1. Introduction

Nithish Finance ("Nithish Finance", "we", "us", "our" or "Company") respects the privacy of individuals who visit our website, use our mobile application, submit loan applications, communicate with us or avail our financial services.

This Privacy Policy explains how Nithish Finance collects, uses, stores, shares and protects personal information.

This Policy applies to information collected through:

• Our website
• Mobile applications
• Loan application forms
• Branches and offices
• Telephone calls
• SMS, email and other communications
• Digital loan application processes
• Customer service channels
• Other legitimate interactions with Nithish Finance

By using our services or providing personal information to us, you acknowledge that you have read this Privacy Policy.

2. Personal Data We May Collect

Depending on the product and services used, Nithish Finance may collect the following categories of information.

2.1 Identity Information

This may include:

• Full name
• Date of birth
• Gender, where required
• Photograph
• Aadhaar-related information, where lawfully permitted and required
• PAN
• Voter ID
• Driving licence
• Passport
• Other government-issued identification documents

2.2 Contact Information

This may include:

• Mobile number
• Email address
• Residential address
• Permanent address
• Business address
• Emergency/contact person details, where required
• Communication preferences

2.3 Financial Information

Depending on the loan product, we may collect:

• Monthly income
• Salary information
• Business income
• Bank account details
• Bank statements
• Existing loan details
• Existing EMI obligations
• Financial statements
• Tax-related information
• Income tax returns
• Other information required to assess repayment capacity

2.4 Credit Information

Where legally permitted, we may collect or obtain information relating to:

• Credit history
• Credit score
• Existing credit facilities
• Repayment history
• Defaults
• Outstanding obligations
• Credit enquiries
• Information from credit information companies and other authorised sources

2.5 Property Information

For property-secured loans, we may collect:

• Property ownership information
• Title documents
• Sale deeds
• Encumbrance information
• Property tax information
• Property valuation information
• Photographs
• Location information
• Legal and technical reports
• Other documents required for property verification

2.6 Vehicle Information

For vehicle-related loans, we may collect:

• Registration number
• Registration Certificate
• Vehicle make and model
• Vehicle photographs
• Insurance information
• Vehicle valuation information
• Ownership information
• Hypothecation/charge information
• Other vehicle-related documents

2.7 Application and Transaction Information

We may collect:

• Loan application information
• Loan account number
• Sanction details
• Disbursement information
• EMI and repayment information
• Transaction references
• Payment history
• Correspondence with Nitthish Finance

2.8 Device and Technical Information

When you use our website or application, we may collect, where applicable:

• IP address
• Device information
• Browser type
• Operating system
• Application version
• Login information
• Usage information
• Security logs
• Device identifiers
• Cookies and similar technologies

We will collect such information only to the extent reasonably required for legitimate purposes and applicable law.

3. How We Collect Personal Data

We may collect information:

1. Directly from you
2. Through loan application forms
3. Through our website or mobile application
4. Through our branches
5. Through telephone or electronic communications
6. From documents provided by you
7. From authorised representatives
8. From credit information companies
9. From banks and payment service providers
10. From property or vehicle verification service providers
11. From government or public records where legally permitted
12. From authorised third-party service providers
13. Through other lawful sources

4. Purpose of Processing Personal Data

Nithish Finance may process personal data for legitimate and lawful purposes including:

Loan Services

• Processing loan applications
• Assessing eligibility
• Conducting credit assessment
• Determining repayment capacity
• Verifying identity
• Conducting KYC
• Conducting fraud checks
• Evaluating collateral/security
• Processing and disbursing loans
• Servicing loan accounts
• Collecting repayments
• Managing overdue accounts
• Processing foreclosure and closure requests

Legal and Regulatory Purposes

• Complying with applicable laws
• Meeting KYC and AML requirements
• Responding to lawful requests from authorities
• Maintaining legally required records
• Reporting to authorised credit information companies
• Preventing fraud and financial crime
• Protecting legal rights

Customer Service

• Responding to enquiries
• Resolving complaints
• Providing account information
• Sending transaction notifications
• Sending repayment reminders
• Communicating changes to products or services

Security

• Preventing unauthorised access
• Detecting suspicious activity
• Protecting our systems
• Investigating fraud
• Maintaining information security

Business Operations

• Improving our services
• Analysing application and service performance
• Maintaining internal records
• Managing technology systems
• Conducting internal audits and risk assessments

5. Legal Basis for Processing

Nithish Finance will process personal data in accordance with applicable law.

