Privacy policy
1. Introduction
1.1. This Privacy Policy describes how Yellow Metal Loans Private Limited ("Yellow Metal Loans", "we", "us", or "our") collects, uses, stores, and shares your personal information when you apply for or avail a gold loan from us, visit our website, or interact with us through any channel.
1.2. We are a Reserve Bank of India (RBI)-registered Non-Banking Financial Company (NBFC) primarily engaged in providing gold loans. We take the privacy of your personal information seriously and are committed to handling it responsibly and in accordance with applicable law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
1.3. By submitting a loan application, visiting our website, or availing any of our services, you agree to the collection and use of your information as described in this Policy. Please read it carefully. For non-essential website analytics described in Section 2, you may contact us (Section 9 / Section 10) to request that we stop using your website interaction data where legally permitted.
1.4. This Policy should be read together with the Loan Agreement and the Key Facts Statement (KFS) issued to you at loan sanction.
2. What Information We Collect About You
We collect only the information that is necessary to process your loan application, complete KYC verification, manage your loan account, improve our website, and comply with legal and regulatory requirements. The categories of information we collect include:
Identity and KYC Information
Your name, date of birth, gender, photograph, address, and government-issued identification documents such as your Aadhaar card (stored in masked form -- last 4 digits only), PAN card, Voter ID, Driving Licence, or Passport. This information is collected as required under RBI KYC regulations.
Contact Information
Your mobile number, email address (if provided), and residential or correspondence address. We use this to send you the Key Facts Statement, disbursement confirmation, payment reminders, and other important loan-related notices.
Financial Information
Your bank account number and IFSC code (or UPI ID), used to disburse the loan amount to your account. We also obtain your credit report from a licensed Credit Information Company to assess your creditworthiness before sanctioning a loan.
Gold Collateral Information
Details of your pledged gold ornaments -- description, weight, purity (in carats), and photographs taken at the time of appraisal. This is used to document and safeguard the collateral in our custody.
Loan Account and Transaction Information
Details of the loan amount sanctioned, interest rate, repayment history, LTV ratio, and any outstanding dues. We use this to manage your loan account and report loan performance to licensed credit bureaus as required by law.
Device and Location Information (for Digital KYC)
If you use Aadhaar-based offline verification (OVSE), Video-based Customer Identification (V-CIP), or any other digital KYC mode, we may collect your device information and geographic location as required by RBI guidelines for such modes.
Website visit and interaction information
When you visit yellowmetal.co (or related domains we operate), we automatically collect limited technical information to understand how the marketing website is used and to improve it. This may include: the page path you viewed, a temporary browser session identifier (stored in your browser and hashed before storage on our systems), approximate region/country derived from network routing (we do not store city-level location for website analytics), device/browser type inferred from the user-agent string, and anonymised interaction signals such as whether the lending-rate display was viewed or a loan-estimate calculator was used. For calculator interactions we store coarse weight ranges and estimate bands — not the exact grams or exact INR figure you typed.
This website telemetry is separate from Digital KYC. It is not used to underwrite a loan by itself, is retained for a limited period (generally up to 90 days for aggregated website analytics), and is accessible only to authorised staff for operational analytics.
3. How We Collect Your Information
We collect your information through the following means:
Directly from you: When you visit our branch, submit a loan application, provide KYC documents, and interact with our staff.
Through our digital origination system: Our branch staff use an internal loan origination application to record your details, capture gold appraisal information, and process your loan. This application is used by our employees and is not directly accessible to you.
From our website: Through automated collection of the website visit and interaction information described in Section 2 when you browse our public pages.
From third-party verification sources: We receive information from government-authorised identity verification agencies (such as Aadhaar and PAN verification services) and licensed Credit Information Companies, to the extent necessary to verify your identity and assess your creditworthiness.
From your bank: We verify your bank account details with your bank before disbursing the loan, to ensure the loan proceeds are credited to the correct account.
Through IT infrastructure providers: Our website and related systems may be hosted on cloud infrastructure. Where personal data is processed by such providers, it is under contractual confidentiality and security obligations.
4. Why We Use Your Information
We may use your data (as mentioned above) for various things including specific business purposes (“Services”), which will include the following:
a) to provide services that might be required by the customer,
b) to process the customer’s financial and non-financial transaction requests,
c) to undertake research and analytics for offering or improving the Company’s services,
d) to check and process the user’s application for availing any financial services,
e) to share any updates/changes to the services and the terms and conditions with the user/customer,
f) to take up and investigate any complaints/claims/disputes.
g) to respond to queries and feedback submitted by you
h) for verification of your identity as per the internal policies including KYC.
i) Undertake marketing, advertising and promotional activities to bring you products and services which may be appropriate or of interest to you. However, we do not sell or transfer your personal data to third parties for their marketing or promotional purposes, without your explicit and specific consent;
j) For business or portfolio transfers or in connection with a substantial corporate transaction, including to evaluate or conduct assignment of receivables, securitization, restructuring, reorganization, mergers and acquisitions, divestiture, sale of business all or any of our assets whether as a going concern or otherwise, including in and bankruptcy, dissolution or liquidation proceedings;
k) to fulfil the requirements of applicable laws / regulations and / or court orders / regulatory directives received by the Company.
l) Otherwise with your consent.
