— PRIVACY POLICY —

The Niphad Urban Co-operative Bank Ltd Niphad

Effective Date: 13 August 2026
Business Name: The Niphad Urban Co-operative Bank Ltd Niphad
Contact Number: 8007456921
Email: Shriramdarunte@hotmail.com
Address: Maruti Banakar Wakad, Nashik, Maharashtra, India – 422305

1. Introduction

The Niphad Urban Co-operative Bank Ltd Niphad (“Bank”, “we”, “us”, or “our”) respects the privacy and confidentiality of individuals who interact with the Bank through its website, applications, digital services, customer-support channels, WhatsApp Business Platform, RCS/business messaging services, and other authorised communication channels.

This Privacy Policy explains how the Bank may collect, use, process, store, protect, disclose, and retain personal information in connection with its services.

The Bank may use WhatsApp and RCS as communication channels for customer service, banking notifications, transaction-related alerts, authentication, security communications, service updates, and other legitimate purposes. Such communications may involve the processing of contact information and message-related information necessary to provide the requested service.

The Bank seeks to process personal information responsibly and in accordance with applicable Indian law, regulatory requirements, contractual obligations, and applicable requirements of technology and messaging providers.

This Privacy Policy should be read together with the Bank’s applicable account terms, service-specific terms, notices, and consent statements.

2. Information We Collect

Depending on the service used and the customer’s relationship with the Bank, The Niphad Urban Co-operative Bank Ltd Niphad may collect or process the following categories of information.

2.1 User Information

This may include:

Name;
Mobile number;
Email address;
Address;
Customer or service identifiers;
Account-related information where required for providing banking services;
Information provided during customer service interactions;
Communication preferences;
Consent or opt-out records; and
Information required for verification, authentication, security, or regulatory compliance.

The Bank will seek to collect information that is relevant and reasonably necessary for the purpose for which it is processed.

2.2 Device Information

When customers use digital services, certain technical information may be processed, such as:

Device type;
Operating system;
Browser information;
Application information;
IP address;
Network information;
Device identifiers where applicable;
Approximate technical location information where required for security or service functionality; and
Diagnostic or technical logs.

2.3 Cookies

The Bank’s website or digital services may use cookies and similar technologies to maintain sessions, improve functionality, analyse usage, remember preferences, and support security.

Details are provided in the Cookies & Tracking Technologies section below.

2.4 Message Data

When a customer communicates with The Niphad Urban Co-operative Bank Ltd Niphad through WhatsApp, RCS, web forms, customer-support channels, or other digital channels, the Bank may process information associated with the communication.

Depending on the service, this may include:

Mobile number;
Message content;
Attachments or documents voluntarily submitted;
Communication timestamps;
Delivery or interaction information;
Customer requests;
Support history;
Consent and preference records; and
Information necessary to investigate fraud, security incidents, complaints, or service issues.

The Bank will process message information only to the extent reasonably necessary for the relevant purpose and subject to applicable law.

3. Purpose of Data Collection

The Bank may collect and process information for purposes including:

Providing banking and customer services;
Processing customer requests;
Sending transaction and service notifications;
Sending security and authentication communications;
Responding to customer-support requests;
Managing customer relationships;
Preventing fraud and unauthorised activity;
Meeting regulatory and legal obligations;
Maintaining records;
Improving digital services;
Managing communication preferences;
Monitoring service performance and security;
Handling complaints and disputes;
Maintaining appropriate audit trails; and
Performing other lawful functions associated with the Bank’s operations.

The Bank will not intentionally collect personal information unrelated to a legitimate and identifiable purpose.

4. Consent for WhatsApp & RCS Data Processing

Where required by applicable law or platform rules, the Bank may obtain customer consent before sending certain communications through WhatsApp or RCS.

Consent may be obtained through a website, application, customer form, digital interaction, account-service process, messaging opt-in, or another appropriate mechanism.

Where a customer chooses to receive communications through WhatsApp or RCS, the Bank may process the relevant contact information and communication data necessary to provide those messages.

Customers may withdraw consent for communications that are based on consent, subject to legal and contractual limitations.

Withdrawal of promotional messaging consent will not necessarily stop mandatory or service-related communications, including security alerts, transaction notifications, legally required notices, or other communications that the Bank is permitted or required to provide.

WhatsApp and RCS communications are also subject to the privacy and terms applicable to the respective platforms and telecom or technology providers.

5. Legal Basis for Processing

The Bank may process personal information on one or more lawful grounds recognised under applicable Indian law, including:

Consent, where consent is required;
Performance of a contract or provision of requested banking services;
Compliance with legal and regulatory obligations;
Prevention, detection, investigation, and response to fraud or security incidents;
Protection of legitimate interests where permitted by law;
Compliance with lawful directions from regulators, courts, government authorities, or law-enforcement agencies; and
Other lawful grounds recognised under applicable legislation.

