Privacy Policy
Where2invest Limited ("we", "us", "our", or "the Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us through various channels. We understand that your privacy is important to you, and we are dedicated to maintaining the confidentiality and security of your personal data in accordance with applicable laws and regulations.
This Privacy Policy applies to all users of our website, mobile applications, and services, including investors, prospective clients, and visitors to our digital platforms. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our services.
Information We Collect
We collect various types of information to provide you with our investment advisory services and comply with regulatory requirements. The information we collect includes personal information that you voluntarily provide to us, information automatically collected when you use our services, and information we may obtain from third parties.
Personal Information
We collect personal information that you provide directly to us, including but not limited to your name, email address, phone number, residential address, date of birth, PAN number, Aadhaar number, bank account details, income information, investment preferences, risk profile, financial goals, and employment details. We also collect copies of identity documents, address proofs, income proofs, and other KYC (Know Your Customer) documents as required by regulatory authorities.
Financial Information
We collect detailed financial information including your investment history, portfolio details, transaction records, bank statements, tax returns, asset and liability statements, and other financial documents necessary for providing investment advisory services and ensuring compliance with SEBI regulations.
Technical Information
When you visit our website or use our mobile applications, we automatically collect technical information such as your IP address, browser type and version, operating system, device identifiers, location data, website usage patterns, pages visited, time spent on pages, and other similar information through cookies and similar technologies.
How We Use Your Information
We use the collected information for various legitimate business purposes and to comply with our legal and regulatory obligations. Our primary use of your information is to provide you with personalized investment advisory services, process your transactions, and maintain your account.
Service Provision
We use your information to provide investment advisory services, create and manage your investment portfolio, execute transactions, generate reports, provide customer support, communicate with you about your investments, and offer relevant investment opportunities that match your risk profile and investment objectives.
Regulatory Compliance
We use your information to comply with various regulatory requirements including SEBI regulations, Prevention of Money Laundering Act (PMLA), Foreign Exchange Management Act (FEMA), Income Tax Act, and other applicable laws. This includes conducting due diligence, risk assessment, reporting to regulatory authorities, and maintaining records as required by law.
Regulatory Compliance
We use your information to comply with various regulatory requirements including SEBI regulations, Prevention of Money Laundering Act (PMLA), Foreign Exchange Management Act (FEMA), Income Tax Act, and other applicable laws. This includes conducting due diligence, risk assessment, reporting to regulatory authorities, and maintaining records as required by law.
Communication
We use your contact information to communicate with you about your account, investment updates, market insights, regulatory changes, service announcements, and other relevant information. We may also use your information to send you promotional materials about our services, subject to your consent and applicable marketing laws.
Research and Analytics
We may use aggregated and anonymized data to conduct research, analyze market trends, improve our services, develop new products, and enhance user experience. This information is used in a manner that does not identify individual users.
Information Sharing and Disclosure
We understand the sensitive nature of financial information and maintain strict confidentiality standards. We do not sell, trade, or rent your personal information to third parties for their marketing purposes. However, we may share your information in certain circumstances as outlined below.
Service Providers
We may share your information with trusted third-party service providers who assist us in operating our business, such as technology providers, payment processors, custodians, fund houses, registrars, and other financial service providers. These service providers are contractually bound to maintain the confidentiality of your information and use it only for the purposes specified by us.
Regulatory Authorities
We may disclose your information to regulatory authorities such as SEBI, RBI, PMLA authorities, income tax authorities, and other government agencies as required by law or when we believe such disclosure is necessary to comply with legal obligations, protect our rights, or investigate potential violations.
Legal Requirements
We may disclose your information when required by court orders, subpoenas, or other legal processes. We may also disclose information to protect our rights, property, or safety, or the rights, property, or safety of our clients or others, including exchanging information with other companies and organizations for fraud protection.
Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our business, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
Data Security Measures
We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security framework includes both technical and organizational safeguards designed to ensure the confidentiality, integrity, and availability of your data.
Technical Safeguards
We use industry-standard security technologies including encryption for data transmission and storage, secure socket layer (SSL) protocols for website communications, firewalls and intrusion detection systems, regular security assessments and penetration testing, and access controls to limit data access to authorized personnel only.
Organizational Safeguards
We have implemented strict internal policies and procedures governing data access and handling. Our employees and contractors are required to sign confidentiality agreements and receive regular training on data protection best practices. We maintain audit trails of data access and regularly review our security procedures to ensure they remain effective.
Third-Party Security
We require all third-party service providers to implement appropriate security measures and regularly assess their security practices. We only work with vendors who can demonstrate adequate security controls and comply with applicable data protection regulations.
