Privacy Policy

Vantablack Capital Consulting Pvt. Ltd. ("Vanta Black", "we", "us") is a financial consultancy with its registered office at M17, 4th Floor, M Block Market, Greater Kailash-II, New Delhi – 110048. We operate this website and the MoneyMitra loan facilitation service described on it.

Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data you give us through this website. That means we decide why and how it is processed, and we are accountable to you for it.

For any question about this policy, or to exercise any right described in it, write to cs@vantablackcapital.in.

We collect only what an advisor needs in order to call you back and understand your requirement. When you submit an enquiry form on this website, we collect:

• Your name.
• Your mobile number.
• What you are interested in — the loan type, or the kind of business funding you need.
• The amount you are looking for, where you choose to tell us.
• Any message you write in the free-text box on the contact form.

Alongside your enquiry we record a small amount of technical information for one purpose only: to be able to prove, later, that you consented to be contacted. That record consists of the date and time, the exact consent wording that was on screen when you agreed, a version number for that wording, your browser's user-agent string, and a shortened form of your IP address.

Your IP address is deliberately truncated before it is stored — to /24 for IPv4, /48 for IPv6. That is enough to show the consent came from a real browsing session and not enough to identify you or track you between visits.

We do not collect your PAN, Aadhaar, bank statements, salary slips, credit report or any other document through this website. The document checklists shown on the loans page are there so you know what to have ready before an advisor calls; nothing is uploaded here.

We use your personal data for these purposes and no others:

• To contact you about the enquiry you submitted, by phone, WhatsApp or email.
• To understand your requirement and explain the options that may be open to you.
• Where you ask us to, to introduce your requirement to one or more of our lending partners.
• To keep a record that you consented to be contacted, which we are required to be able to produce.
• To meet our own legal and record-keeping obligations.

We do not sell your data. We do not rent, trade or share it for anyone else's marketing. We do not use it to build advertising profiles, and we do not send marketing messages unrelated to the enquiry you made.

We process your personal data on the basis of the consent you give when you tick the box on an enquiry form. That consent is specific, informed and unambiguous, and it covers only the purposes listed above.

We store the exact wording that was shown to you at the moment you consented, together with a version number. If we ever change the wording, the version is changed too, and your record keeps the wording you actually agreed to — not the current one.

You may withdraw your consent at any time, and it is as easy to withdraw as it was to give. Write to cs@vantablackcapital.in or call us. Withdrawal takes effect from the moment we receive it; it does not undo processing that already happened lawfully before that point. If you withdraw consent we will stop contacting you about the enquiry, and we will delete your data unless we are required by law to keep it.

Your personal data is shared in only three situations:

• With a lending partner, when you have asked us to take your requirement to one. We tell you which partner before we do it, and we share only what that partner needs to assess your enquiry.
• With the service providers that operate this website and hold our enquiry records on our behalf. They act only on our instructions and may not use your data for their own purposes.
• Where we are required to disclose by law, by a court, or by a regulator.

Once your data reaches a lending partner, that partner becomes responsible for it as an independent Data Fiduciary under its own privacy policy, which it will give you. Our policy governs what we do; theirs governs what they do.

Enquiry records are stored in Google Workspace, operated by Google LLC. The website itself runs on Vercel Inc., which serves it from a data centre in Mumbai. Both are established providers with their own published security and privacy commitments.

Google may process and store data on servers outside India. The Digital Personal Data Protection Act permits transfer of personal data outside India except to countries the Central Government specifically restricts. We do not transfer personal data to any restricted country.

We keep your enquiry only for as long as it serves the purpose you gave it for.

• If your enquiry does not proceed, we delete it within 12 months of your last contact with us.
• If it does proceed to a lending partner, we keep the enquiry for as long as we are actively helping you, and delete it within 12 months of that work finishing. The lending partner keeps its own records of the loan itself, under its own policy.
• We keep the record that you consented for as long as the enquiry exists, because it is the evidence that we were entitled to contact you.
• If you withdraw consent or ask for erasure, we delete your data promptly, keeping only what a law specifically obliges us to retain, and only for as long as that law requires.

The Digital Personal Data Protection Act, 2023 gives you the following rights over your personal data. All of them are free to exercise.

• The right to know what personal data of yours we hold, what we have done with it, and who we have shared it with.
• The right to have inaccurate or incomplete data about you corrected or completed.
• The right to have your data erased when it is no longer needed for the purpose you gave it for, or when you withdraw consent.
• The right to withdraw your consent at any time.
• The right to nominate another person to exercise these rights on your behalf if you die or become unable to act.
• The right to have a grievance about your data heard by us, and to escalate it if you are not satisfied.

To exercise any of these, write to cs@vantablackcapital.in with enough detail for us to find your record — the mobile number you gave us is usually enough. We will respond within 30 days.

If you are not satisfied with how we handle your request, you may complain to the Data Protection Board of India.

We take reasonable security safeguards to prevent personal data being lost, altered, disclosed or accessed without authorisation. These include encrypted transmission, access controls limiting who inside the business can see enquiry records, and collecting as little data as possible in the first place, which is the most effective safeguard of all.

No system is completely secure. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India as the Act requires.

This website and our services are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has submitted an enquiry, write to us and we will delete it.

We use analytics to see which pages people find useful — how many visit, which pages they read, roughly which city they are in. It runs from the moment you arrive.

It sets cookies so it can recognise a returning browser, and your IP address is shortened before it is stored, so it cannot be traced back to your connection. It cannot tell us who you are.

We also advertise on Facebook and Instagram, and we measure those adverts. If you arrive here from one of them, a measurement tool from Meta records that you visited and, if you send us an enquiry, that the enquiry happened. It sets its own cookies and Meta can recognise you from them, because you are likely to be signed in to Meta already — unlike the page-visit measurement above, this one is advertising, and we would rather say so than describe it as something else.

What it does not receive is what you typed. Your name, your number, the amount and the loan type go to us and to no one else. Meta is told that an enquiry was submitted, not who submitted it or what was in it.

Both of these are entirely separate from the enquiry form itself: if you fill one in, those details come to us directly and are covered by the rest of this policy.

The contact page shows a Google map of our office. It loads from Google only once you scroll down to it, and when it does, Google receives your IP address the same way it would if you had opened Google Maps yourself. It sets no cookie of ours and is not connected to your enquiry.

One button turns off both of the above for this browser. It takes effect immediately, nothing further is measured, and the cookies already set are deleted. The site works exactly the same either way.

You can also block cookies in your browser settings, or use private browsing, both of which stop it as well.

We run no advertising pixels, no session recording and no other third-party tracking of any kind.

We may update this policy. The date at the top of the page tells you when it was last changed. Where a change materially affects how we handle data you have already given us, we will tell you directly rather than relying on you to notice.

Questions, requests and complaints about personal data go to Grievance Redressal Officer, Vantablack Capital Consulting Pvt. Ltd., M17, 4th Floor, M Block Market, Greater Kailash-II, New Delhi – 110048. Email cs@vantablackcapital.in. Phone +91 78277 68772, Mon–Sat, 10:00–19:00 IST.