The exact legal basis may depend upon the nature of the information and the purpose for which it is processed.

6. How We Use Collected Data

The Niphad Urban Co-operative Bank Ltd Niphad may use collected information to provide, operate, secure, and improve its services.

For example, mobile numbers may be used to deliver relevant customer communications. Message information may be used to respond to customer queries. Technical information may be used to protect systems against fraud, abuse, unauthorised access, and security threats.

The Bank may also use information for internal audit, compliance, risk management, dispute resolution, customer-service quality, service improvement, and regulatory reporting.

The Bank will seek to ensure that personal information is not used for purposes materially incompatible with the purpose for which it was collected, except where permitted or required by applicable law.

7. Data Retention & Deletion

The Bank will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal, regulatory, contractual, accounting, audit, security, and banking record-retention requirements.

Certain banking records may need to be retained for specified periods under applicable law or regulatory requirements. Accordingly, deletion may not always be immediately possible following a customer’s request.

Where information is no longer required and there is no legal or legitimate reason to retain it, the Bank may delete, anonymise, securely dispose of, or otherwise de-identify the information in accordance with applicable procedures.

Message records, customer-service records, transaction-related information, and security logs may be retained where necessary to establish, exercise, or defend legal rights, investigate fraud, meet regulatory requirements, or maintain appropriate banking records.

8. Data Sharing with Third Parties

The Bank may engage trusted third-party service providers where necessary to operate its services.

Depending on the service, such third parties may include:

Meta / WhatsApp: Where WhatsApp Business Platform is used, relevant contact and messaging information may be processed through Meta and its infrastructure in accordance with the applicable platform arrangements and policies.

Google / RCS or Technology Providers: Where RCS or related messaging technology is used, certain information may be processed through Google, messaging providers, RCS infrastructure providers, or authorised technology partners, depending on the implementation.

Telecom Operators: RCS and other communications may involve mobile network operators and telecommunications infrastructure providers.

Technology and Cloud Providers: The Bank may use service providers supporting hosting, cybersecurity, software, authentication, analytics, customer support, communications, backup, or infrastructure.

Professional Advisers and Authorities: Information may be disclosed where reasonably necessary to auditors, legal advisers, regulators, courts, law-enforcement authorities, or government agencies, subject to applicable law.

Third-party service providers are expected to process information in accordance with applicable contractual, security, confidentiality, and legal requirements.

The Bank does not sell customers’ personal information as a commercial product.

9. Security Measures & Encryption

The Niphad Urban Co-operative Bank Ltd Niphad takes reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Security measures may include:

Access controls;
Authentication mechanisms;
Encryption or secure transmission where appropriate;
System monitoring;
Logging and audit mechanisms;
Security testing;
Role-based access;
Employee confidentiality obligations;
Backup and recovery measures; and
Incident-response procedures.

No electronic system or transmission method can be guaranteed to be completely secure. Customers should therefore take appropriate precautions, including protecting passwords, PINs, OTPs, devices, and authentication information.

The Bank will not intentionally request confidential authentication credentials through an unsafe or unauthorised channel.

10. Cookies & Tracking Technologies

The Bank’s website may use cookies, pixels, log files, local storage, or similar technologies.

These technologies may be used to:

Keep users signed in where applicable;
Maintain website functionality;
Improve website performance;
Understand general website usage;
Remember preferences;
Detect suspicious or abnormal activity; and
Support security and analytics.

Some cookies may be essential for website functionality, while others may be optional depending on the website’s configuration.

Users may be able to manage cookies through their browser settings. Disabling certain cookies may affect the availability or functionality of parts of the website.

The Bank will seek to use tracking technologies responsibly and consistently with applicable law and its stated purposes.

11. Data Transfer & Storage (India-Based)

The Bank seeks to maintain appropriate controls over personal information and may use infrastructure, service providers, or technology platforms located in India or other jurisdictions where permitted under applicable Indian law and contractual arrangements.

Where personal information is processed or stored outside India through an authorised technology provider, the Bank will take appropriate measures required under applicable law, regulatory requirements, contractual arrangements, and its information-security practices.

For WhatsApp, RCS, cloud, telecom, and other third-party infrastructure, data processing may occur according to the technical architecture and applicable policies of those providers.

Customers acknowledge that digital communications may necessarily involve third-party telecommunications and technology infrastructure.

12. User Rights (Access, Correction, Deletion)

Subject to applicable law and the Bank’s legal and regulatory obligations, individuals may have rights relating to their personal information.

