We collect personal data that is necessary to provide our financial distribution services and comply with applicable regulations. The data we collect includes:
| Data Category | Specific Data Points Collected |
|---|---|
| Identity Data | Full name, date of birth, gender, photograph, PAN card number, Aadhaar number (last 4 digits only), passport/voter ID |
| Contact Data | Residential address, email address, mobile number, WhatsApp number |
| Financial Data | Bank account details (account number, IFSC, bank name), net worth, income range, investment portfolio details, existing investments, liabilities |
| KYC Data | KYC status, KRA registration details, FATCA/CRS declarations, PEP (Politically Exposed Person) status, AML/CFT related data |
| Transaction Data | Investment transactions, redemptions, switches, SIP details, folio numbers, NAV history, portfolio valuation |
| Risk Profile Data | Risk tolerance assessment responses, investment goals, investment horizon, financial objectives |
| Technical Data | IP address, browser type and version, device information, pages visited, time spent on website (via cookies) |
| Communication Data | Records of correspondence, emails, phone calls (with consent), WhatsApp messages related to financial services |
We use your personal data for the following purposes:
| Purpose | Details & Legal Basis |
|---|---|
| Service Delivery | Processing your investment transactions, portfolio management, account maintenance — Contractual necessity |
| KYC & AML Compliance | Fulfilling Know Your Customer and Anti-Money Laundering requirements under PMLA 2002 and SEBI/AMFI regulations — Legal obligation |
| Regulatory Reporting | Submitting mandatory reports to SEBI, AMFI, IRDAI, Income Tax authorities as required — Legal obligation |
| Account Statements | Generating and sending transaction confirmations, account statements, and CAS — Contractual necessity |
| Risk Assessment | Assessing your risk profile and recommending suitable investment products — Legitimate interest |
| Service Communication | Sending portfolio updates, regulatory notices, scheme information, market updates — Legitimate interest |
| Grievance Redressal | Addressing and resolving your complaints and queries — Legal obligation and legitimate interest |
| Newsletter / Blog | Sending educational content, market updates, and newsletter — Consent-based (you can unsubscribe at any time) |
| Fraud Prevention | Detecting and preventing fraud, unauthorized transactions, and suspicious activities — Legal obligation and legitimate interest |
| Data Type | Retention Period & Reason |
|---|---|
| KYC Documents | 8 years — PMLA 2002, SEBI KYC norms |
| Transaction Records | 8 years — SEBI Regulations, AMFI Guidelines |
| Investment Documents | 8 years — SEBI / AMFI compliance |
| Correspondence Records | 8 years — Regulatory and legal requirements |
| Grievance Records | 5 years — SEBI SCORES requirements |
| Website / Technical Logs | 12 months — Internal security purposes |
| Newsletter Subscription | Until unsubscription — Consent-based |
We share your personal data only when necessary and only with the following authorised parties:
Our website www.fintopiafinserv.com uses cookies to improve user experience and analyse website traffic. Cookies are small text files stored on your device.
| Cookie Type | Purpose & Details |
|---|---|
| Essential Cookies | Required for website functionality — cannot be disabled. Include session management and security tokens. |
| Analytics Cookies | Help us understand how visitors use our website (pages visited, time spent). Data is anonymised. You can opt out via browser settings. |
| Preference Cookies | Remember your settings and preferences for a better experience on return visits. |
You can control cookies through your browser settings. Disabling essential cookies may affect website functionality. We do not use cookies for advertising or cross-site tracking.
Request a copy of all personal data we hold about you at any time, free of charge.
Request correction of any inaccurate, incomplete, or outdated personal data we hold.
Request deletion of your personal data, subject to mandatory regulatory retention requirements.
Contact our Data Protection Officer for any data privacy concern — response within 15 working days.
Withdraw consent for non-mandatory data processing (e.g. newsletter) at any time without affecting past processing.
Under DPDPA 2023, nominate a person to exercise your data rights in case of death or incapacity.
Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from minors. Minor investors can invest only through a natural guardian in accordance with SEBI / AMFI guidelines for minor folios. The guardian is responsible for providing accurate information.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date on this page and notify registered investors via email. Your continued use of our services after the effective date constitutes acceptance of the updated policy.
This Privacy Policy is governed by the laws of India. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of courts in Kanchrapara, West Bengal. For data protection grievances, you may also approach the Data Protection Board of India as constituted under DPDPA 2023.
