DS 3 Privacy Policy

In pursuance to the Reserve Bank of India’s vision, various payment industry participants (banks & non-banks) have joined to create the website – www.digisaathi.info, chatbot, IVR or any mobile and/or web application (collectively, the “Platform”) for end customers using the payment products/services offered by various payment industry participants for obtaining information about digital payment products and services. National Payments Corporation of India (“we” or “our” or “us” or “NPCI”) is managing and operating the Platform for the industry including NPCI as an industry participant.

Use of this Platform signifies your acknowledgement and consent towards the terms and conditions of this Privacy Policy. Please read this Privacy Policy carefully before accessing the Platform. By mere access to the Platform or any part thereof, you signify your consent to the collection, storage, processing of your personally identifiable information (Personal Information) to NPCI.

OVERVIEW OF THE PLATFORM

The Platform is set up, operated, and maintained by NPCI on behalf of a consortium of payment system operators and participants (banks & non-banks) with the objective of contribution to digital payments growth and boosting Indian payments industry.

The Platform may be amended from time to time at the sole discretion of NPCI, wherein User can ask some questions, most relevant and appropriate information towards which shall be provided to User on a best effort basis.

To the fullest extent permitted by law, NPCI does not make any warranties of fitness for a particular purpose, title, merchantability, completeness, comprehensiveness, availability, security, compatibility or non-infringement; or that the Platform will be uninterrupted, free of viruses and other harmful components, accurate, error free or reliable.

Further use of Platform after amendments in this Privacy Policy, shall constitute the consent to accept these modifications. Refusal to accept these modifications shall preclude the User from using the Platform.

PRIVACY & SECURITY OF PLATFORM

NPCI is committed to protect users’ privacy. NPCI understands and appreciate concerns of a visitor or a user of the Platform about their privacy, confidentiality and security of information that may be provided by them to NPCI.

The Platform enables you to access several other third party websites plug-ins and applications (including cookies, tracking technologies and widgets by third party advertisers) on which NPCI has no control. It is important that you understand that by clicking on those links or enabling those connections, you may allow third parties to collect or share data about you. NPCI does not have oversight of these third-party websites, plug-ins and applications and we are not responsible for their processing or using of your information. Any information collected by a third party in this manner is subject to that third party’s own data collection, use and disclosure policies and you must make yourselves conversant with those. NPCI encourages you to read such third parties’ privacy statements to learn more on how they process your Personal Information. NPCI does not assume any liability to any user for their access and use of such third party websites and its content thereof.

COLLECTION OF INFORMATION

Personal Information shall mean any information that relates to an individual, which directly or indirectly, in combination with other information available or likely to be available with us, is capable of identifying such individual which may include name, email-id and phone number for the purposes for understanding customer needs and preferences and meeting legal and regulatory requirements.

Collection of such information by NPCI is in consonance with the applicable laws in India.

Further, anytime you visit the Platform, NPCI may collect certain non-personally identifiable information regarding the means you use to access the Platform. This information may include the type and version of your browser, your service provider, your IP address and any search engine you may have used to locate the Platform. We use this information to help diagnose problems with our server, administer the Platform, and compile broad statistical data.

STORAGE OF INFORMATION

NPCI maintains the records and information in a safe and secure manner as per its policy and in compliance with the statutory provisions and directions, for the period required by it and as prescribed by applicable laws and rules etc.

By using the Platform, directly or indirectly, you expressly consent to our use and disclosure of your Personal Information submitted to us in accordance with this Privacy Policy. Personal Information, if captured, is securely stored and archived. NPCI does not allow any unauthorized access to the information stored by it in any form whatsoever. The information is securely stored and access is restricted to authorised personnel only. We take necessary physical, technical, managerial, and operational measures that are designed to improve the integrity and security of information that we collect and maintain as required by applicable laws of India. NPCI also regularly reviews its policies regarding the collection, storage, using and processing of your Personal Information, including physical security measures, preventing alteration, loss, query, use or fraudulent or unauthorized access of your Personal Information.

DISCLOSURE TO THIRD PARTIES

We may share your Personal Information with:

• our group company(ies);
• third parties including business partners, service providers or vendors;
• regulatory and law enforcement agencies and quasi-governmental authorities, judicial authorities and quasi-judicial authorities
• industry body(ies), payment system operators and participants (banks and non-banking companies)

By using the Platform, you hereby grant your consent to NPCI to share/disclose your Personal Information to abovementioned third parties in accordance with applicable laws of India.

USE OF COOKIES

We may use a browser feature known as a “cookie”.

Cookies are small files placed on your hard drive that assist in providing a user with a customized browsing experience. Cookies provide convenience to the user using the Platform to access the same from the place where it was last accessed, if it is abandoned mid-way.

When a user visits the Platform, the Platform administrator may use cookies to monitor the usage and collect statistics from the browser(s) used by users, including and not restricting the information about the time and date when a user accessed the Platform, the pages user visited, the internet domain and IP address from which the user has accessed the Platform and information on the browsing software the user has used to access the Platform. However, no attempt is made to gather or keep personal details to identify users except, in an unlikely event of an investigation, where a law enforcement agency may exercise a power to inspect activity logs.

PROTECTION OF INFORMATION

NPCI on best effort basis follows appropriate operational, physical, electronic, procedural and technical safeguards against any unauthorized access or breach of data security to avoid any loss or damage to the user’s Personal Information. However, NPCI shall not be made liable for the same in any manner whatsoever for any default. The information security system also includes as under:

• Use of firewalls, encryption and data leakage prevention technologies to protect information;
• Audit of vendors and service providers, and execution of non-disclosure agreements before availing their services.

CHANGES TO THIS PRIVACY POLICY

NPCI may revise this Privacy Policy from time-to-time and shall notify periodically of the changes, not less than once a year.

GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by, interpreted and construed in accordance with Indian Laws. The jurisdiction and venue of any action with respect to the subject-matter of this Privacy Policy shall be the Courts of Mumbai in India and each of the parties hereto submits itself to the exclusive jurisdiction of Mumbai for the purpose of any such action.

EMAIL

Email correspondence sent to NPCI is treated as record and will be retained as required by law. The name and address details of senders are neither added to a mailing list nor disclosed to third parties without consent of the sender unless required by law. Email messages may be monitored by the support staff of NPCI for system trouble shooting and maintenance purposes.

YOUR RIGHTS

You can ask us to get the inaccurate Personal Information we process about you, to be fixed or changed and can also request to review your Personal Information available with us. You may withdraw a consent to process (including usage) that you have given to us and prevent further processing or using of your Personal Information. You may also withhold your consent prior to the collection, processing or using your Personal Information.

Please submit a request to contact.digisaathi@npci.org.in if you would like to exercise any of the above rights. These rights are limited in some situations, such as where we are legally required to retain your Personal Information. Please note that this may also affect our ability to process or enable your Personal Information and may therefore lead to the discontinuation of those services or products for which this Personal Information was being used, at our sole discretion.

GRIEVANCE REDRESSAL

In accordance with Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below for your reference:

Name: Mehfooz Khan
Address: NPCI, 301/302, Raheja Titanium, Off Western Express Highway, Goregaon (W). Mumbai 400063
Email:  contact.digisaathi@npci.org.in