Introduction

Information We Process

• Personal details such as name, address, date of birth, father's name, mother's name, email address, nationality, marital status, gender and phone numbers;
• Other information such as visa, passport, overseas tax-identification number and overseas country-specific unique identifier
• Current overseas residential address and permanent residential address and proof of overseas address such as address on passport, utility bills, bank statements, national ID cards and photograph
• Transaction details
• Financial Information
• If you are seeking specialized services as permitted under applicable law, then your investment risk appetite and preferences, current investments profile and investment objectives and goals as shared by you
• Information in the nature of your occupation, education and qualifications, annual income and source of income
• Details of nominee, witnesses, guardians which includes their signatures, addresses and relationship with you
• Address proofs like valid passport, driving license, voter identification card, job card issues by issued by government agencies, and PAN card
• IP addresses
• CCTV footage and other information obtained through electronic means

Links

There are links in our website leading to other third party websites. This Privacy Notice does not extend to those websites. We, therefore, would recommend you to read the data safeguarding policies of these websites.

Security

iinvestkar takes the security of your personal data seriously. We have put in place appropriate technical and organizational security measures to protect your personal data and to prevent your personal information from being accidentally lost, used or accessed in an unauthorized manner, altered or disclosed.

Lawful Grounds For Using Your Information

We are permitted to process your personal data in compliance with Data Protection Legislation by relying on one or more of the following lawful grounds:

• You have explicitly agreed to us processing such information for a specific reason.
• The processing is necessary to perform the agreement we have with you or to take steps to enter into an agreement with you.
• The processing is necessary for compliance with legal obligations we have under certain laws.
• The processing is necessary for the purposes of a legitimate interest pursued by us, which might be
  • to provide services to you;
  • to ensure that our customer accounts are well-managed;
  • to prevent, detect, investigate and prosecute fraud and alleged fraud, money laundering and other crimes and to verify your identity in order
  • to protect our business and to comply with laws that apply to us and/or where such processing is a contractual requirement of the services you have requested;
  • to protect our business interests;
  • to ensure that complaints are investigated;
  • to evaluate, develop or improve our services; or
  • to keep our customers informed about relevant services, unless you have indicated at any time that you do not wish us to do so.

Purposes Of Collecting And Processing Your Personal Data

How we use your information

To provide and manage your account(s) and our relationship with you

To give you statements and other information about your account or our relationship

To handle enquiries and complaints

To provide our services to you

For assessment, testing (including systems tests) and analysis (including credit and/ or behaviour scoring), statistical, market and product analysis and market research.

To evaluate, develop and improve our services to you and other customers

To protect our business interests and to develop our business strategies

To contact you, by post, phone, text, email and other digital methods. This may be:

• to help you manage your accounts
• to meet our regulatory obligations
• to keep you informed about products and services you hold with us and to send you information about products or services (including those of other companies) which may be of interest to you.

To collect any debts owing to us

To meet our regulatory compliance and reporting obligations and to prevent, detect, investigate and prosecute fraud and alleged fraud, money laundering and other crimes. We may record your image on CCTV when you visit our premises

To assess any application you make, including carrying out fraud, money laundering, identity, sanctions screening and any other regulatory checks.

To monitor, record and analyse any communications between you and us, including phone calls

To transfer your information to or share it with any third party to whom your account has been or may be transferred following a restructure, sale or acquisition of any group company.

To share your information with India or other relevant tax authorities, Securities and Exchange Board of India and other government authorities / regulators, credit reference agencies, fraud prevention agencies, and India and overseas regulators and authorities

To share your information with our partners and service providers

If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you or we may be prevented from complying with our legal obligations.

Information Sharing

We keep all your personal data confidential. However, in order to be able to service your needs to the best of our ability, we may share any information you provide to us with our group companies and their agents, counterparties and support service or data providers, wherever located. If you have provided information to other members of our group, those entities may also share that information with us.

To help us provide services, your data will be processed internally and externally by other third parties. We use third parties for administrative, servicing, monitoring of your data. We will outsource some services to third parties whom we consider capable of performing the required processing activities so that there is no reduction in the service standard provided to you by us.

