This Privacy Policy explains how PARKNPERKS Private Limited (“PARKNPERKS”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use our mobile application, website, and related services (collectively, the “Platform”). We act as the Data Fiduciary in respect of your personal data and process it in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made thereunder, and other applicable Indian law.
1. Who We Are
PARKNPERKS Private Limited is a company incorporated under the Companies Act, 2013 (CIN U62099MH2026PTC472301), with its registered office at 1009, 10th Floor, Arc One By Lotus Developers, Opp. Tanishq Showroom, Near City Mall, Andheri West, Mumbai, Maharashtra-400053, India. For any privacy-related queries, contact our Grievance Officer / Data Protection Officer using the details in Section 15.
2. Scope and Consent
This Policy applies to all users of the Platform. By creating an account, accessing, or using the Platform, you consent to the collection and processing of your personal data as described here. Where we rely on your consent, you may withdraw it at any time as set out in Section 10; withdrawal does not affect processing carried out before withdrawal.
3. Information We Collect
We collect the following categories of data, only to the extent necessary for the purposes described in this Policy:
- Identity & account data: name, date of birth, gender, email address, mobile number, username, password, and profile preferences.
- KYC & verification data: government-issued identifiers and verification results processed through authorised KYC/identity partners and India’s Digital Public Infrastructure (e.g., Aadhaar-based offline/eKYC consent flows, PAN, DigiLocker). We do not store full Aadhaar numbers except as expressly permitted by law, and identity verification is performed via authorised partners.
- Financial & transactional data: savings goals and contributions, PARKNPERKS Credit and voucher activity, transaction history, partner-bank instrument references, and payment metadata. Card and bank credentials are handled by regulated payment partners and are not stored by us.
- Behavioural & ParkScore signals: savings consistency, streak activity, in-app engagement patterns and interaction signals (such as session timing, notification response latency, and usage cadence) used to compute your ParkScore. Where any such signal constitutes sensitive personal data, we process it with your consent and apply enhanced safeguards.
- Device & usage data: device identifiers, IP address, operating system, app version, log data, and diagnostics.
- Location data: approximate or precise location, where you grant permission, to surface relevant experiences and prevent fraud.
- Communications & support data: messages, feedback, and records of your interactions with our member support function.
- Cookies & similar technologies: as described in Section 12 and our Cookie Policy.
4. How We Use Your Data
We use your data to: create and administer your account; verify identity and prevent fraud; operate savings goals, PARKNPERKS Credit, vouchers, status tiers, and experiential rewards; compute and update your ParkScore; facilitate savings and credit products offered by partner banks and regulated entities; process payments and service fees; provide member support and grievance redressal; personalise and improve the Platform; send service and (with consent) marketing communications; and comply with legal, regulatory, tax, and audit obligations. We process data on the lawful bases recognised under the DPDP Act, including your consent and certain legitimate uses permitted by law.
5. ParkScore and Automated Processing
ParkScore is a proprietary, technology-generated behavioural signal derived from your savings discipline and engagement. It is not a credit information report and is not a regulated credit score. Where ParkScore or eligibility outcomes are generated through automated means, you may request meaningful information about the logic involved and seek human review by contacting us. Any credit product is issued solely by a partner bank or regulated entity, subject to that entity’s own assessment and terms.
6. How We Share Your Data
We do not sell your personal data. We share it only as necessary, with appropriate safeguards and data-processing agreements, with:
- Partner banks and regulated financial institutions, for savings, deposit, and credit facilities you choose to use;
- Closed System PPI / card-infrastructure and voucher-processing partners that enable PARKNPERKS Credit and vouchers;
- Payment processors and gateways that handle your transactions;
- KYC, identity-intelligence, AML, and fraud-prevention partners;
- Technology service providers, including cloud hosting, analytics, recommendation, and artificial-intelligence processors that operate on our behalf under contract;
- Experience, hospitality, travel, and affiliate partners, solely to fulfil bookings and rewards you request;
- Regulators, law-enforcement, courts, and authorities, where required by law; and
- Acquirers or successors in the event of a merger, restructuring, or business transfer, subject to this Policy.
7. Cross-Border Transfers
Some of our processors (for example, certain cloud, analytics, or AI service providers, and overseas experience partners) may process data outside India. Where this occurs, we transfer data only to jurisdictions permitted under applicable law and impose contractual safeguards to protect it.
8. Data Retention
We retain personal data only for as long as necessary to provide the Platform, satisfy the purposes in this Policy, and meet legal, regulatory, tax, and audit requirements, after which it is deleted or anonymised. KYC and transaction records are retained for the periods mandated by applicable financial-sector law.
9. Security
We implement reasonable security practices and procedures consistent with the IT Act and aligned to recognised standards (such as ISO/IEC 27001 controls), including encryption in transit, access controls, and monitoring. No method of transmission or storage is fully secure; in the event of a personal-data breach, we will notify affected users and the competent authority as required by law.
10. Your Rights
Subject to applicable law, you may: access and obtain a summary of your personal data; correct, complete, or update it; request erasure; nominate another individual to exercise your rights in the event of death or incapacity; withdraw consent; and grieve any concern. To exercise these rights, contact our Grievance Officer (Section 15). We may need to verify your identity before acting on a request.
11. Children
The Platform is intended only for individuals aged 18 years and above. We do not knowingly offer services to, or knowingly collect personal data from, minors. If we learn that we have collected data from a minor without lawful consent, we will delete it.
12. Cookies
We use cookies and similar technologies to operate the Platform, remember preferences, measure performance, and improve your experience. You can manage non-essential cookies through our consent banner and your device settings. See our Cookie Policy for details.
13. Third-Party Links and Services
The Platform may link to third-party sites and services that operate under their own privacy policies. We are not responsible for their practices and encourage you to review them.
14. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified through the Platform or by other reasonable means. Continued use after the effective date of an update constitutes acceptance.
15. Grievance Officer / Data Protection Officer
Grievance Officer & Data Protection Officer: Mr. Soumya Ranjan Das (interim)
Email: das@parknperks.com (a dedicated grievance@parknperks.com / privacy@parknperks.com may be designated)
Address: 1009, 10th Floor, Arc One By Lotus Developers, Opp. Tanishq Showroom, Near City Mall, Andheri West, Mumbai, Maharashtra-400053
We will acknowledge complaints within the timelines prescribed by law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India under the DPDP Act.