We are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data.
This privacy policy (the "Privacy Policy") applies to your use of the website of Lark Finserv hosted at larkfinserv.com, the Services (as defined under the Lark Finserv "Terms of Use") and Lark Finserv applications on mobile platforms (Android, Blackberry, Windows Phone, iOS etc.) (collectively ("LARK FINSERV" or "WEBSITE")), but does not apply to any third-party websites that may be linked to them, or any relationships you may have with the businesses listed on Lark Finserv.
Key Definitions
"We", "our", "us" — Lark Finserv
"You", "your", "User" — You, as a user of Lark Finserv
"Personal Information" — Information that personally identifies you, such as name, phone, email, and related financial data submitted through our platform.
"Services" — The platform facilitating Loan Against Mutual Funds (LAMF) provided by Lark Finserv and its banking partners.
We have implemented reasonable security practices and procedures that are commensurate with the information assets being protected and with the nature of our business. While we try our best to provide security that is better than the industry standards, because of the inherent vulnerabilities of the internet, we cannot ensure or warrant complete security of all information that is being transmitted to us by you.
We collect, receive and store your Personal Information. If you provide your third-party account credentials ("Third Party Account Information") to us, you understand that some content and information in those accounts may be transmitted to your account with us if you authorise such transmissions and that Third Party Account Information transmitted to us shall be covered by this Privacy Policy.
How We Use Your Information:
- Enable you to use the services provided by us
- Help promote a safe service and calibrate consumer interest
- Inform you about online offers and updates
- Troubleshoot problems and customize user experience
- Detect and protect against error, fraud and criminal activity
Marketing Communications
You authorize Lark, its affiliates, business associates, and their representatives to send you promotional communications via telephone, SMS, email, WhatsApp, or other electronic modes.
Partner Collaboration
We use your personal data with lending partners to facilitate loan applications and with third-party partners to provide relevant products and services.
If you create an account to take advantage of the full range of services offered on Lark Finserv, we ask for and record Personal Information such as your name, email address and mobile number.
Sensitive Data Collection
We may collect and store your Sensitive Personal Data including financial information (credit card, debit card details, bank account), KYC documents as per RBI regulations, and other applicable information that you opt to save in your account.
Communication Preferences:
- Email updates, news, and newsletters (if subscribed)
- Transaction alerts and SMS notifications based on preferences
- Contact on behalf of other users for social collaboration
Your Control
You can unsubscribe from emails using the link provided, or contact support to stop SMS notifications. Lark Finserv assures that your Personal Information will not be made public or sold to any third party.
Data Erasure Rights
You have the option to erase any information provided, including Personal Information. If you opt for erasure, Lark Finserv shall delete all stored information from its servers, subject to legal and regulatory requirements.
We also store customer information such as address, mobile number, Third Party Wallet details, Card Details and email address for customers making payments through Lark Finserv checkouts.
Information Sharing
Only when a customer chooses to share information with businesses powered by Lark Finserv applications, we share the information to respective businesses. However, Lark Finserv is not liable for any misuse of this information by the business or people related to the businesses.
We record information relating to your use of Lark Finserv, such as:
- Searches you undertake
- Browser type and IP address
- Requested and referring URLs
- Pages you view
- Location and timestamp information
Usage Purpose
We use this information to administer Lark Finserv, provide security and service, and perform statistical analyses of user behavior. You cannot be identified from aggregate information.
Lark Finserv may share your Personal Information with third-party vendors, consultants, and service providers ("Service Providers") engaged by us in connection with delivering our services. These parties require access to specific information to perform their contractual duties.
We also partner with third-party providers to offer services that may be relevant to you. Data sharing with these entities is performed securely and only upon obtaining your prior consent.
Third-Party Service Providers List:
| Third Party Name | Data Shared | Purpose |
|---|---|---|
| DeepView | PAN Number | PAN Verification for identity compliance |
| MF Central | Phone Number, PAN Number | To Pledge funds in Mutual Funds portfolios |
| CAMS | Phone Number, PAN Number | To Pledge funds in Mutual Funds portfolios |
| KFinTech | Phone Number, PAN Number | To Pledge funds in Mutual Funds portfolios |
| TeleCRM | As a customer support, email is sent to the user in order to communicate and support |
Security & Confidentiality
Lark Finserv ensures that all such third-party partners are contractually bound to maintain the confidentiality and security of the Personal Information shared with them. These entities are permitted to use the information strictly for the purpose specified above.
