Privacy Policy

Who is responsible?

The Data Fiduciary for a particular activity is the RKFS legal entity that determines why and how the personal data is processed. The exact legal name, registered address and privacy contact details will be inserted here after confirmation. Different group entities or regulated intermediaries may act as separate Data Fiduciaries for their respective services.

What information may be collected?

Depending on the service, this may include your name, phone number, email address, account or enquiry details, KYC information, identity and tax identifiers, bank/demat details, application information, communications and technical data such as log, device and cookie information. We will explain any additional information requested at the point of collection.

Why do we use it?

We may use personal data to respond to enquiries, create or maintain accounts, provide requested services, process IPO-related application instructions, complete KYC and regulatory checks, communicate service updates, prevent fraud, secure our systems, resolve complaints, meet legal obligations and improve website functionality. We will not use personal data for an unrelated purpose without an appropriate lawful basis.

Consent and choices

Where consent is the applicable basis, we will present a clear notice describing the personal data and purpose, and provide a way to give, manage or withdraw consent. Withdrawal will not affect processing already lawfully undertaken and may affect our ability to provide a service that depends on the relevant data.

Sharing and service providers

Personal data may be shared with authorised group entities, banks, exchanges, depositories, registrars, KYC agencies, technology providers, customer-support vendors, auditors, professional advisers or public authorities where necessary for the stated purpose, contractual service, legal obligation or other permitted basis. We use appropriate contractual and security controls for processors and recipients.

Retention

We retain personal data only for as long as required for the stated purpose, applicable regulatory and statutory obligations, dispute resolution, audit and legitimate record-keeping. Retention periods differ by data category and service. An approved retention schedule and deletion process will be published here.

Your rights and requests

Subject to applicable law and verification, you may request information about processing, correction or updating, erasure where applicable, grievance redressal and withdrawal of consent where consent is the basis. You may also nominate another individual where the Act provides for this. We may need to retain certain information where required by law.

Children

The website and services are not intended to invite children to submit personal data independently. Where processing of a child's personal data is involved, RKFS must implement the applicable verifiable parental-consent and child-protection requirements, subject to statutory exemptions and rules.

Security and breach response

We use reasonable security safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. No internet transmission or storage system can be guaranteed to be completely secure. If a personal data breach occurs, we will follow applicable notification and response requirements.

Cookies and analytics

The website uses essential cookies and, if you enable them, analytics or preference cookies. Non-essential cookies are not activated before your choice. See our Cookie Policy.

Contact and grievance

Privacy contact / Grievance Officer: [name or role to be confirmed]. Email: [monitored privacy email to be confirmed]. Postal address: [registered address to be confirmed].

Updates

• We may update this notice when our services, processing practices or legal obligations change. The revised notice will display its effective date.
• This document is a drafting template. It must be aligned with the actual data map, consent flows, retention schedule, vendor contracts, regulated-entity obligations and final legal advice before being published.