Privacy & Data Protection

Privacy Policy

This Privacy Policy explains how personal information is collected, used, processed, stored, disclosed, and protected when individuals access this website and related research services.

Effective Date: [DD/MM/YYYY]
Last Updated: [DD/MM/YYYY]
Version: 1.0

Our Commitment to Investor Privacy

Dipak Das is committed to protecting the privacy, confidentiality, and security of investor information and implementing appropriate safeguards to ensure responsible handling of personal information.

1. Introduction

Privacy Policy

Effective Date: [DD/MM/YYYY]

Last Updated: [DD/MM/YYYY]

Version: 1.0

Dipak Das ("Research Analyst", "we", "our", "us") is committed to protecting the privacy and security of personal information collected through this website and related services.

This Privacy Policy explains how personal information is collected, used, processed, stored, disclosed and protected when individuals access this website, submit onboarding information, complete risk profiling, provide KYC documents, participate in video consent procedures, subscribe to research services or communicate with us.

By accessing this website or using related services, you acknowledge and accept the practices described in this Privacy Policy.

2. Legal Identity of the Research Analyst

Research Analyst Name:
Dipak Das

SEBI Registration Number:
[Insert Number]

BSE RAASB Enlistment Number:
[Insert Number]

Registered Address:
[Insert Registered Address]

Official Email:
[Insert Official Email]

Contact Number:
[Insert Official Contact Number]

3. Applicability of this Privacy Policy

This Privacy Policy applies to:

  • Website visitors
  • Prospective clients
  • Existing subscribers
  • Individuals completing onboarding procedures
  • Investors using grievance redressal channels
  • Users communicating through email, WhatsApp or support channels
  • Individuals accessing research-related services through this website

4. Information We Collect

Identity Information

  • Full Name
  • Date of Birth
  • PAN Details
  • Government-issued Identification Documents
  • Photograph
  • Signature

Contact Information

  • Email Address
  • Mobile Number
  • Residential Address
  • Communication Preferences

Financial Profile Information

  • Risk Profiling Responses
  • Investment Experience
  • Trading Experience
  • Financial Objectives
  • Suitability Assessment Information

KYC Information

  • PAN Card
  • Identity Proof
  • Address Proof
  • Verification Records
  • Regulatory Compliance Documentation

Video Consent Information

  • Video Recordings
  • Audio Recordings
  • Consent Confirmations
  • Investor Awareness Declarations

Technical Information

  • IP Address
  • Browser Information
  • Device Information
  • Operating System
  • Session Information
  • Cookies and Usage Data

5. Purpose of Collection

Risk Profiling

To assess investor suitability before providing access to research services.

Regulatory Compliance

To comply with applicable SEBI regulations, legal obligations and regulatory requirements.

Identity Verification

To verify client identity and prevent impersonation, fraud or unauthorized access.

Service Delivery

To provide research services, onboarding support and client assistance.

Investor Protection

To maintain records required for audit, dispute resolution and regulatory inspection purposes.

Communication

To communicate important service updates, onboarding information and compliance-related notices.

6. Risk Profiling Data Policy

Risk profiling is conducted before research access is activated.

Risk profiling information is collected solely for suitability assessment and investor protection purposes.

Risk profiling responses are not sold, rented or disclosed to third-party marketers.

Research access becomes active only after successful completion of all required onboarding procedures.

7. Video Consent and Recording Policy

Video consent procedures may be conducted during onboarding for:

  • Investor awareness confirmation
  • Risk acknowledgement
  • Identity verification
  • Consent verification
  • Regulatory compliance
  • Dispute resolution purposes

Video consent recordings may be retained as evidence of onboarding completion, investor acknowledgement and compliance requirements.

Video recordings are not used for advertising, promotional activities or commercial marketing purposes.

Video Consent Retention and Usage Restrictions

Video recordings collected during onboarding, consent verification, investor awareness confirmation or regulatory compliance procedures shall be used solely for compliance, audit, record-keeping, dispute resolution and investor protection purposes.

Such recordings shall not be publicly disclosed, published, distributed, sold or used for promotional, advertising or marketing activities without explicit legal authorization or consent.

8. Digital KYC and Verification Policy

KYC documentation may be collected and verified in accordance with applicable legal and regulatory requirements.

Access to KYC records is restricted to authorized personnel and compliance functions.

Verification records may be maintained for audit, regulatory inspection and investor protection purposes.

9. Payment Information Policy

Payments, when activated, shall only be accepted through officially authorized payment channels disclosed by the Research Analyst.

We do not request payments through unauthorized personal accounts, undisclosed third-party accounts or unofficial payment channels.

Payment processing may be facilitated through regulated third-party payment service providers.

Users are advised to verify payment instructions only through officially published communication channels of the Research Analyst.

Authorized Payment Channels Regulated Service Providers Fraud Prevention Official Communication Only

10. Communication Records Policy

We may retain records of:

Email
WhatsApp
Support
Complaints
Grievances

Such records may be retained for service administration, dispute resolution and regulatory compliance purposes.

11. Cookies and Analytics

This website may use cookies and similar technologies to:

Improve website performance
Maintain security
Enhance user experience
Analyze website traffic and usage

Analytics tools may be used to understand website performance and visitor interaction.

Users may control cookie preferences through their browser settings.

