Privacy Policy

Rubicon Finservices, 6A Dr. Rajendra Prasad Sarani, 4th Floor, R.No-20, Kolkata-700001. We act as the Data Fiduciary for the personal data collected through this website and our onboarding forms.

• Identity & contact details — name, email, phone, address.
• KYC information — PAN, Aadhaar, date of birth, bank details, nominee details.
• Risk profiling responses and financial preferences.
• For non-individual entities — entity details, authorised signatory details and documents.
• Documents you upload (ID proofs, photographs, bank proofs, entity documents).

We process your personal data only for specified, lawful purposes: risk profiling, KYC and onboarding for mutual fund investments, providing investment recommendations, servicing your account, responding to your enquiries, and meeting our legal and regulatory obligations.

We collect and process your personal data based on your free, specific, informed, unconditional and unambiguous consent, given through a clear affirmative action at the point of collection. You may withdraw your consent at any time (see Section 7); withdrawal is as easy as giving consent and does not affect the lawfulness of processing done before withdrawal.

We share your data only as necessary with Asset Management Companies (AMCs), Registrar & Transfer Agents (RTAs), KYC Registration Agencies (KRAs) and regulatory authorities to execute and service your investments, and with secure service providers who process data on our behalf under confidentiality obligations. We do not sell your personal data.

We retain your personal data only for as long as necessary to fulfil the stated purposes and to comply with applicable legal, regulatory and audit requirements. When the purpose is served and retention is no longer required by law, we erase or anonymise your data.

• Right to access — obtain a summary of the personal data we process and with whom it has been shared.
• Right to correction & erasure — request correction, completion, updating or erasure of your data.
• Right to withdraw consent — as easily as it was given.
• Right to nominate — nominate another person to exercise your rights in case of death or incapacity.
• Right to grievance redressal — a readily available means to raise a complaint.

To exercise any of these rights, please use our Data Rights request form. We will respond within the timeframe prescribed under the DPDP Act (up to 90 days).

We implement reasonable security safeguards to protect your personal data, including encryption in transit (HTTPS), access controls with role-based restrictions, secure object storage for uploaded documents, hashed credentials, and audit logging. In the event of a personal data breach, we will notify the Data Protection Board and affected Data Principals as required under the DPDP Act.

For any Data Principal below 18 years of age, we process personal data only with verifiable consent of a parent or lawful guardian, and we do not undertake tracking or targeted advertising directed at children.

This website uses only essential/functional browser storage required to operate the site (for example, keeping team members signed in). We do not use third-party tracking or advertising cookies.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India.

We may update this policy from time to time. The current version and date are shown at the top of this page.