Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how FlexLease Solutions Private Limited (CIN U66190MH2026PTC473888), whose registered office is at 401, 4th Floor, Shree Satyam Apartments, Raghunath Mhatre Road, Near Dahisar Bridge, Dahisar West, Mumbai 400068 ("FlexLease", "we", "us"), handles personal data collected through this website, flexleasesolutions.com. We offer equipment leasing to businesses in India under the Mintifi brand. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the data fiduciary for the personal data described here, and you are the data principal.

The Digital Personal Data Protection Rules, 2025 were notified in November 2025 and brought parts of the Digital Personal Data Protection Act, 2023 into force; most obligations and rights apply from 13 May 2027. Until 13 May 2027 we also handle your data in line with section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

You may ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to hello@flexleasesolutions.com.

This policy is written to be read alongside our Terms of Use and Grievance Redressal Policy.

1. Personal data we collect

Details you give us in the enquiry form. When you ask for an indicative quote, we collect your name, company name, work email address, phone number, the type of equipment you want to lease and the approximate value band of the asset. If you tick the consent box and submit the form, we also record that you consented, and when.

Details collected automatically. When your enquiry is submitted, we receive the browser and device identifier (the "user agent") your browser sends, trimmed to a short length, and the date and time of the submission. The company that hosts this website, and Google (see section 3), also receive technical data such as your IP address, browser type, the pages you visit and the page that referred you, as an ordinary part of serving web pages and running the advertising tag.

What we do not collect through this website. We do not ask for identity documents, PAN, Aadhaar, bank details or financial statements on this website. If you proceed to a lease, we will ask for the documents we need at that stage, and we will tell you what they are and why when we ask.

2. Why we use your data

We use the details in your enquiry to:

• contact you about equipment leasing, including to prepare and discuss an indicative structure for the asset you describe;
• assess whether and how we can support your requirement;
• keep a record of the enquiry and your consent, and respond to your questions, requests and complaints;
• prevent spam and misuse of the form; and
• understand which pages and campaigns lead to enquiries, so that we can improve this website and our advertising (see section 3).

Our basis for using the details you submit in the enquiry form is your consent. The Google advertising tag described in the cookies section currently loads without a separate consent prompt; we will add one before 13 May 2027. You may withdraw your consent at any time (section 8). We also process personal data where the DPDP Act or another law allows or requires it, for example to comply with a legal obligation or to respond to a court order.

3. Cookies, advertising and conversion tracking

This website loads the Google tag (Google Ads account AW-788322378) on every page, including the legal pages. We use it for advertising measurement. In particular:

• When a page loads, your browser contacts Google servers to fetch the tag. Google receives your IP address, browser and device information, and the address of the page you are on.
• Where you reached this website by clicking one of our Google adverts, the tag may store a click identifier and set cookies on your device to remember that the visit came from an advert, so that a later enquiry can be attributed to it. These cookies are set by Google's advertising technology, including on our own website domain.
• When you arrive from an advertisement, we record the advertising click identifiers and campaign tags in the page address (for example Google's gclid and Meta's fbclid) and store them with your enquiry, so we can measure which campaigns lead to enquiries and tell the advertising platform when an enquiry becomes business.
• When an enquiry is submitted successfully, the website sends Google a "conversion" event recording that an enquiry happened, together with a nominal value and currency. We do not send the contents of your form (your name, email address, phone number or company) to Google as part of this event.
• Google acts under its own terms and privacy policy for the data it receives. You can see and control how Google personalises advertising at adssettings.google.com, and you can read Google's policies at policies.google.com.

We do not use cookies or tracking tools on this website for any purpose other than the advertising measurement described above. The website does not currently show a cookie banner. You can block or delete cookies, and block the Google tag, through your browser settings or a tracking-protection tool. Doing so will not stop you reading this website or submitting an enquiry. If you have a question or an objection about this tracking, write to us at the address in section 10.