Due to the size and complexity of our operations, it is not possible for us to name each of our data recipients in this notice. However, we only share your personal data with categories of recipients given below, whenever required:

• Any revenue service or tax authority including Income Tax Department, if obliged to do so under applicable regulations.
• Overseas regulators and authorities in connection with their duties (such as crime prevention).
• Anyone to whom we may transfer our rights and/or obligations;
• Any other person or organization after a restructure, sale or acquisition, as long as that person uses your information for the same purposes as it was originally given to us or used by us (or both)
• Credit reference, identity and address verification organizations who may record and use your information and disclose it to other lenders, financial services organizations and insurers. Your information may be used by those third parties to make assessments in relation to your creditworthiness for debt tracing.
• Central KYC repositories such as KYC Registration Agencies (KRA), Central KYC Registry (CKYCR) or any other agency prescribed under regulations or PMLA laws.
• Fraud prevention agencies and law enforcement agencies who will use it to prevent fraud and money-laundering and to verify your identity if false or inaccurate information is provided by you and fraud is identified. We, fraud prevention agencies and law enforcement agencies may access and use your information for example, when:

(i) Recovering debt

(ii) Checking details on proposals and claims for all types of insurance

(iii) Other product and service providers for products and services which you would have agreed to avail or being referred to, it includes Stock Exchanges, Depositories, Registrar and Transfer Agents, Asset Management Companies, Portfolio Managers etc.

(iv) Service providers as appointed from time to time for operational support to iinvestkar.

(v) Courier or postal service providers for the purpose of sending of mails to you as a customer.

(vi) Social media websites for our marketing campaigns where permitted.

For further information, please refer to our product specific terms and conditions and application form.

Retention and Disposal of Data and Output

We will keep the information we collect about you on our systems or with third parties for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. or as required to comply with any legal obligations to which we are subject.

Storage of Your Personal Data and Data Security

All information you provide to us is stored in our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping such password confidential. We ask you not to share your password with anyone.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know basis.

They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Marketing Information

We and other members of our group may use your information from time to time to inform you by letter, telephone, text (or similar) messages, email or other electronic means, about similar services which may be of interest to you or them.

We may communicate with you via electronic mail (e-mail). We will never ask you for your password.

Rights over Your Personal Data

You may be entitled under the Data Protection Legislation to the following rights in respect of your personal data:

• Be informed about the processing of your personal data (i.e. for what purposes, what types, to which recipients it is disclosed, storage periods, any third party sources from which it was obtained, confirmation of whether we undertake automated decision-making, including profiling, and the logic, significance and envisaged consequences).
• Object to your personal data being processed for a particular purpose or to request that we stop using your information.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you.
• Request not to be subject to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your personal data.
• Withdraw, at any time, any consent that you have previously given to us for our use of your personal data.
• Ask us to stop or start sending you marketing messages at any time.
• Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
• Request the erasure of your personal data. This enables you to ask us to delete or remove personal data where you think that we do not have the right to process it.

If you would like to contact us to get more information on your rights, wish to exercise your rights, or have any questions about our privacy notice please contact us to protect your privacy and security, we may take reasonable steps to verify your identity before providing you with the details.

Right to Complain To the Supervisory Authority

You have a right to lodge a complaint with the supervisory authority of state of habitual residence for data protection issues.

Changes to This Privacy Notice

The content or services mentioned on our website may be changed in future and consequently we reserve the right to update this Privacy Notice at any time. Any changes we may make to this Privacy Notice in the future will be posted on this page and where appropriate, notified to you by email. We recommend that you re-visit this page regularly and inform us if you do not agree to any term mentioned here.

Security Certificates

iinvestkar Fintech Pvt. Ltd. is an online financial services company. We fully recognise and understand the security implications of being a service provider with whom people trust their money. There are many safeguards we adopt in this regard – some of these are technical, and some are structural.

When it comes to data security, our goal is to ensure that: Your data is stored safely and securely – passwords are one-way encrypted before being stored in the database for high security. All communication with you, or with mutual fund companies and other service providers – are encrypted using the highest standards. Your data is not shared with anyone, unless you have explicitly requested us to do so to fulfil a transaction request. To ensure that we achieve these goals, we have a variety of certifications/trust verifications in place for our firm, both from technical and legal/operational perspectives.

All our communications are encrypted by 256-bit encryption, and our data is hosted with top-tier hosting service providers. Also, our data is continuously backed up to ensure continuity of operations.

Copy Right

("Contents") are intellectual property rights of iinvestkar Fintech Pvt. Ltd., its affiliates or their Licensors. Content available on the Website is protected by copyright, trademark and other intellectual property laws and all ownership rights remain with the respective owners. You may use the Content only for personal, non-commercial purpose. Except as expressly authorized by iinvestkar Fintech Pvt. Ltd. you must not download, copy, extract or distribute the Content in any manner. You agree not to remove or obscure any identification, copyright notices, or other notices or proprietary restrictions from the Content and you agree to provide attribution to iinvestkar Fintech Pvt. Ltd. or its Licensors. Certain sections of the Website may require you to fill up a Website Registration Form.