Privacy policy
ONKIST · Last updated 2026-10-16. This notice explains how we handle personal data when you use onkist.com and our apply journey.
Who we are
ONKIST operates this website as a digital lending platform / lending service provider (LSP) agent that helps you apply for credit products originated by regulated lending partners. We act as a data fiduciary for information you provide on this website. Lending partners (regulated entities) process your application under their own privacy policies once you proceed.
Registered entity: ONKIST
Address: Registered office address — configure NEXT_PUBLIC_REGISTERED_ADDRESS
Contact: support@onkist.com
Collection notice (apply flow)
When you apply, we may collect:
- Identity & contact: name, mobile, email, date of birth, gender, PIN code, PAN, Aadhaar (or DigiLocker-derived identity data).
- Financial & employment: income, employment type, bank account details for disbursal and mandate setup.
- Verification: selfie / liveness, DigiLocker session outcomes, bureau credit information where you consent at the relevant step.
- Technical: device identifier, IP address, browser type, coarse location when you grant permission for fraud prevention.
Purpose: eligibility assessment, KYC / AML compliance, credit underwriting support for the lender, fraud prevention, communication about your application, and regulatory record-keeping.
Sharing: we share data with the regulated lending partner processing your application, and with service providers (KYC, bureau, e-sign, payments) strictly to deliver that application. We do not sell personal data. Marketing uses your data only if you opt in separately.
Retention: kept only as long as needed for the application, partner requirements, and applicable law, then deleted or anonymised per our retention schedule.
Your choices
- Withdraw optional marketing consent anytime via email to support or the grievance officer.
- Request access, correction, or erasure where applicable under the Digital Personal Data Protection Act, 2023 — subject to lending and audit obligations.
- Deny optional permissions (e.g. location) where not strictly required; some steps may not proceed without KYC-related permissions.
Security
We use encryption in transit, access controls, and partner due diligence. No method is 100% secure; report concerns to support@onkist.com.