Privacy Policy

Sahaj Wealth Private Limited ("Company", "we", "us") is committed to protecting the privacy and personal data of all our clients, website visitors, and other stakeholders. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDPA), and other applicable regulations. By using our website or services, you consent to the collection and use of your information as described in this policy.

We may collect and process the following categories of personal information: • Identity Information: Full name, date of birth, PAN number, Aadhaar number, passport details • Contact Information: Email address, phone number, residential/office address • Financial Information: Income details, bank account numbers, investment details, credit score information • KYC Documents: Proof of identity and address as mandated by SEBI/IRDAI regulations • Usage Data: Browser type, IP address, pages visited, time and date of visit • Communication Data: Emails, chat messages, and other correspondence with us

We use your personal data for the following purposes: • To provide and improve our investment advisory and insurance services • To complete KYC verification as required by SEBI, IRDAI, and PMLA regulations • To process transactions, applications, and requests • To communicate important account and regulatory updates • To send personalised financial insights and service recommendations (with your consent) • To comply with legal, regulatory, and compliance obligations • To prevent fraud, money laundering, and other financial crimes • To analyze service usage and improve our platform

We do not sell your personal data. We may share your information with: • Regulatory Bodies: SEBI, IRDAI, AMFI, RBI, and other statutory authorities as required by law • Financial Partners: AMCs, insurance companies, banks, and NBFCs to process your transactions • CKYC Registry: As mandated for financial sector KYC compliance • Service Providers: Technology, analytics, and communication vendors who process data on our behalf under strict confidentiality agreements • Legal Requirements: Government bodies, law enforcement, or courts when legally required All third-party service providers are contractually bound to maintain confidentiality and may not use your data for their own purposes.

We implement robust technical and organizational security measures: • 256-bit SSL encryption for all web communications • Multi-factor authentication for account access • Role-based access controls limiting employee access to personal data • Regular security audits and vulnerability assessments • Encrypted storage of all sensitive financial and identity documents • Incident response plan for potential data breaches While we take all reasonable precautions, no internet transmission or electronic storage is 100% secure. We encourage you to use strong passwords and report any suspicious activity immediately.

As per the Digital Personal Data Protection Act, 2023, you have the following rights: • Right to Access: Request a copy of your personal data we hold • Right to Correction: Request correction of inaccurate or outdated data • Right to Erasure: Request deletion of your data (subject to legal retention requirements) • Right to Grievance Redressal: Raise complaints about data processing • Right to Nominate: Nominate a person to exercise rights on your behalf in case of incapacity To exercise your rights, contact our Data Protection Officer at: privacy@sahajwealth.com

Our website uses cookies and similar technologies to enhance your browsing experience: • Essential Cookies: Required for website functionality and security • Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics) • Preference Cookies: Remember your language and region settings You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

We retain your personal data for as long as necessary to: • Provide our services to you • Comply with regulatory requirements (SEBI mandates 5-year retention for investment records, PMLA requires 5–10 years for AML records) • Resolve disputes and enforce our agreements Upon expiry of applicable retention periods, your data will be securely deleted or anonymised.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take prompt action to delete such data.

For any privacy-related queries, requests, or complaints, please contact: Data Protection Officer / Grievance Officer Sahaj Wealth Private Limited 123 Wealth Avenue, Financial District, New Delhi – 110001 Email: privacy@sahajwealth.com Phone: +91 98765 43210 Response Time: Within 30 days of receipt