Privacy Policy

Vantablack Capital Consulting Pvt. Ltd. ("Vanta Black", "we", "us") is a financial consultancy with its registered office at M17, 4th Floor, M Block Market, Greater Kailash-II, New Delhi – 110048. We operate this website and the MoneyMitra loan facilitation service described on it.

Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data you give us through this website. That means we decide why and how it is processed, and we are accountable to you for it.

For any question about this policy, or to exercise any right described in it, write to cs@vantablackcapital.in.

We collect only what an advisor needs in order to call you back and understand your requirement. When you submit an enquiry form on this website, we collect:

• Your name.
• Your mobile number.
• What you are interested in — the loan type, or the kind of business or real estate funding you need.
• The amount you are looking for, where you choose to tell us.
• Any message you write in the free-text box on the contact form.
• On the loan enquiry form, also: your date of birth, your credit score range, whether you have applied for a loan in the last three months and with which lenders, and your employment type.

Alongside your enquiry we record a small amount of technical information for one purpose only: to be able to prove, later, that you consented to be contacted. That record consists of the date and time, the exact consent wording that was on screen when you agreed, a version number for that wording, your browser's user-agent string, and a shortened form of your IP address.

Your IP address is deliberately truncated before it is stored — to /24 for IPv4, /48 for IPv6. That is enough to show the consent came from a real browsing session and not enough to identify you or track you between visits.

We do not collect your PAN, Aadhaar, bank statements, salary slips, credit report or any other document through this website. The document checklists shown on the loans page are there so you know what to have ready before an advisor calls; nothing is uploaded here.

We use your personal data for these purposes and no others:

• To contact you about the enquiry you submitted, by phone, WhatsApp or email.
• To understand your requirement and explain the options that may be open to you.
• Where you ask us to, to introduce your requirement to one or more of our lending partners.
• To keep a record that you consented to be contacted, which we are required to be able to produce.
• To meet our own legal and record-keeping obligations.
• If, and only if, you tick the separate optional box, to help Google and Meta find new customers whose needs resemble yours, and to ask those platforms not to show our advertising to you — described in its own section below.

We do not sell your data. We do not rent or trade it, and we do not share it for anyone else's marketing. We do not send you marketing messages unrelated to the enquiry you made. The one thing that is not automatic is the advertising box: it is never pre-ticked, and if you leave it blank your details are never sent to an advertising platform.

We process your personal data on the basis of the consent you give when you tick the box on an enquiry form. That consent is specific, informed and unambiguous, and it covers only the purposes listed above.

We store the exact wording that was shown to you at the moment you consented, together with a version number. If we ever change the wording, the version is changed too, and your record keeps the wording you actually agreed to — not the current one.

You may withdraw your consent at any time, and it is as easy to withdraw as it was to give. Write to cs@vantablackcapital.in or call us. Withdrawal takes effect from the moment we receive it; it does not undo processing that already happened lawfully before that point. If you withdraw consent we will stop contacting you about the enquiry, and we will delete your data unless we are required by law to keep it.

The loan enquiry form carries a second tick box, separate from the one that lets us contact you. It is optional, it is never pre-ticked, and leaving it blank has no effect at all on your enquiry, on how quickly we call you, or on the options we are able to show you.

If you tick it, your details are used for exactly three things. First, as a starting point: Google and Meta look for new people whose profile resembles the people who have enquired with us — an audience of people who are similar, but who are not you — so that our advertising reaches others with a comparable need. Second, as a suppression list: we give the same details to those platforms and ask them not to deliver the advertising to the people on it. Third, for measurement: we may tell those platforms what happened after you enquired — for example, that the enquiry went on to become a loan application or a loan — so that they can report which of our adverts led to real outcomes. They are told that the outcome happened, not the details of your loan.

We do not deliberately advertise to you. Filling in this form does not put you on a marketing list and is not a way of getting our adverts to follow you around the internet — the second use above exists to prevent exactly that. What we cannot honestly promise is that you will never see one: suppression lists take time to take effect inside Google's and Meta's systems, they match on scrambled details that do not always match at all, and a broad campaign may still reach you for a short period. We ask for you to be excluded. We cannot guarantee the result, because it is not ours to guarantee.

Before any of it is sent, each detail is converted into an irreversible cryptographic hash. Google and Meta receive that hash, not your name, your number or your date of birth, and it is of use to them only for matching against an account they already hold. Under the terms we are bound by, they may use what we send only to assemble the audience or produce the measurement we asked for.

This consent is separate, so you can withdraw it on its own and keep the rest. Write to cs@vantablackcapital.in saying you want to be removed from our advertising audiences, and we will remove you and stop including you in future ones. Your enquiry, and our ability to keep helping you with it, are unaffected.