Depending on the circumstances, processing may be based on:

• Consent provided by the individual
• A lawful purpose permitted under applicable law
• Compliance with legal or regulatory obligations
• Provision or administration of requested financial services
• Prevention and detection of fraud or unlawful activity
• Other lawful grounds available under applicable law

The Digital Personal Data Protection Act, 2023 provides for processing personal data for lawful purposes based on consent or specified legitimate uses.

6. Consent

Where consent is required, Nithish Finance will seek consent through an appropriate mechanism.

Consent may be collected through:

• Website forms
• Mobile application
• Electronic acceptance
• Physical forms
• Other legally permissible methods

Where required, the notice accompanying consent will explain the categories of personal data being processed and the purpose for processing.

The DPDP Rules, 2025 require notices to be clear, understandable and provide an itemised description of personal data and the purposes for processing.

7. Withdrawal of Consent

Where processing is based on consent, an individual may withdraw consent through the mechanism provided by Nithish Finance.

Withdrawal of consent will not affect processing that is permitted or required under applicable law or processing that has already occurred lawfully before withdrawal.

Withdrawal of consent may affect our ability to provide certain services where the information is necessary for providing those services.

8. Sharing of Personal Data

Nithish Finance may share personal data with authorised parties where necessary and legally permitted.

These may include:

• Credit information companies
• Banks
• Payment gateways
• NACH/ECS/e-mandate service providers
• KYC service providers
• Technology service providers
• Cloud/storage providers
• Property valuation agencies
• Legal service providers
• Vehicle valuation agencies
• Document verification providers
• Fraud prevention service providers
• Collection/recovery service providers
• Auditors
• Professional advisers
• Insurance service providers, where applicable
• Government authorities
• Courts and law enforcement agencies
• Other authorised service providers

We expect third parties processing personal data on our behalf to maintain appropriate confidentiality and security measures.

9. Credit Information Companies

For credit assessment and loan servicing, Nithish Finance may obtain information from authorised credit information companies.

Where permitted and required, Nithish Finance may also provide information relating to the customer's loan and repayment behaviour to such entities.

Customers should understand that repayment behaviour may affect their credit profile.

10. Payment Information

Where customers make payments through banks, payment gateways, UPI, NACH, ECS or other payment systems, certain transaction information may be processed by the relevant payment service provider.

Nithish Finance may receive and retain transaction information necessary to:

• Confirm payment
• Reconcile accounts
• Update loan records
• Prevent fraud
• Resolve disputes
• Comply with applicable law

Nithish Finance does not request customers to share passwords, UPI PINs, ATM PINs or banking credentials with our employees or representatives.

11. Cookies and Similar Technologies

Our website or application may use cookies and similar technologies for purposes such as:

• Website functionality
• Security
• Session management
• Analytics
• Performance improvement
• Understanding website usage

Where required, users will be provided appropriate choices regarding cookies or similar technologies.

Users may also control certain cookies through their browser settings, although disabling certain cookies may affect website functionality.

12. Data Security

Nithish Finance will take reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access
• Unauthorised disclosure
• Accidental loss
• Destruction
• Alteration
• Misuse
• Unauthorised processing

Security measures may include access controls, authentication, encryption where appropriate, monitoring, backups and other safeguards.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

13. Data Retention

Nithish Finance may retain personal data for as long as reasonably necessary for:

• Providing financial services
• Maintaining loan records
• Meeting legal requirements
• Meeting regulatory requirements
• Accounting and audit purposes
• Fraud prevention
• Dispute resolution
• Enforcement of contractual rights
• Establishing or defending legal claims

When personal data is no longer required, it may be deleted, anonymised or securely disposed of, subject to applicable retention requirements.

14. Customer Rights

Subject to applicable law, individuals may have rights relating to their personal data, including rights to:

• Obtain information about processing of their personal data
• Request correction of inaccurate or incomplete information
• Request deletion of personal data where legally applicable
• Withdraw consent where processing is based on consent
• Raise grievances
• Nominate another individual to exercise rights in circumstances permitted by law
• Exercise other rights available under applicable data protection law

The exact availability and scope of these rights may depend on the applicable law and the nature of the processing.

