Effective Date:

1. Introduction

M/s CAPIFI SERVICES LLP is committed to the responsible and secure storage of personal and financial data. This Data Storage Policy outlines how we store, retain, and protect data in compliance with relevant data protection and industry regulations

2. Data Types and Categories

We store various types of data, including but not limited to: Personal information: Names, addresses, contact details. Financial information: Income, expenses, credit history. Identification information: Government-issued IDs, social security numbers. Employment and income details. Loan transaction information

3. Data Storage Principles

Our data storage practices are guided by the following principles:

Legal Compliance: We adhere to all applicable data protection laws, regulations, and industry standards. We are committed to maintaining the highest standards of data privacy and security.
Data Minimization: We store only the data that is necessary for our legitimate purposes, such as loan processing and compliance with legal obligations.
Retention Period: We retain data for the period required by law and regulatory requirements or as necessary for our legitimate business purposes. We will not retain data longer than needed.
Data Security: We implement robust technical and organizational measures to protect stored data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, and regular security assessments.
Regular Review: We periodically review and assess our data storage practices to ensure compliance with changing regulations and evolving security threats.

4. Access Control

Access to stored data is restricted to authorized personnel who require it for legitimate business purposes. Access controls include user authentication and authorization mechanisms.

5. Data Backup

We maintain secure and regular data backups to ensure data integrity and availability. Backup procedures include encryption and secure storage.

6. Data Retention and Deletion

We retain data only for the period required by law or as necessary for legitimate business purposes. When data is no longer required, it is securely deleted or anonymized to protect the data subject's privacy.

7. Data Transfer

If data is transferred outside the organization, we ensure appropriate safeguards are in place to protect data privacy and security, including encryption and secure transmission.

8. Policy Review and Updates

This policy will be periodically reviewed and updated to ensure compliance with data protection regulations and industry best practices. Data subjects and stakeholders will be informed of significant policy changes.

9. Contact Information

If you have questions or concerns about our data storage policy, please contact our Data Protection Officer Kanaparthi Vamsee Krishna at vk@capifiservices.com.