Privacy Policy
Privacy Policy Version: 2.0 | Last Updated: August 20, 2025
Your Privacy Matters
Introduction to Privacy Policy
This privacy policy (the "Privacy Policy") applies to your use of the website of Lark Finserv hosted at larkfinserv.com, the Services (as defined under the Lark Finserv "Terms of Use") and Lark Finserv applications on mobile platforms (Android, Blackberry, Windows Phone, iOS etc.) (collectively ("LARK FINSERV" or "WEBSITE")), but does not apply to any third-party websites that may be linked to them, or any relationships you may have with the businesses listed on Lark Finserv.
Key Definitions
- "We", "our", "us" — Lark Finserv
- "You", "your", "User" — You, as a user of Lark Finserv
- "Personal Information" — Information that personally identifies you, such as name, phone, email, and related data
We have implemented reasonable security practices and procedures that are commensurate with the information assets being protected and with the nature of our business. While we try our best to provide security that is better than the industry standards, because of the inherent vulnerabilities of the internet, we cannot ensure or warrant complete security of all information that is being transmitted to us by you.
Important
Information We Collect and How We Use It
We collect, receive and store your Personal Information. If you provide your third-party account credentials ("Third Party Account Information") to us, you understand that some content and information in those accounts may be transmitted to your account with us if you authorise such transmissions and that Third Party Account Information transmitted to us shall be covered by this Privacy Policy.
Note
How We Use Your Information:
- Enable you to use the services provided by us
- Help promote a safe service and calibrate consumer interest
- Inform you about online offers and updates
- Troubleshoot problems and customize user experience
- Detect and protect against error, fraud and criminal activity
Marketing Communications
You authorize Lark, its affiliates, business associates, and their representatives to send you promotional communications via telephone, SMS, email, WhatsApp, or other electronic modes.
Partner Collaboration
We use your personal data with lending partners to facilitate loan applications and with third-party partners to provide relevant products and services.
Account Information
If you create an account to take advantage of the full range of services offered on Lark Finserv, we ask for and record Personal Information such as your name, email address and mobile number.
Sensitive Data Collection
We may collect and store your Sensitive Personal Data including financial information (credit card, debit card details, bank account), KYC documents as per RBI regulations, and other applicable information that you opt to save in your account.
Communication Preferences:
- Email updates, news, and newsletters (if subscribed)
- Transaction alerts and SMS notifications based on preferences
- Contact on behalf of other users for social collaboration
Your Control
Data Erasure Rights
Customer Information
We also store customer information such as address, mobile number, Third Party Wallet details, Card Details and email address for customers making payments through Lark Finserv checkouts.
Information Sharing
Activity
We record information relating to your use of Lark Finserv, such as:
- • Searches you undertake
- • Pages you view
- • Browser type and IP address
- • Location and timestamp information
- • Requested and referring URLs
Usage Purpose
Transfer of Information
Lark Finserv may share your Personal Information with third-party vendors, consultants, and service providers ("Service Providers") engaged by us in connection with delivering our services. These parties require access to specific information to perform their contractual duties.
We also partner with third-party providers to offer services that may be relevant to you. Data sharing with these entities is performed securely and only upon obtaining your prior consent.
Third-Party Service Providers List
| Third Party Name | Data Shared | Purpose |
|---|---|---|
| DeepView | PAN Number | PAN Verification for identity compliance |
| MF Central | Phone Number, PAN Number | To Pledge funds in Mutual Funds portfolios |
| CAMS | Phone Number, PAN Number | To Pledge funds in Mutual Funds portfolios |
| KFinTech | Phone Number, PAN Number | To Pledge funds in Mutual Funds portfolios |
| TeleCRM | As a customer support, email is sent to the user in order to communicate and support |
Security & Confidentiality
We Do
- • Share with authorized service providers
- • Ensure third-party protection obligations
- • Share only as per this Privacy Policy
- • Obtain your prior consent
We Don't
- • Sell or rent your information
- • Share for marketing without consent
- • Violate this Privacy Policy
- • Share for commercial purposes without explicit consent
We do not sell or rent your Personal Information to third parties for marketing or other commercial purposes without your explicit consent. All information is shared in accordance with this Privacy Policy and relevant regulatory guidelines.
Data Retention
We retain your Personal Information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations, including guidelines issued by the Reserve Bank of India (RBI).
Retention Timelines (examples):
Once the data retention period expires, we will securely delete, anonymize, or archive your data in compliance with applicable laws.
Data Deletion and Consent Withdrawal Request
Users have the right to request the complete deletion of their personal data and/or withdraw their consent for the processing of their personal data at any time. Upon receipt of a valid request sent from the user's registered email address to help@larkfinserv.com, we commit to securely delete all related personal information and cease further processing based on consent, within 1 business day, subject to applicable legal and regulatory requirements.
How to Request
- • Send an email from your registered email address
- • Send to: help@larkfinserv.com
- • Include "Data Deletion / Consent Withdrawal Request" in the subject line
- • Provide relevant account details for identity verification
Processing Timeline
- • Request acknowledgment: Immediate
- • Deletion / withdrawal completion: Within 1 business day
- • Confirmation email: After completion
- • Permanent removal from all applicable systems, databases, and backups
Important Note
Once the deletion and/or consent withdrawal process is completed, users will be notified via email confirming that their data has been permanently removed or that consent-based processing has been discontinued.
Data Destruction Protocol
Lark Finserv stores all customer data on Amazon Web Services (AWS), including Amazon RDS. Data destruction follows RBI guidelines and NIST SP 800-88 standards.
AWS Security Standards
- • AWS securely sanitizes storage media
- • Cryptographically erases data when resources are deleted
- • Follows AWS Media Sanitization Policy
- • NIST SP 800-88 compliance
RDS Data Management
- • RDS data including snapshots automatically purged
- • Rendered unrecoverable when deleted
- • Application-level deletion performed
- • No residual copies remain
Compliance Framework
- • RBI Guidelines: Reserve Bank of India data protection standards
- • NIST SP 800-88: Guidelines for Media Sanitization
- • AWS Standards: Industry-leading cloud security practices
- • Multi-layer Approach: Infrastructure + Application level deletion
User Rights
Data Breach Handling
In the event of a data breach, Lark Finserv follows the incident response framework prescribed under RBI guidelines and applicable data protection laws. Our breach-handling protocol includes the following steps:
Immediate Identification & Containment
Immediate identification and containment of the security breach to prevent further unauthorized access or data compromise.
Service Suspension
Suspension of affected services without delay to mitigate potential risks and protect user data.
Rapid Notification
Notification of the affected users and relevant authorities within 30 minutes of becoming aware of the breach, in accordance with RBI-mandated timelines.
Internal Investigation
Internal investigation to determine the root cause and extent of the breach.
Enhanced Security
Implementation of enhanced security measures and protocols to address vulnerabilities and prevent recurrence.
Ongoing Monitoring
Ongoing monitoring and audits to ensure continued security compliance.
Questions or Concerns?
If you have any questions or concerns about our data breach response procedures, please contact us at help@larkfinserv.com.
Third-Party Collection via DLA
In compliance with RBI guidelines for Digital Lending Applications (DLAs), we clarify that certain third-party service providers and lending partners may collect Personal Information directly from you for the purpose of processing loan applications or providing financial services.
Compliance Standards
Questions About This Policy?
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.