Privacy Policy

General Provisions

This Privacy Policy determines the procedures and conditions for the collection, processing, storage, and protection of personal data by the Operator from users of this website, in strict compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable in India. By accessing or using this website, users expressly agree to the terms and conditions set forth in this Policy.

Definitions

For the purposes of this Policy:

“Operator” means the legal entity responsible for the management and operation of this website.
“User” means any natural person accessing or using the website.
“Personal Data” refers to any information that relates to an identified or identifiable natural person, as defined under applicable Indian law.
“Sensitive Personal Data or Information” shall have the meaning assigned to it under Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Collection of Personal Data

The Operator may collect the following types of Personal Data directly from Users, as necessary for the legitimate operation of the website:

Identification information (such as name, date of birth, and gender)
Contact details (such as address, email address, and mobile number)
Account registration details and authentication data
Financial information (such as bank account, payment instrument details)
Device and technical usage data (such as IP address, browser type, device identifiers)
Any other information voluntarily provided by the User for verification or in compliance with legal requirements

Personal Data may be collected through registration forms, account creation, website usage, transactions, and direct communication with the Operator.

Legal Basis and Purposes for Processing

Processing of Personal Data is performed strictly in accordance with Indian law and is based on the following legal grounds:

Execution of contractual obligations between the User and the Operator
Compliance with applicable legal and regulatory obligations
Legitimate interests of the Operator, including security, fraud prevention, and service improvement
User consent, where required by law

Collected Personal Data may be used for the following purposes:

Verification of User identity and eligibility
Provision of services and website functionality
Processing of transactions and payments
Compliance with anti-money laundering (AML) and know your customer (KYC) regulations
Detection, prevention, and investigation of unlawful activities
Communications related to the services provided
Maintenance of legal and regulatory records

Disclosure of Personal Data

The Operator does not disclose Personal Data to third parties except:

To service providers and partners who process data on behalf of the Operator, strictly for the purposes described herein and subject to binding contractual obligations
To relevant authorities, regulatory bodies, or law enforcement agencies as required by law
In circumstances where disclosure is necessary to protect the legitimate interests of the Operator or to protect the safety of users or third parties

All disclosures are made in strict adherence to the requirements of the Information Technology Act, 2000.

Data Retention

Personal Data is retained by the Operator only for as long as it is necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Data retention periods are determined in accordance with applicable Indian law and regulatory requirements.

Data Security Measures

The Operator implements and maintains reasonable security practices and procedures, as mandated by Indian law, to prevent unauthorized access, loss, misuse, alteration, or disclosure of Personal Data. These measures include, but are not limited to:

Access controls and authentication
Data encryption and secure storage
Regular security assessments and audits
Physical security of data storage locations
Employee training and confidentiality agreements

User Rights

Subject to applicable Indian law, Users have the following rights regarding their Personal Data:

The right to access Personal Data held by the Operator
The right to request correction or update of inaccurate or incomplete data
The right to withdraw consent (where processing is based on consent)
The right to object to processing, where provided by law

Requests for the exercise of these rights may be submitted in writing to the Operator using the contact details provided below. The Operator will respond to all requests in accordance with timeframes stipulated under Indian law.

Cross-Border Transfer of Data

If Personal Data is transferred outside India, the Operator ensures such transfers are carried out in compliance with the Information Technology Act, 2000 and related regulations, including implementing adequate safeguards to protect the data.

Updates to the Policy

The Operator reserves the right to amend or update this Privacy Policy at any time, in accordance with applicable Indian law. Users are advised to review this Policy periodically to remain informed of any changes. Continued use of the website following the publication of changes constitutes acceptance of those changes.

Contact Information

For any requests, complaints, or questions regarding this Privacy Policy or the Operator’s data processing practices, Users may contact:

4th Floor, Cyber Towers, HITEC City, Hyderabad 500081, Telangana, India

Email: [email protected]

Telephone: +91 40 1234 5678