Legal
Privacy Policy
Effective 14 July 2026. This policy explains how we collect, use, store, and protect information submitted through this website.
1. Data we collect
When you submit an enquiry, we collect the information entered in the form, such as your name, email address, phone number, area of interest, and message. When you submit a grievance, we collect the contact and complaint details needed to acknowledge, track, and resolve it. Please do not submit passwords, one-time passwords, trading credentials, or other authentication information through this website.
Our servers may process limited technical information needed to operate and secure the site. Anti-abuse controls use non-reversible hashes derived from request and email identifiers for rate limiting. We do not currently use advertising trackers or behavioural analytics on this website.
2. How we use your data
- To respond to enquiries and arrange requested follow-up
- To assess suitability and provide advisory services after the required onboarding process
- To meet legal, regulatory, and record-keeping obligations
- To communicate with you about your engagement
- To improve our services and respond to enquiries
We do not sell personal information. We disclose it only to authorised personnel, service providers needed to operate the website and communications, regulators or authorities where required, or other parties where you direct or permit us to do so.
3. Lawful basis & consent (DPDP Act, 2023)
By submitting an enquiry or grievance form, you request and consent to processing for that purpose. You may withdraw consent by contacting us, subject to processing and retention required by applicable law, regulatory obligations, or an ongoing dispute.
4. Storage and service providers
Website enquiries are stored in a managed database and routed through Google's email services. Grievances are stored in a restricted Google Sheet and processed through Google Apps Script and email services. The website is hosted on a managed virtual server. These providers process data to supply infrastructure, storage, and communication services to us.
5. Retention
We retain information only for as long as needed to respond, provide services, handle grievances, maintain security, and comply with applicable legal and SEBI record-keeping obligations. When information is no longer required, we take reasonable steps to delete or anonymise it.
6. Security
We apply reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is perfectly secure, but we work to protect your data and limit access to authorised personnel only. In the event of a personal data breach, we will notify the Data Protection Board and affected individuals as required by law.
7. Your rights
- Request access to, and a summary of, the personal data we hold about you
- Request correction, completion, or updating of inaccurate information
- Request erasure, subject to our legal and regulatory retention obligations
- Nominate another individual to exercise your rights in the event of death or incapacity
- Withdraw consent and grieve any non-resolution of your request
To exercise a privacy right or raise a concern, contact us at rurradvisors@gmail.com. We may need to verify your identity before acting on a request. Regulatory retention requirements may limit deletion of certain records.
8. Changes to this policy
We may update this policy when our practices or legal obligations change. The effective date shown above identifies the latest published version.