Privacy policy
ONKIST · Last updated 2026-10-28. This notice explains how we handle personal data when you use onkist.com and our apply journey.
Who we are
ONKIST is a non-banking financial company (NBFC) registered with the Reserve Bank of India. We lend to you directly: we assess your application, make the credit decision, issue the Key Fact Statement and sanction, and disburse the loan. We act as a data fiduciary for information you provide on this website and in the apply journey, and for data we hold to assess, service, and report your loan.
Registered entity: ONKIST
Address: Registered office address — configure NEXT_PUBLIC_REGISTERED_ADDRESS
Contact: support@onkist.com
Collection notice (apply flow)
When you apply, we may collect:
- Identity & contact: name, mobile, email, date of birth, gender, PIN code, PAN, Aadhaar (or DigiLocker-derived identity data).
- Financial & employment: income, employment type, bank account details for disbursal and mandate setup.
- Verification: selfie / liveness, DigiLocker session outcomes, bureau credit information where you consent at the relevant step.
- Technical: device identifier, IP address, browser type, coarse location when you grant permission for fraud prevention.
Purpose: eligibility assessment, KYC / AML compliance, credit underwriting and loan servicing, fraud prevention, communication about your application, and regulatory record-keeping.
Sharing: we share data with credit bureaus (including reporting your loan and repayments, as required by law) and with service providers (KYC, e-sign, payments) strictly to deliver your application and loan. We do not sell personal data. Marketing uses your data only if you opt in separately.
Retention: kept only as long as needed for the application, your loan, and applicable law, then deleted or anonymised per our retention schedule.
Your choices
- Withdraw optional marketing consent anytime via email to support or the grievance officer.
- Request access, correction, or erasure where applicable under the Digital Personal Data Protection Act, 2023 — subject to lending and audit obligations.
- Deny optional permissions (e.g. location) where not strictly required; some steps may not proceed without KYC-related permissions.
Security
We use encryption in transit, access controls, and service provider due diligence. No method is 100% secure; report concerns to support@onkist.com.