4. Who we share personal data with

We do not sell your personal data. We share it only as follows:

• Service providers acting on our behalf, such as the providers of our cloud hosting, database, website delivery and email delivery. They may use your data only to provide their service to us, and we require them to keep it secure and confidential.
• Google, as described in section 3.
• Our group company. Our Grievance Officer is employed by a Mintifi group company, and that group company may access enquiry data to handle grievances and to provide shared support services, under our instructions.
• Our directors, employees and advisers who need the information to respond to your enquiry, and professional advisers (for example legal, audit and tax advisers) bound by duties of confidentiality.
• Authorities, courts and law-enforcement agencies, where we are required to do so by law or by a lawful order, or to protect our legal rights.
• A successor business, if all or part of our business is reorganised, merged or transferred, subject to this policy continuing to protect your data or to you being told of any change.

Our database is hosted in Mumbai, India. Google and our website-delivery provider may process data in other countries, including the United States. The DPDP Act permits transfer of personal data outside India except to countries the Central Government may restrict by notification, and we will comply with any such restriction.

5. How long we keep your data

We keep personal data only for as long as it is needed for the purpose for which you gave it, or for as long as the law requires. Enquiry details are kept while we follow up on your requirement. Enquiries that do not lead to a lease are deleted or anonymised 24 months after our last contact with you. Lease, KYC and accounting records are kept for the periods required by law, including 8 years under the Companies Act, 2013. If you withdraw consent, we will stop using your data for the purpose you consented to and will erase it unless we are required by law to retain it.

6. How we protect your data

We use reasonable security safeguards appropriate to the data we hold, including encrypted connections to this website, controlled access to our systems and records, and contractual obligations on our service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

7. Children

This website is for businesses and is not directed at anyone under 18 years of age. We do not knowingly collect personal data from a child. If you believe a child has submitted details to us, please contact us (section 10) and we will delete them.

8. Your rights under the DPDP Act

As a data principal you have the right to:

• Withdraw your consent at any time. You can withdraw your consent at any time by emailing hello@flexleasesolutions.com with the subject 'Withdraw consent'. We will stop processing your details for that purpose once we receive it. Withdrawal does not affect processing done before you withdrew.
• Access a summary of the personal data we process about you, the processing activities, and the identities of others with whom we have shared it.
• Correction, completion and updating of data that is inaccurate, misleading or incomplete.
• Erasure of your personal data, unless we need to keep it for a specified purpose or because the law requires it.
• Grievance redressal. You may complain to our Grievance Officer at any time and we will respond within the timelines in our Grievance Redressal Policy.
• Nominate another person to exercise your rights on your behalf if you die or become unable to exercise them.

To exercise a right, email the Grievance Officer (section 10) from the email address you used in the form, or tell us enough for us to identify your enquiry. We may ask for information needed to confirm your identity before we act, and we will tell you what we have done.

If you are not satisfied with our response, or we do not respond in time, you may complain as follows. You must first use our grievance process (section 13(3) of the Digital Personal Data Protection Act, 2023). If we have not resolved your complaint, or have not responded within the time stated above, you may complain to the Data Protection Board of India through its official channels once the relevant provisions are in force (13 May 2027).

Please also note that the DPDP Act places duties on data principals, including to provide only accurate information and not to make false or frivolous complaints.

9. Links to other websites

This website may link to other websites. We do not control them and are not responsible for their privacy practices. Please read their policies before you give them any personal data.

10. Contact and Grievance Officer

Grievance Officer: Poorvi Shah
Email: poorvi.shah@mintifi.com
General contact: hello@flexleasesolutions.com
Registered office: FlexLease Solutions Private Limited, 401, 4th Floor, Shree Satyam Apartments, Raghunath Mhatre Road, Near Dahisar Bridge, Dahisar West, Mumbai 400068

11. Changes to this policy

We may update this policy when our practices or the law change, including as the DPDP Act and the DPDP Rules, 2025 apply in full from 13 May 2027. We will publish the updated policy on this page and change the "Last updated" date. If a change affects how we use personal data you have already given us, we will tell you and, where the law requires, ask for your consent again.

12. Governing law

This policy is governed by the laws of India, including the DPDP Act and the Information Technology Act, 2000 and the rules made under them. Subject to your rights to complain to the Data Protection Board of India, the courts at Mumbai have exclusive jurisdiction over disputes arising from it.