Data Retention and Storage
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws and regulations. Different types of information may have different retention periods based on regulatory requirements and business needs.
Account Information
We retain your account information and transaction records for a minimum period as prescribed by SEBI regulations and other applicable laws. Generally, this information is retained for at least seven years from the date of account closure or last transaction, whichever is later.
KYC Documents
Identity and address verification documents are retained as per regulatory requirements, typically for a period of seven years after the business relationship ends. These documents are stored in secure systems with appropriate access controls.
Communication Records
Records of communications including emails, phone calls, and other correspondence are retained for regulatory and business purposes. These records help us provide better service and comply with audit requirements.
When the retention period expires, we securely delete or destroy your information using appropriate methods to ensure it cannot be recovered or reconstructed.
Your Rights and Choices
You have certain rights regarding your personal information, and we are committed to helping you exercise these rights in accordance with applicable laws.
Access and Correction
You have the right to access your personal information held by us and request corrections if any information is inaccurate or incomplete. You can review and update your information through your account portal or by contacting our customer service team.
Data Portability
Subject to applicable laws and regulations, you may request a copy of your personal information in a structured, commonly used format. We will provide this information within a reasonable timeframe and in compliance with regulatory requirements.
Marketing Communications
You can opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in our emails or contacting us directly. However, you cannot opt out of receiving service-related communications that are necessary for account management and regulatory compliance.
Account Closure
You have the right to close your account and request deletion of your personal information, subject to our regulatory obligations and record retention requirements. Some information may need to be retained for legal and regulatory purposes even after account closure.
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website usage, and provide personalized content. Cookies are small text files stored on your device that help us remember your preferences and improve our services.
Types of Cookies
We use different types of cookies including essential cookies that are necessary for website functionality, analytical cookies that help us understand how visitors use our website, and functional cookies that enable enhanced features and personalization.
Third-Party Cookies
We may use third-party analytics services that place cookies on your device. These services help us analyze website performance and user behavior to improve our services.
International Data Transfers
While we primarily operate within India, we may occasionally transfer your personal information to service providers or partners located outside India. When such transfers occur, we ensure that appropriate safeguards are in place to protect your information.
Transfer Safeguards
We only transfer personal information to countries that provide adequate protection for personal data or to organizations that have implemented appropriate safeguards such as standard contractual clauses or binding corporate rules.
Regulatory Compliance
All international data transfers are conducted in compliance with applicable Indian laws and regulations, including the Information Technology Act and rules made thereunder.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
Parents or guardians who believe their child has provided personal information to us should contact us immediately so we can take appropriate action to remove the information.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you through our website, email, or other appropriate channels.
Notification of Changes
We will provide advance notice of material changes to this Privacy Policy and, where required by law, obtain your consent for such changes. The updated Privacy Policy will be effective from the date specified in the notice.
Review and Acceptance
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.
Contact Information and Grievance Redressal
If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us using the information provided below. We are committed to addressing your concerns promptly and fairly.
Company: Where2invest Limited Registered Office: ASIAN SUNCITY, BLOCK-B, 10TH FLOOR, FLAT NO: 1002, KONDAPUR, HYDERABAD, 500084. Email: info@where2invest.in Phone: 7799770160 Data Protection Officer: Alok Kushwaha : grievances@where2invest.in
Grievance Redressal
We have established a grievance redressal mechanism to address any concerns you may have about the handling of your personal information. You can file a complaint with our Data Protection Officer, who will investigate and respond to your concern within a reasonable timeframe.
Escalation
If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant regulatory authorities or seek legal remedies as provided under applicable laws.
Regulatory Compliance Framework
We operate under a comprehensive regulatory framework that governs the collection, use, and protection of personal information in the financial services sector. Our compliance efforts are designed to meet the highest standards of data protection and regulatory adherence.
SEBI Compliance
We comply with all applicable SEBI regulations including the Investment Advisers Regulations, Portfolio Management Services Regulations, and other relevant circulars and guidelines. This includes maintaining proper records, conducting due diligence, and ensuring appropriate client suitability assessments.
IT Act Compliance
We comply with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which govern the collection, storage, and processing of sensitive personal information.
Other Regulations
We also comply with other applicable laws including the Prevention of Money Laundering Act, Foreign Exchange Management Act, Companies Act, and various RBI guidelines that may apply to our business operations.
This Privacy Policy represents our commitment to protecting your personal information and maintaining the highest standards of data protection in the financial services industry. We will continue to evolve our practices to meet changing regulatory requirements and industry best practices while ensuring that your privacy remains protected.