PRIVACY POLICY

KFin Technologies Ltd

Last Updated: September 01, 2025

Introduction

KFIN Technologies Ltd., its subsidiaries and its branches herein referred as ‘KFintech,’ ‘We,’ ‘Our’ or ‘Us’ Is committed to respect your privacy and Choices. This ‘Privacy Statement’ highlights our privacy practices regarding you are the Personal Data/ Personal Identifiable Information (PII) that we collect and process in compliance to Applicable data Privacy regulations.

Objective

At KFintech, we understand that your personal information is more than just data, it’s a matter of trust. This Privacy Notice is designed to provide you with a clear understanding of our privacy practices regarding personal information that we collect and process about you through various sources. Although the primary focus of this statement is on the personal information that we collect and we process through our websites, that link to this Privacy Statement, which include www.kfintech.com and its sub domains such as www.mfs.kfintech.com/mfs/, www.ris.kfintech.com/, www.nps.kfintech.com/, www.kfintech.com/gfs/, www.globalbusinessservices.kfintech.com/, www.kfintech.com/private-wealth-management/, www.kfintech.com/alternate-investment-fund/ etc. (Collectively referred to as ‘KFintech Websites’). Our adherence to the below-mentioned principles and commitment to protecting and responsibly managing the personal information you share with us remains across the organization. Depending on the purposes of processing and your relationship with us as a data subject, we may provide additional customized Privacy Statements as applicable.

Scope and Applicability

The scope of this ‘Privacy Statement’ covers the Personal Information collected, how we use or process such data, who are the recipients of such data and your associated rights under the applicable Privacy Laws and regulations including how to exercise them. The Applicability of this Privacy Statement is global, however certain additional information may be relevant to you depending on the country where you reside. Such additional terms based on countries or regions are called out in region specific statements below.

1.Personal Information We Collect and Process

KFintech collects your personal information to provide you services and comply with legal requirements. We gather personal information you provide through the below modes:

  • Website and Mobile Applications: Data submitted by yourself through our website forms or applications on our portals, or by contacting / emailing our official contacts, when you register or update an online account, submit forms, or interact with our digital platforms.
  • Business Transactions: When you engage in transactions through mutual fund companies, brokers, distributors, or our service centres, including subscription, redemption, or share transfer or issuer related transactions.
  • Inquiries and Communications: When you contact us via phone, email, website, or post to make inquiries, provide feedback, or submit complaints. Data shared by you requesting for Demo.
  • Job Applications: Personal data submitted by you when you apply for a position through our website or other recruitment channels, including your resume, cover letter, and related details.
  • Cookies and Tracking Technologies: Our website may use cookies to collect usage data, such as IP address, browser type, and visit times, to enhance your experience.

We may collect the following categories of personal information:

  • Information collected as part of your visit and usage of our Website such as IP address, demographics, your computer’s Operating system, device information, browser type and information collected via cookies or similar tracking technologies. As a website visitor who merely browses our websites (including hosted content) without submitting additional content, this is the most relevant paragraph for applicable data processing.
  • Personal details like Name, phone number, email address, Company name, Title (or similar professional data set), resume, experience details etc.
  • Queries, comments, or feedback submitted by you including any correspondence you have made with us.
  • Login Credentials such as Username, password when you register for any applicable services.
  • Audio Visual information such as photographs or images, video recordings (if recorded) when attending any of our Events, Webinars etc.
  • Preferences related to marketing emails, subscription details (in relation to events we organize)
  • Additionally, we may collect certain data points based on categories of data subject and their relationship with us, as detailed out in our additional Privacy Statements for relevant categories of data subjects at the end of this Statement.

2. Use of personal Information

We may use your information for the following purposes:

  • Service Delivery: Facilitate mutual fund transactions, such as subscriptions, redemptions, and share transfers, and to manage your account with us. Create login credentials wherever required.
  • Regulatory Compliance: Meet obligations under applicable laws, including Know Your Customer (KYC) requirements, Securities and Exchange Board of India (SEBI) regulations, and tax laws, ensuring accurate record-keeping and reporting.
  • Customer Support: Respond to your inquiries, feedback, or complaints and provide personalized assistance through our website, mobile applications, or other communication channels, identify you once you register on our website and to offer curated content tailored to your preference.
  • Enable Marketing and Sales related communications and related purposes, to invite you for events, seminars and equivalent organized by us and related purposes such as promotions and publications on social media.
  • Recruitment: Evaluate job applications, communicate with candidates, and manage the recruitment process when you apply for a position with us.
  • Service Improvement: Analyse which parts of websites are frequently analysed and feedback to enhance our website, mobile applications, and service offerings, ensuring a seamless user experience.
  • Security and Fraud Prevention: To detect and prevent fraudulent activities, spam, or unauthorized access, protecting your data and our systems.
  • Website Performance: Monitor website usage through anonymized data, such as IP addresses and browser information, to optimize functionality and ensure security. Provide better usability, troubleshooting and site maintenance.

