Last updated: January 11, 2023
Exception to Personal Data: If any information provided by You is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other Applicable Laws, such information shall not be regarded as Personal Data.
We may ask You to provide Us with Your Personal Data that We may use to contact or identify You. We may also collect Your Personal Data for improving Our Services.
We may collect following types of Your Personal Data:
|Types of Personal Data||Purpose||Details of Personal Data|
|Name and Contact Information||For providing payment aggregation, payouts and verification services to Our merchants, business partners and end-customers.||Full name(s), title, age, user ID, gender and Your date of birth. Telephone/mobile number(s), address(es), state/city of residence, country, pin code, email address(es), and chosen billing address(es).|
|Financial Information||Account Registration||Personal bank account numbers, including e-nach, NEFT, IMPS and UPI ID details, tokenized card information, card type, expiry date on the credit or debit card, and name on the card.|
|Identification Information||For providing payment aggregation, payouts and verification services to Our merchants and business partners and to comply with screening requirements as per Applicable Laws.||Know Your Customer (KYC) documents including all proofs of identity and address, photograph, Permanent Account Number (PAN), GST Number, etc.|
|Payments related data||For providing payment aggregation, payouts and verification services to Our merchants, business partners and end-customers and to comply with screening requirements as per Applicable Laws.||Payment gateway ID, name of issuing bank, merchant’s name, category and other identifiers along with the details of products or services purchased or paid for, mode of payment, the date, currency and amount of the transaction(s), whether the payment was successful, and other information provided by You directly or indirectly to Us or provided to Us by banks, merchants or other service providers or business partners.|
|Log Data||Statistical analyses of User behavior and characteristics in order to measure interest in and use of the various areas of Our Services provided to You.||Browser type, IP address, location, requested URL, referring URL, timestamp information, application, device, versions and configurations, operating systems, device brand and model, geo-location information, unique identifiers associated with Your device(s) and pages that You access on the website(s) to access or avail Our Services and paths taken.|
|Credit related Information||For providing payment aggregation, payouts and verification services to Our merchants that are financial institutions or account aggregators under Applicable Laws, Our business partners and third party service providers and end-customers.||Your credit related information or assessment provided by third parties such as financial institutions or account aggregators under Applicable Laws including Our business partners and third party service providers.|
|Your Device Information||We may collect Your device information in order to gain insights about Your use of Our website or Services, to provide a customized experience, and to show targeted advertisements.||Your contact list, call records, SMS, media files and location data in Your devices to enable You to access Our Services after seeking necessary permissions.|
We do not collect certain categories of Personal Data, such as, Your details relating to Your race or ethnicity, religious or philosophical beliefs, biometric information, sexual orientation, political opinions, or information about your physical, physiological, mental health condition, medical records and history or any genetic information.
Right to Review Your Personal Data - You may review the Personal Data provided by You and any Personal Data found to be inaccurate or deficient will be corrected or amended by Us, as feasible. However, please note, that We will not be responsible for the authenticity of the Personal Data provided by You.
Withdrawal of Your Consent - You may choose not to provide Your Personal Data, at any time while availing the Services or otherwise, or withdraw Your consent provided to Us earlier, in writing to our email ID: email@example.com
However, in case You choose to not provide or later withdraw Your consent, We may not be able to provide to You some or all of the features and functionalities of Our Services. This may also affect Our ability to process Your Personal Data and lead to the discontinuation of Our Services for which such Personal Data was required to be used or was being used, at Our sole discretion.
Please note that these rights are limited in instances where We are legally required to retain Your Personal Data in order to be compliant with the Applicable Laws.
We adhere to the international security standards and certifications issued by International Organization for Standardization, the Payment Card Industry Data Security Standards (PCI DSS) Council and Cybersecurity Standards by the American Institute of Certified Public Accountants (AICPA) such as ISO/IEC 27001: 2013, PCI DSS v3.2.1 and Service Organization Control Type 2 (SOC 2), respectively. We have regular audits of Our Information System that is carried out by CERT-In empanelled auditors as required under the Applicable Laws.
The security of Your Personal Information is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use e commercially acceptable means to protect Your Personal Information, We cannot guarantee its absolute security.
Your Personal Data may be transferred to and maintained on computers located outside of Your state, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.
Our Service does not address anyone under the age of 13 ("Children").
We do not knowingly collect personally identifiable information from children under 13. If You are a parent or guardian and You are aware that Your child has or children have provided Us with Personal Data, please contact Us at firstname.lastname@example.org . If We become aware that We have collected Personal Data from children under age 13 without verification of parental consent, We take steps to remove that information from Our servers.
We retain Your Personal Data for no longer than is required for the purposes for which Your Personal Data is collected or for the period required to be maintained under the Applicable Laws.
Your Personal Data may be shared, without obtaining prior consent, with Government agencies mandated under the Applicable Laws or any law in India to obtain Your Personal Data for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences. In which case, the Government agency or authority sends a request to Us stating the purpose of seeking Your Personal Data.
Your Personal Data so obtained by the Government agency or authority is not published or shared with any third party, unless the disclosure to any third party is required by an order under the Applicable Laws or any law in India for the time being in force.
Cashfree Payments India Pvt Ltd,
Vaishnavi Summit, No. 6/B, Summit,
80 Feet Rd, Koramangala 1A Block,
Koramangala 3 Block, Koramangala,
Bengaluru, Karnataka 560034
Email ID: email@example.com