Privacy Policy
Last Updated: August 21, 2026 · Effective from: August 21, 2026
We Collect Purposefully
Only the information needed to assess your funding requirements and connect you with the right lenders.
We Share Selectively
Your data is only shared with lender partners (banks/NBFCs) when you seek a funding solution - with your knowledge.
We Protect Rigorously
Industry-standard encryption, access controls, and secure storage protect every data point you share with us.
You Stay in Control
Under India's DPDP Act 2023, you have the right to access, correct, and withdraw consent for your personal data.
Who We Are
SME Paisa Consulting & Advisory ("SME PAISA", "we", "our", or "us") is a financial advisory and debt facilitation firm headquartered in India. We are not a bank, NBFC, or a lender. We are a consulting and advisory company that assists Indian small and medium-sized enterprises (SMEs / MSMEs) in identifying, structuring, and accessing business funding - including term loans, working capital facilities, equipment finance, debt syndication, and other credit solutions - through our network of 50+ banking and NBFC partners.
Our services facilitate funding in the range of ₹2 Crore to ₹500 Crore for eligible businesses across sectors including manufacturing, logistics, healthcare, retail, and more.
This Privacy Policy applies to all information collected through our website (smepaisa.com), enquiry forms, phone consultations, email correspondence, and any engagement with our advisory team.
Information We Collect
We collect information in the following categories to provide you with accurate and effective funding advisory services:
A. Personal Identification Information
- Full name and designation / role within your business
- Mobile number and email address
- City and state of operation
- PAN card number (for credit assessment purposes, collected only when formally proceeding)
B. Business Information
- Business / company name and legal entity type (Pvt. Ltd., LLP, Partnership, Proprietorship, etc.)
- Industry sector and sub-sector
- Annual turnover, EBITDA, and profit figures
- Existing banking relationships and outstanding credit facilities
- Funding requirement: amount, purpose, and desired structure
- GST registration number, UDYAM registration number
- Financial documents shared voluntarily (Audited financials, bank statements, ITR)
C. Website & Technical Data
- IP address, browser type, and device type
- Pages visited, time spent, and referral source
- Enquiry form submissions and contact requests
- Cookies and session data (see Cookies section below)
We do not collect UID / Aadhaar numbers, bank account credentials, card details, or any government identity document numbers through our website. Such information, if required, is only handled offline under strict confidentiality protocols.
How We Use Your Data
All information collected is used strictly for the purposes it was provided. We use your data to:
- Understand your business profile and funding requirement
- Assess eligibility across our network of 50+ lenders (banks and NBFCs)
- Prepare and present a structured funding proposal or Information Memorandum (IM) on your behalf
- Match you with the most appropriate lender(s) for your specific credit requirement
- Respond to your enquiries and provide ongoing advisory support
- Send you relevant updates on funding opportunities, policy changes, or market developments (only with your consent)
- Comply with applicable laws, RBI guidelines, and anti-money laundering (AML) obligations
- Improve our website experience and service delivery
We will never use your data to make automated credit decisions, to solicit you without consent, or to engage in practices that could harm your business interests.
Data Sharing & Disclosure
We understand that your business and financial information is sensitive. We operate on a need-to-know basis and share your information only in the following circumstances:
With Lender Partners (Banks & NBFCs)
When you formally engage us to source funding, we prepare and submit your profile and business case to relevant banking and NBFC partners from our network. This is the core of our service. We will always inform you of which lenders we approach on your behalf and obtain your go-ahead before submitting your case. Our lender partners include public sector banks, private banks, small finance banks, and top-tier NBFCs.
With Service Providers
We use trusted third-party services (such as email service providers, cloud storage, website hosting, and analytics tools) to operate our business. These providers are bound by contractual confidentiality obligations and may not use your data for any other purpose.
Legal & Regulatory Requirements
We may disclose information to law enforcement agencies, regulators, or courts if required to do so under applicable Indian law, a court order, or a valid regulatory directive - to the minimum extent required by law.
We do not sell, rent, trade, or commercially exploit your personal or business data to any third party for marketing or advertising purposes - ever.
Our website uses cookies and similar tracking technologies to improve your browsing experience and understand how visitors use our site. The types of cookies we use are:
- Essential Cookies: Required for the website to function correctly (e.g., form submissions, navigation). These cannot be disabled.
- Analytics Cookies: Help us understand which pages are visited most, how long users stay, and where they come from. We use tools like Google Analytics for this purpose.
- Preference Cookies: Remember your settings and choices across sessions.
You can control or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect your experience on certain parts of our website. Our website does not currently serve advertising cookies or third-party behavioral tracking for commercial purposes.
Data Security
Protecting your business and personal data is a core responsibility we take seriously. We implement the following security measures:
- HTTPS encryption on all website pages and data transmissions
- Restricted access controls: only authorised team members can access client files
- Secure cloud storage with access audit trails
- Strict no-sharing policies for client financial documents shared in confidence
- Regular review of data handling practices across our internal operations
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use secure networks and refrain from sharing sensitive documents over unsecured channels.
In the event of a data breach that is likely to cause harm to your rights and interests, we will notify you and the relevant authority as required under the Digital Personal Data Protection Act, 2023 (DPDP Act).
Your Rights Under the DPDP Act, 2023
India's Digital Personal Data Protection Act, 2023 ("DPDP Act") grants you specific rights as a Data Principal. You have the right to:
- Access: Request a summary of the personal data we hold about you and how it is being used.
- Correction: Request correction or update of any inaccurate or incomplete personal data.
- Erasure (Right to be Forgotten): Request deletion of your personal data where processing is no longer necessary, subject to applicable legal retention obligations.
- Withdrawal of Consent: Withdraw consent for processing your data at any time. This will not affect the legality of processing done before withdrawal.
- Grievance Redressal: Raise a grievance with our designated Grievance Officer and expect a resolution within 30 days.
- Nomination: Nominate another individual to exercise your data rights in the event of your death or incapacity.
To exercise any of these rights, please contact us at working.capital@smepaisa.com. We will respond within 30 days of receiving your verified request.
Data Retention
We retain your personal and business data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law:
- Enquiry data (name, email, requirement): Retained for up to 12 months if the engagement does not proceed, then securely deleted or anonymised.
- Active client data (financial documents, case files): Retained for the duration of the advisory engagement plus 7 years thereafter, in compliance with record-keeping requirements under Indian tax and financial law.
- Website analytics data: Retained in aggregated, anonymised form for up to 24 months.
- Email correspondence: Retained for up to 7 years for business record purposes.
Children's Privacy
Our services are intended exclusively for business owners, promoters, directors, and finance professionals - adults operating commercial enterprises. Our website is not directed at, and we do not knowingly collect personal data from, individuals below the age of 18 years. If we become aware that a minor has submitted data to us, we will delete such information promptly.
Contact Us & Grievance Redressal
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, you may reach us through the following channels:
For formal grievances under the DPDP Act, 2023, you may also submit a written complaint addressed to our Grievance Officer. We will acknowledge your grievance within 3 business days and aim to resolve it within 30 days.
Grievance Officer
Vishant Jha - Founder & CEO, SME Paisa Consulting & Advisory
working.capital@smepaisa.comChanges to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
Ready to Access the Right Funding Solution for Your MSME?
Share your business details - our advisory team will map the right capital structure and connect you with the right partners, fast.
