Kerala Financial Corporation
Last Updated: 17.10.2026
1. Introduction
Kerala Financial Corporation (hereinafter referred to as “the Corporation”) is committed to respecting the privacy of visitors to its official website and protecting personal data processed through its website and associated online services.
This Privacy Policy explains the categories of information that may be collected, the purposes for which such information may be used, the circumstances in which it may be disclosed, and the safeguards adopted by the Corporation in handling such information.
This Policy shall be read subject to applicable laws and regulations governing data protection, information technology, cybersecurity and the functioning of the Corporation.
2. Scope of the Policy
This Policy applies to personal data processed through the Corporation’s official website and
relevant online facilities, including information voluntarily provided by visitors through feedback
forms, contact forms and other interactive features.
3. Information We Collect
Visitors may generally access publicly available information on the website without providing
personal information.
Depending on the nature of the website service used, the Corporation may collect the following
categories of information:
a. Technical information: Information such as IP address, browser type, operating system,
access timestamps, requested pages and technical logs may be recorded automatically for website
administration, security, troubleshooting and usage analysis.
b. Information voluntarily provided: Where a visitor submits a feedback form, enquiry or other
communication, the Corporation may collect information such as name, email address, contact
details, designation, organisation and the contents of the communication, as applicable.
c. Service-specific information: Where a visitor uses an online facility that requires
identification or additional information, the relevant information may be collected and processed
for the purposes of that facility, subject to the applicable notice, terms and legal requirements.
Corporation shall endeavour to collect only such information as is reasonably necessary for the
relevant purposes and permitted under applicable law.
4. Purposes of Collection and Use
Information collected through the website may be used, as applicable, for the following purposes:
1. Providing information regarding the Corporation’s services, schemes and activities.
2. Responding to enquiries, feedback and requests submitted by visitors.
3. Maintaining and improving the functionality, accessibility and performance of the website.
4. Monitoring website usage and diagnosing technical issues.
5. Detecting and preventing unauthorised access, fraudulent activity, misuse and cybersecurity incidents.
6. Complying with applicable statutory, regulatory, judicial and governmental requirements.
7. Carrying out other purposes that are lawful and appropriately disclosed to the individual concerned.
Personal data shall not be used for an unrelated purpose where such use is inconsistent with
applicable legal requirements.
5. Cookies and Similar Technologies
The website may use cookies or similar technologies to support essential website functions,
maintain security and, where implemented, analyse website usage.
Visitors may manage or disable cookies through their browser settings, subject to the possibility
that certain website features may not function properly as a result.
6. Sharing and Disclosure of Information
Corporation does not sell personal data to third parties.
Personal data may, where necessary and legally permissible, be disclosed or made accessible in
the following circumstances:
- To authorised website hosting, maintenance, technical support, security or other service
providers engaged by the Corporation, to the extent necessary for the services entrusted
to them. - To competent courts, statutory authorities, regulators, law-enforcement agencies or governmental authorities where disclosure is required or authorised by applicable law or a lawful direction.
- Where necessary for the establishment, exercise or defence of legal claims, or for other lawful purposes permitted under applicable law.
Corporation shall endeavour to ensure that authorised service providers are subject to appropriate
confidentiality, security and data-protection obligations.
Any disclosure or processing of personal data shall be subject to applicable legal requirements and
the safeguards appropriate to the nature of the information concerned.
7. Data Security
Corporation shall endeavour to maintain reasonable technical and organisational safeguards to
protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
Access to personal data shall be restricted, as appropriate, to authorised personnel and service
providers who require such access for legitimate purposes.
Notwithstanding these safeguards, no method of electronic transmission, storage or processing can
be guaranteed to be completely secure. Corporation shall address security incidents in accordance
with applicable legal requirements and its established procedures.
8. Retention and Deletion of Information
Personal data shall be retained only for the period necessary to fulfil the purposes for which it was
collected or for such longer period as may be required or permitted under applicable laws,
regulations, record-retention requirements or lawful directions.
Upon expiry of the applicable retention period, personal data shall be securely deleted,
anonymised or otherwise dealt with in accordance with applicable legal requirements, subject to
any lawful requirement to preserve the information.
9. Third-Party Websites
The Corporation website may contain links to websites or online services operated by third parties
for the convenience of visitors.
Such websites may be governed by their own privacy policies and terms of use. Corporation does
not control the independent privacy practices of such third parties and recommends that visitors
review the applicable terms before providing personal information.
This clause does not exclude any responsibility that may arise under applicable law in respect of
the Corporation’s own activities or its authorised service providers.
10. Grievance Redressal and Contact
Any enquiry, request or complaint relating to this Privacy Policy or the handling of personal data
may be submitted to:
Designated Officer: DGM (IT)
Department: IT
Email: it@kfc.org
Postal Address: Kerala Financial Corporation, Vellayambalam, Thiruvananthapu
Corporation shall endeavour to address such communications in accordance with its applicable
procedures and the time limits prescribed by law.
11. Limitation of Website Information
The information published on the website is intended primarily for general informational purposes.
While the Corporation endeavours to maintain accurate and up-to-date information, inadvertent
errors, omissions or temporary technical interruptions may occur.
Visitors should independently verify material particulars before relying on website information for
transactions or decisions. Services, schemes and facilities shall be governed by their applicable
terms, sanction conditions, official notifications and statutory requirements.
Nothing in this Policy shall exclude or limit any liability, obligation or remedy that cannot lawfully
be excluded or limited.
12. Amendments to this Policy
The Corporation may revise this Privacy Policy from time to time to reflect changes in its website,
operational practices or applicable legal requirements.
The revised Policy shall be published on the website with the updated revision date.
Visitors are encouraged to review this Policy periodically. If you have any questions or comments
please contact us