from unauthorized access, disclosure, alteration, or loss. Our security practices include:

  • securityAll data in transit is protected using SSL/TLS encryption protocols
  • securityData at rest is stored in access-controlled infrastructure with strict role-based permissions
  • securityRegular security audits, vulnerability assessments, and penetration testing
  • securityInternal access to personal data is granted only on a verified need-to-know basis
  • securityMulti-factor authentication enforced for all administrative system access

While we maintain robust technical controls, no transmission over the internet or electronic storage system can be guaranteed to be entirely impenetrable. We continuously review and strengthen our security posture to mitigate risk.

phone_android

Mobile App Permissions

Device access requested and the rationale for each

Permission Purpose Status
Camera Capturing KYC documents and photographs of pledged assets Optional
Storage / Files Uploading identification documents and downloading loan invoices Optional
Location Scheduling doorstep services and locating nearby branches Optional
SMS / Phone State Automatic OTP detection for secure login verification Optional
Internet Access Core application functionality and data synchronization Required
Notifications Loan status updates, repayment reminders, and service alerts Optional

All optional permissions may be revoked at any time through your device's application settings. Revoking optional permissions does not affect access to core services.

history

Data Retention

How long we hold your personal information

We retain personal data only for the duration necessary to fulfil the purposes described in this policy, satisfy applicable legal obligations, and resolve any disputes that may arise.

  • scheduleActive loan records — Retained throughout the loan tenure and for 7 years following account closure, in accordance with RBI directives
  • scheduleKYC documentation — Retained for a minimum of 5 years post account closure as required under Prevention of Money Laundering Act (PMLA) regulations
  • scheduleFinancial transactions — Retained for 7 years pursuant to Income Tax Act requirements
  • scheduleTechnical and usage data — Retained for up to 12 months for diagnostic and improvement purposes
  • scheduleInactive accounts with no outstanding loan — Personal data deleted within 90 days of a verified account closure request
person

Your Rights

Control you have over your personal data

As a user of Rightway Gold services, you are entitled to the following rights with respect to your personal information:

  • check_circleRight to Access — Request a copy of the personal data we hold about you
  • check_circleRight to Correction — Request correction of any inaccurate or outdated personal information
  • check_circleRight to Erasure — Request deletion of your data, subject to applicable legal retention obligations
  • check_circleRight to Withdraw Consent — Withdraw consent for any optional data processing at any time without affecting prior lawful processing
  • check_circleRight to Data Portability — Request your data in a structured, commonly used, machine-readable format
  • check_circleRight to Object — Object to the processing of your data for specific purposes not essential to service delivery

To exercise any of these rights, write to us at info@rightwaygoldloan.in. We will acknowledge your request within 72 hours and provide a full response within 30 days.

child_care

Children's Privacy

Our policy on users below the age of 18

Rightway Gold services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly solicit or collect personal information from minors.

If you have reason to believe that a person under the age of 18 has submitted personal information through our platform, please notify us immediately at info@rightwaygoldloan.in. Upon verification, we will take prompt steps to remove such information from our systems.

update

Policy Updates

How changes to this policy are communicated

We may revise this Privacy Policy periodically to reflect changes in our practices, applicable law, or operational requirements. When material changes are made, we will:

  • notificationsUpdate the effective date at the top of this page
  • notificationsDisplay an in-application notification to all active users
  • notificationsSend an email notification for significant changes to users who have provided a verified email address

Continued use of our website or mobile application following the effective date of a revised policy constitutes acceptance of those changes. We recommend reviewing this page periodically to stay informed.

mail

Contact Us

Reach out for any privacy-related queries or requests

For questions, concerns, or formal requests relating to this policy or the handling of your personal data, please contact our compliance team through any of the channels below.

RightWayPe Pvt Ltd

CIN: U70200KA2025PTC208912
GSTIN: 29AAPCR0786G1ZT
Registered under RoC-Bangalore, September 23, 2025

schedule Monday – Saturday, 9:00 AM to 6:00 PM IST
language rightwaygold.com