12. Information Sharing and Disclosure

No Sale of Personal Information

Personal information is not sold, licensed, rented, monetized or commercially shared with third parties for advertising or marketing purposes.

Information may be disclosed only where necessary.

Regulatory Authorities

  • SEBI
  • Stock Exchanges
  • Government Authorities
  • Law Enforcement Agencies

Service Providers

  • Hosting Providers
  • Cloud Infrastructure Providers
  • Email Service Providers
  • Payment Processing Providers
  • Compliance Service Providers

Such disclosures shall be limited to legitimate operational, legal or regulatory requirements.

13. Data Retention

Personal information may be retained for periods required by:

  • Applicable Laws
  • Regulatory Requirements
  • Audit Obligations
  • Compliance Reviews
  • Investor Protection Requirements
  • Dispute Resolution Requirements

Records Maintained

  • KYC Documents
  • Risk Profiling Records
  • Video Consent Records
  • Communication Records
  • Complaint Records

Record Preservation and Regulatory Retention

Certain records, including onboarding documentation, KYC records, consent records, communication records, complaint records and compliance-related documentation may be preserved for periods required under applicable laws, regulatory requirements, audit obligations and investor protection frameworks.

Such records may continue to be retained even after termination of services where legally required.

14. Data Security Measures

Reasonable technical and organizational safeguards are implemented to protect information against unauthorized access, misuse, disclosure or loss.

Access Controls
Authentication Procedures
Encryption Technologies
Secure Infrastructure
Record Management Controls

No electronic system can guarantee absolute security.

Data Storage and Hosting

Personal information, KYC records, risk profiling records, consent records and onboarding documentation may be stored using secure local storage systems, cloud infrastructure, backup systems and service providers selected by the Research Analyst.

Storage and processing practices are designed to comply with applicable legal, regulatory, operational and data protection requirements.

Appropriate safeguards are implemented to protect information irrespective of the storage medium utilized.

Access to such records is restricted to authorized personnel, compliance functions and service providers engaged for legitimate operational purposes.

15. Data Breach Notification

In the event of a security incident affecting personal information, appropriate legal, regulatory and notification procedures shall be followed in accordance with applicable requirements.

Reasonable measures shall be undertaken to investigate, contain and address any identified incident.

Where required under applicable law, affected individuals and relevant authorities may be notified in accordance with prescribed procedures.

Incident Response Timeline

Stage 1IdentifyIncident
Stage 2ContainIncident
Stage 3InvestigateIncident
Stage 4RegulatoryNotification
Stage 5Resolution& Monitoring

16. User Rights

Subject to applicable law, users may:

  • Request access to personal information
  • Request correction of inaccurate information
  • Withdraw consent where legally permissible
  • Submit grievances regarding data handling practices
  • Request deletion of personal information where legally permissible

Certain records may continue to be retained where retention is required for regulatory, compliance, audit, investor protection or dispute resolution purposes.

Requests may be submitted through the contact details provided in this Policy.

Withdrawal of Consent

Where permitted under applicable law, users may withdraw previously provided consent by submitting a written request.

Withdrawal of consent may affect the availability of certain services where processing of information is necessary for regulatory compliance or service delivery.

17. Data Fiduciary Statement

For purposes of applicable Indian data protection laws, the Research Analyst acts as the Data Fiduciary and processes personal information for legitimate regulatory, operational and compliance purposes.

Personal information is processed only for lawful purposes connected with the services offered through this website.

Data Fiduciary Responsibility

Lawful Processing
Regulatory Compliance
Operational Necessity
Investor Protection
Data Security

18. Investor Grievance and Complaint Handling

Investors may raise concerns through the following escalation framework:

Level 1

Submit complaint to the designated Grievance Officer.

Level 2

If unresolved, investors may escalate the matter through the SEBI SCORES platform.

Level 3

If required, disputes may be further escalated through the SMART ODR platform.

Details of grievance procedures are available on the Investor Protection section of this website.

19. Third-Party Websites

This website may contain links to external websites including:

SEBI
BSE
SCORES
SMART ODR
Payment Service Providers

We are not responsible for the privacy practices, security measures or content of third-party websites.

Users are encouraged to review the privacy policies of such websites independently.

20. Children's Privacy

Age Eligibility Requirement

The services described on this website are intended only for individuals legally eligible to participate in securities market activities.

We do not knowingly collect personal information from children.

21. Regulatory Compliance

Regulatory Compliance Framework

This website and related services operate subject to applicable legal and regulatory requirements, including provisions applicable to Research Analysts and relevant data protection obligations under Indian law.

Nothing in this Privacy Policy shall be interpreted as limiting any statutory rights available under applicable law.

22. Policy Updates

Policy Revision Notice

This Privacy Policy may be updated periodically to reflect legal, regulatory, operational or business changes.

The latest version shall always be made available through this website.

Continued use of the website after publication of updates shall constitute acceptance of the revised Privacy Policy.

23. Contact Information

For privacy-related queries, requests or grievances, please contact:

Privacy Contact

Name

Dipak Das

Address

[Insert Registered Address]

For Investor Grievances

Grievance Officer

[Insert Name]

Contact Number

[Insert Number]

Investor Privacy Commitment

We are committed to maintaining the confidentiality, integrity and security of investor information and processing personal data only for legitimate regulatory, operational, compliance and investor-protection purposes. All personal information is handled in accordance with applicable legal, regulatory and operational requirements.