5. Who We Share Your Information With
Yellow Metal Loans shall not disclose your personal data or information to any third party without your prior consent, except where such disclosure is agreed upon in a contract or required by law. All such third parties are obligated to maintain strict confidentiality and adhere to stringent data protection requirements to ensure your information is handled securely and in compliance with applicable privacy laws. Neither Yellow Metal Loans nor any third party shall publish or further disclose your personal data received. We ensure all disclosures comply with applicable laws and contractual obligations to protect your privacy.
Where possible, you shall have the option to restrict disclosure to third parties. However, where sharing of information to a particular third party is necessary for providing the products and/or services, you shall not be able to avail such products and/or services in case you decide to restrict such disclosure.
Following are the third parties to whom your information may be shared for providing/enabling the products and/or services:
Type of Third Party
Description
Banking partners, payment processing partners, co-branding partners, lending partner, third-party vendors, and credit information companies
We may share your information/information submitted by you to financial institutions and service providers such as payment processors, card issuers, NBFC partners and banking partners, collection service providers, credit information companies, to facilitate transactions/for providing such product and/or service.
IT Service Providers
We may share your information to IT Service Providers who are engaged in the provision of information technology services for fulfilling various aspects of the Platform and for research and data analytics.
Identity and other information verification providers
We may share your information to identity and other information verification to complete identification and information verification processes in accordance with applicable laws.
Statutory disclosures to government and regulatory organisations
We may share your information, with or without consent, with the government, law enforcement agencies, authorities, and regulatory bodies authorized by law for identity verification, prevention, detection, investigation including cyber incidents, prosecution, or punishment of offences, provided such request for data/ information is received in writing and not further shared or published or when the Company must comply with its legal obligations. Disclosure may also be made to any third party mandated by a court or order under law for the time being in force.
Marketing, business development, and sales partners
We may share your information with marketing, business development and sales partners for the purpose of improving and carrying out marketing or business development activities to provide promotional offers and better services to you.
If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities on the Platform, we may collect and store such information for providing services and for record keeping purposes.
6. How Long We Keep Your Information
We retain your personal information for as long as your loan account is active and for a period after it is closed, as required under applicable law. In general:
KYC documents and account-opening records are retained for at least 5 years after your loan account is closed, as required under anti-money laundering regulations.
Loan agreements, KFS, and transaction records are retained for at least 5 years after the date of the transaction.
Gold appraisal records and gold custody documents are retained for the duration of the loan and for a reasonable period after closure.
Website analytics and calculator engagement telemetry are generally retained for up to 90 days, after which they are deleted or aggregated so individuals can no longer be reasonably identified from that dataset.
When retention periods expire, we securely delete or anonymise your personal information.
7. How We Protect Your Information
We implement appropriate security measures to protect your personal information against unauthorised access, disclosure, alteration, or loss. These include:
Access to your personal information in our systems is restricted to authorised employees who need it to perform their job.
All our third-party integrations (identity verification, credit bureau, e-sign) are secured through API authentication.
Physical KYC documents at our branches are stored securely and accessible only to authorised staff.
In the event of a personal data breach that is likely to affect you, we will notify you and the Data Protection Board of India (DPBI) in accordance with applicable law.
8. Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal information:
Right to Information
You can ask us what personal information we hold about you, why we hold it, and who we have shared it with. We will respond to your request within 30 days.
Right to Correction and Erasure
You can ask us to correct inaccurate or incomplete personal information we hold about you. You can also ask us to delete your personal information when it is no longer needed for the purpose for which it was collected.
Please note: some of your information must be retained under applicable law (such as KYC and transaction records under anti-money laundering rules). We cannot delete such information during the mandatory retention period, and we will explain this to you if you make a request.
Right to Nominate
You can nominate someone to exercise your data rights on your behalf in case of your death or incapacity. Please contact our Compliance Officer to register a nominee.
Right to Grievance Redressal
If you have any concern about how we handle your personal information, you can raise a complaint with our Data Protection Officer (see Section 10). If we do not resolve your concern within 30 days, you may escalate your complaint to the Data Protection Board of India (DPBI).
9. Contact Us
The name and contact details of the Grievance Redressal Officer are provided below. You may contact the Grievance Officer to address any discrepancies and grievances you may have with respect to your personal information with the Company and the same will be redressed expeditiously.
Name
Rahul Boggaram Nagarjuna Gupta
Designation
Nodal/ Grievance Officer, Director
Email Address
contact@yellowmetal.co
Phone Number
9090976076
Office Address
1st Main, 3rd Cross, Opp. Deccan Hospital, Ashwini Extension, Chintamani, Chikkaballapur, Karnataka - 563125
10. Data Protection Officer
For concerns about how we handle personal information under the Digital Personal Data Protection Act, 2023, you may contact our Data Protection Officer. Until a separate DPO email is published, the Nodal / Grievance Officer listed in Section 9 also acts as the Data Protection contact for personal-data complaints.
Name
Rahul Boggaram Nagarjuna Gupta
Email Address
contact@yellowmetal.co
Phone Number
9090976076
If we do not resolve your concern within 30 days, you may escalate your complaint to the Data Protection Board of India (DPBI).
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or how we handle your information. When we make material changes, we will update the version and date at the top of this document and, where required for loan customers, notify you by SMS or WhatsApp to your registered mobile number. We encourage you to review this Policy periodically.