These may include the ability to:

Request information about personal data processed by the Bank;
Request correction of inaccurate or incomplete information;
Request deletion of information where deletion is legally permissible;
Withdraw consent where processing is based on consent;
Manage certain communication preferences; and
Raise concerns or complaints regarding the processing of personal information.

Requests should be made using the Bank’s official contact information.

The Bank may need to verify the identity of the requester before responding to a request involving personal information.

A request may be declined or limited where retention or processing is required by law, regulation, contractual obligations, fraud-prevention requirements, security requirements, or other legally recognised grounds.

13. Policy for Children

The services of The Niphad Urban Co-operative Bank Ltd Niphad are primarily intended for customers and persons who are legally eligible to use the relevant banking service.

The Bank does not knowingly seek to collect personal information from children in violation of applicable Indian law.

Where a banking service involves a minor or requires a guardian or authorised representative, information may be collected and processed in accordance with applicable banking rules, legal requirements, consent requirements, and the terms of the relevant service.

Parents or lawful guardians who believe that information relating to a child has been improperly collected may contact the Bank using the contact details provided in this Privacy Policy.

14. WhatsApp & RCS Compliance

The Bank aims to use WhatsApp Business Platform and RCS only for legitimate business communication.

The Bank will seek to comply with applicable messaging-platform policies, including requirements concerning consent, message quality, prohibited content, user experience, privacy, security, and appropriate business identification.

Customers should be cautious of fraudulent accounts pretending to represent The Niphad Urban Co-operative Bank Ltd Niphad.

The Bank will not intentionally ask customers to disclose OTPs, passwords, PINs, card security codes, or other confidential authentication credentials through an unsolicited WhatsApp or RCS message.

If a customer receives a suspicious message claiming to represent the Bank, the customer should independently verify the communication through an official Bank channel.

Third-party platform processing is also governed by the relevant provider’s applicable privacy terms and policies.

15. Data Breach & Security Incident Management

If the Bank becomes aware of a personal-data or information-security incident, it will assess and respond to the incident in accordance with applicable law, regulatory requirements, internal security procedures, and contractual obligations.

Where notification is legally required, the Bank will make appropriate notifications to relevant authorities and/or affected individuals in accordance with applicable requirements.

The Bank may temporarily restrict or suspend a digital service where necessary to protect customers, systems, or information.

16. Data Sharing in Response to Lawful Requests

The Bank may disclose personal information where required or permitted by law.

Such disclosures may include responses to:

Courts;
Regulatory authorities;
Government departments;
Law-enforcement agencies;
Statutory authorities;
Tax authorities;
Auditors;
Fraud-investigation bodies; or
Other legally authorised entities.

The Bank will seek to limit such disclosures to information reasonably necessary for the applicable purpose, subject to legal requirements.

17. Third-Party Links and Services

The Bank’s website or communications may contain links to third-party websites, applications, platforms, or services.

The Bank is not responsible for the privacy practices of third-party websites that it does not control.

Customers should review the privacy policies and terms of any third-party service before providing personal information.

In particular, customers using WhatsApp, RCS, telecom services, payment platforms, or other third-party applications should understand that those platforms may independently process certain information under their own applicable terms and privacy policies.

18. Updates to Privacy Policy

The Bank may update this Privacy Policy periodically to reflect changes in law, regulation, technology, services, messaging platforms, security practices, or business operations.

The revised Privacy Policy may be published on the Bank’s website with a revised effective date.

Where required by applicable law, significant changes may be communicated through an appropriate notice or communication channel.

Customers are encouraged to periodically review this Privacy Policy.

19. Governing Law (India)

This Privacy Policy shall be governed by the laws of India.

The processing of personal information may be subject to applicable Indian data-protection, information-technology, banking, co-operative banking, telecommunications, consumer-protection, and other applicable laws and regulations, as amended from time to time.

Nothing in this Privacy Policy limits any mandatory privacy or data-protection rights available to an individual under applicable law.

Any dispute concerning this Privacy Policy shall be handled in accordance with applicable Indian law and the jurisdiction of the competent courts or authorities, subject to any mandatory statutory mechanism.

20. Contact Information

For questions, privacy requests, corrections, deletion requests, communication preferences, or concerns relating to the processing of personal information, individuals may contact:

The Niphad Urban Co-operative Bank Ltd Niphad
Contact Number: 8007456921
Email: Shriramdarunte@hotmail.com
Address: Maruti Banakar Wakad, Nashik, Maharashtra, India – 422305

When making a privacy request, individuals should provide sufficient information for the Bank to identify the relevant request while avoiding unnecessary disclosure of confidential banking credentials.

Important Security Notice: Customers should never send passwords, PINs, OTPs, card CVVs, complete card credentials, or other confidential authentication information by ordinary email or through an unsolicited messaging conversation.

End of Privacy Policy