15. Correction of Information

Customers should notify Nitthish Finance if any personal information provided by them is inaccurate or requires updating.

Requests may require identity verification before any information is changed.

Nithish Finance may retain previous information where retention is legally required or necessary for legitimate purposes.

16. Grievance Redressal

Customers may raise privacy-related concerns, complaints or requests by contacting Nitthish Finance.

Customer Care: 98431 39926

Address: 7/B, Nitthish Tower, Kudaiyur, Coimbatore Main Road, Mettupalayam - 641301, Tamil Nadu.

The Company will establish and maintain an appropriate grievance mechanism in accordance with applicable law.

Where applicable law requires additional escalation or a Data Protection Officer/other designated contact, the relevant details will be published by Nitthish Finance.

17. Children's Data

Nithish Finance's financial services are intended for eligible individuals who are legally competent to enter into applicable financial contracts.

We do not knowingly seek to collect personal data from children except where permitted and required by applicable law.

If we become aware that personal data relating to a child has been collected improperly, we will take reasonable steps to address the matter in accordance with applicable law.

18. Third-Party Websites

Our website or application may contain links to third-party websites, services or payment platforms.

Nitthish Finance is not responsible for the privacy practices or content of third-party websites.

Customers should review the privacy policies of third-party websites before providing personal information.

19. Marketing Communications

Nitthish Finance may send service-related communications necessary for managing a customer's account or application.

Where marketing communications require consent under applicable law, such communications will be sent in accordance with applicable requirements.

Customers may opt out of eligible promotional communications through the mechanism provided in the communication or by contacting Nitthish Finance.

Opting out of marketing communications will not necessarily stop essential service communications such as:

• EMI reminders
• Payment confirmations
• Loan account notifications
• Security alerts
• Important contractual communications
• Regulatory communications

20. Fraud Prevention

Nitthish Finance may process personal information to identify and prevent:

• Identity theft
• Document fraud
• Financial fraud
• Loan fraud
• Payment fraud
• Account takeover
• Other unlawful activity

21. Location Information

Where necessary for a specific service or verification process, Nithish Finance may process location information only where legally permitted and appropriately disclosed.

Location information will not be collected merely for unrelated purposes.

22. Automated Processing and Credit Assessment

Nithish Finance may use technology, rules-based systems, analytics or automated tools to assist with:

• Application processing
• Fraud detection
• Credit assessment
• Risk analysis
• Document verification
• Customer service

Where applicable law provides rights relating to automated decision-making, Nithish Finance will comply with those requirements.

23. Data Breach

In the event of a personal data breach, Nithish Finance will take appropriate measures in accordance with applicable law, including applicable requirements concerning notification, mitigation and remedial action.

24. Cross-Border Data Processing

Where personal data is processed or stored outside India through an authorised service provider, Nithish Finance will take such measures as may be required under applicable Indian law.

25. Customer Responsibility

Customers are responsible for:

• Providing accurate information
• Keeping account credentials confidential
• Not sharing OTPs or PINs
• Not sharing passwords with anyone
• Informing Nitthish Finance of suspected unauthorised activity
• Updating personal information when necessary
• Reviewing communications received from Nitthish Finance

Nithish Finance employees and authorised representatives will not ask customers to disclose UPI PINs, ATM PINs, passwords or similar confidential banking credentials.

26. Changes to this Privacy Policy

Nithish Finance may update this Privacy Policy from time to time to reflect:

• Changes in products and services
• Changes in technology
• Changes in business practices
• Changes in applicable laws
• Changes in regulatory requirements

The updated version will be published on our website or application.

Where legally required, Nithish Finance will provide appropriate notice regarding material changes.

27. Effective Date

This Privacy Policy is effective from:

21 August 2026

The latest version published on the Nitthish Finance website shall apply from its stated effective date.

28. Governing Law

This Privacy Policy shall be governed by the laws applicable in India.

29. Contact Us

For privacy questions, data requests, corrections, complaints or other privacy-related matters, contact:

Nitthish Finance

Address: 7/B, Nitthish Tower, Kudaiyur, Coimbatore Main Road, Mettupalayam - 641301, Tamil Nadu.

Customer Care: 98431 39926

Website: www.nitthishfinance.com