✓ We Do
- Share with authorized service providers
- Ensure third-party protection obligations
- Share only as per this Privacy Policy
- Obtain your prior consent
✗ We Don't
- Sell or rent your information
- Share for marketing without consent
- Violate this Privacy Policy
- Share for commercial purposes without explicit consent
We do not sell or rent your Personal Information to third parties for marketing or other commercial purposes without your explicit consent. All information is shared in accordance with this Privacy Policy and relevant regulatory guidelines.
We retain your Personal Information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations, including guidelines issued by the Reserve Bank of India (RBI).
Retention Timelines (examples):
Once the data retention period expires, we will securely delete, anonymize, or archive your data in compliance with applicable laws.
Users have the right to request the complete deletion of their personal data and/or withdraw their consent for the processing of their personal data at any time. Upon receipt of a valid request sent from the user's registered email address to help@larkfinserv.com, we commit to securely delete all related personal information and cease further processing based on consent, within 1 business day, subject to applicable legal and regulatory requirements.
● How to Request
- Send an email from your registered email address
- Send to: help@larkfinserv.com
- Include "Data Deletion / Consent Withdrawal Request" in the subject line
- Provide relevant account details for identity verification
⏰ Processing Timeline
- Request acknowledgment: Immediate
- Data deletion / consent withdrawal completion: Within 1 business day
- Confirmation email: After completion
- Permanent removal from all applicable systems, databases, and backups
Requests for data deletion or consent withdrawal will be processed unless retention or continued processing of specific data is required to comply with applicable laws, regulations, or regulatory guidelines issued by the Reserve Bank of India (RBI) or other statutory authorities.
Once the deletion and/or consent withdrawal process is completed, users will be notified via email confirming that their data has been permanently removed or that consent-based processing has been discontinued.
Lark Finserv stores all customer data on Amazon Web Services (AWS), including Amazon RDS. Data destruction follows RBI guidelines and NIST SP 800-88 standards.
🔒 AWS Security Standards
- AWS securely sanitizes storage media
- Cryptographically erases data when resources are deleted
- Follows AWS Media Sanitization Policy
- NIST SP 800-88 compliance
💾 RDS Data Management
- RDS data including snapshots automatically purged
- Rendered unrecoverable when deleted
- Application-level deletion performed
- No residual copies remain
📋 Compliance Framework
- RBI Guidelines: Reserve Bank of India data protection standards
- NIST SP 800-88: Guidelines for Media Sanitization
- AWS Standards: Industry-leading cloud security practices
- Multi-layer Approach: Infrastructure + Application level deletion
User Rights
Users may request data deletion anytime by contacting help@larkfinserv.com, subject to RBI retention rules.
In the event of a data breach, Lark Finserv follows the incident response framework prescribed under RBI guidelines and applicable data protection laws. Our breach-handling protocol includes the following steps:
Immediate Identification & Containment
Immediate identification and containment of the security breach to prevent further unauthorized access or data compromise.
Internal Investigation
Internal investigation to determine the root cause and extent of the breach.
Service Suspension
Suspension of affected services without delay to mitigate potential risks and protect user data.
Enhanced Security
Implementation of enhanced security measures and protocols to address vulnerabilities and prevent recurrence.
Rapid Notification
Notification of the affected users and relevant authorities within 30 minutes of becoming aware of the breach, in accordance with RBI-mandated timelines.
Ongoing Monitoring
Ongoing monitoring and audits to ensure continued security compliance.
📞 Questions or Concerns?
If you have any questions or concerns about our data breach response procedures, please contact us at "help@larkfinserv.com".
In compliance with RBI guidelines for Digital Lending Applications (DLAs), we clarify that certain third-party service providers and lending partners may collect Personal Information directly from you for the purpose of processing loan applications or providing financial services.
Compliance Standards
Such collection shall be strictly limited to what is necessary, with your prior consent, and governed by binding agreements ensuring compliance with applicable data protection and RBI regulations.
Questions About This Policy?
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.