Your personal data is shared in only three situations:

• With a lending partner, when you have asked us to take your requirement to one. We tell you which partner before we do it, and we share only what that partner needs to assess your enquiry.
• With the service providers that operate this website and hold our enquiry records on our behalf. They act only on our instructions and may not use your data for their own purposes.
• Where we are required to disclose by law, by a court, or by a regulator.

Once your data reaches a lending partner, that partner becomes responsible for it as an independent Data Fiduciary under its own privacy policy, which it will give you. Our policy governs what we do; theirs governs what they do.

Enquiry records are stored in Google Workspace, operated by Google LLC. The website itself runs on Vercel Inc., which serves it from a data centre in Mumbai. Both are established providers with their own published security and privacy commitments.

Google may process and store data on servers outside India. The Digital Personal Data Protection Act permits transfer of personal data outside India except to countries the Central Government specifically restricts. We do not transfer personal data to any restricted country.

We keep your enquiry only for as long as it serves the purpose you gave it for.

• If your enquiry does not proceed, we delete it within 12 months of your last contact with us.
• If it does proceed to a lending partner, we keep the enquiry for as long as we are actively helping you, and delete it within 12 months of that work finishing. The lending partner keeps its own records of the loan itself, under its own policy.
• We keep the record that you consented for as long as the enquiry exists, because it is the evidence that we were entitled to contact you.
• If you withdraw consent or ask for erasure, we delete your data promptly, keeping only what a law specifically obliges us to retain, and only for as long as that law requires.

The Digital Personal Data Protection Act, 2023 gives you the following rights over your personal data. All of them are free to exercise.

• The right to know what personal data of yours we hold, what we have done with it, and who we have shared it with.
• The right to have inaccurate or incomplete data about you corrected or completed.
• The right to have your data erased when it is no longer needed for the purpose you gave it for, or when you withdraw consent.
• The right to withdraw your consent at any time.
• The right to nominate another person to exercise these rights on your behalf if you die or become unable to act.
• The right to have a grievance about your data heard by us, and to escalate it if you are not satisfied.

To exercise any of these, write to cs@vantablackcapital.in with enough detail for us to find your record — the mobile number you gave us is usually enough. We will respond within 30 days.

If you are not satisfied with how we handle your request, you may complain to the Data Protection Board of India.

We take reasonable security safeguards to prevent personal data being lost, altered, disclosed or accessed without authorisation. These include encrypted transmission, access controls limiting who inside the business can see enquiry records, and collecting as little data as possible in the first place, which is the most effective safeguard of all.

No system is completely secure. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India as the Act requires.

This website and our services are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has submitted an enquiry, write to us and we will delete it.

We use analytics to see which pages people find useful — how many visit, which pages they read, roughly which city they are in. It runs from the moment you arrive.

It sets cookies so it can recognise a returning browser, and your IP address is shortened before it is stored, so it cannot be traced back to your connection. It cannot tell us who you are.

We also advertise on Facebook and Instagram, and we measure those adverts. If you arrive here from one of them, a measurement tool from Meta records that you visited and, if you send us an enquiry, that the enquiry happened. It sets its own cookies and Meta can recognise you from them, because you are likely to be signed in to Meta already — unlike the page-visit measurement above, this one is advertising, and we would rather say so than describe it as something else.

What it does not receive is what you typed. Your name, your number, the amount and the loan type go to us and to no one else. Meta is told that an enquiry was submitted, not who submitted it or what was in it.

Both of these are entirely separate from the enquiry form itself: if you fill one in, those details come to us directly and are covered by the rest of this policy.

The contact page shows a Google map of our office. It loads from Google only once you scroll down to it, and when it does, Google receives your IP address the same way it would if you had opened Google Maps yourself. It sets no cookie of ours and is not connected to your enquiry.

One button turns off both of the above for this browser. It takes effect immediately, nothing further is measured, and the cookies already set are deleted. The site works exactly the same either way.

You can also block cookies in your browser settings, or use private browsing, both of which stop it as well.

We run no advertising pixels, no session recording and no other third-party tracking of any kind.

We may update this policy. The date at the top of the page tells you when it was last changed. Where a change materially affects how we handle data you have already given us, we will tell you directly rather than relying on you to notice.

Questions, requests and complaints about personal data go to Grievance Redressal Officer, Vantablack Capital Consulting Pvt. Ltd., M17, 4th Floor, M Block Market, Greater Kailash-II, New Delhi – 110048. Email cs@vantablackcapital.in. Phone +91 92665 16600, Mon–Sat, 10:00–19:00 IST.