Legal Basis for Processing: We process your information based on the below legal basis of processing:

  • With your consent, where required (For e.g., registering and inviting you for events organized for us, or for sharing our marketing related communications, newsletters, or cookies). Where we process personal data based on your consent, your consent is revocable at any time.
  • For performance of Contract to which you are a party or to take steps at your request prior to entering a contract, for example: to access applications or when you engage with us for receiving our services and offerings like RTA services, or when managing the data of our employees for ensuring the performance of their employment contract.
  • Comply with legal obligations on us, such as compliance with applicable laws and protecting our legal rights, seeking remedies, and defending against claims.
  • For the purposes of Legitimate interests pursued by us or a third party e.g., when we need to understand your usage of our website, for improving services or preventing fraud, provided these do not override your rights.

We ensure that all processing activities adhere to the principles of data minimization and purpose limitation under the DPDP Act, 2023 using your data only for the purposes specified and with appropriate safeguards in place.

If you chose not to provide your personal information that is mandatory to process your request, we may not be able to fulfil the relevant purpose of processing, including provision of any services to you if applicable.

3. How & with whom We Share Your Information

We may share your personal information within KFintech, its branches or its subsidiaries, authorized business partners/service providers/ third party agents or auditors / government authorities wherever applicable.

Your Information may be shared only when necessary to provide our services, comply with legal obligations, or support our operations. We manage your data responsibly as follows:

  • No Selling of Personal Data: We do not sell your personal information to third parties for their direct marketing purposes.
  • Third-Party Service Providers: We may share your information with trusted and authorized parties such as distributors, brokers, brokers, sub-brokers, banks, custodians, depositories, or service providers, who assist us in delivering our services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
  • Legal and Regulatory Compliance: We may disclose your information to regulators (e.g., Securities and Exchange Board of India, Data Protection Board of India (DPB), government bodies, law enforcement agencies, or auditors (internal & external) when required by applicable laws, including but not limited to the Digital Personal Data Protection Act (DPDPA) 2023, Information Technology Act, or other sectoral regulations.

4. Security

We maintain reasonable security practices and procedures including encryption, secure on-premises servers, and strict access controls, to protect your data from unauthorized access, alteration, or disclosure. As an ISO 27001:2022 certified organization, our security framework is designed to ensure data integrity, confidentiality, and availability while adhering to industry best practices and regulatory requirements.

5. Data Retention and Disposal:

KFintech will not retain your personal information for a period more than necessary to fulfil the purposes outlined in this Privacy statement unless a longer retention period is required by law or for related legitimate business purposes such as comply with legal and regulatory requirements mandated by the Securities and Exchange Board of India (SEBI), PFRDA or tax authorities.

Personal information that is no longer needed to be retained as per legal and business requirements will be disposed in a secure manner. We continuously review our retention policy and practices to ensure they align with legal obligations and your rights as a data principal.

6. International Data Transfers

KFintech may transfer your personal information to countries outside your country of residence to KFintech group companies or third parties including to countries which have data protection standards from those which apply in your country or region of residence. Our service providers are located globally; however, the primary locations are India, Bahrain, Malaysia etc. We shall take reasonable and appropriate steps in line with applicable laws while executing such transfer.

For residents of India, Compliance with DPDP Act: Any international data transfer will comply with DPDP Act 2023 requirements, including ensuring that the recipient country or entity provides an adequate level of data protection or is subject to standard contractual clauses approved by the Data Protection Board of India.

  • Safeguards: We implement robust safeguards, such as encryption and Data transfer agreements, to protect your data during transfer and ensure it is managed in accordance with Indian data protection laws.
  • Transparency: We will inform you if your data is to be transferred internationally, specifying the purpose and the safeguards in place, unless such transfer is necessary to fulfil legal or contractual obligations.
  • Limited Scope: International transfers, if any, are limited to what is necessary for providing our services or complying with regulatory requirements.

7. Your Data Principal Rights

KFintech Is committed to upholding your rights as a data principal/subject under the applicable Privacy regulations, for example: Digital Personal Data Protection Act (DPDPA) 2023 for Indian residents. These rights empower you to control your personal information. Your rights as a data principal may differ based on your applicable jurisdictions.

Subject to the laws of your country, you may have certain rights as a data subject including but not limited to Right to Access, Right to Correction, Right to Deletion, Right to Withdraw Consent (this will not affect the lawfulness of prior processing before your withdrawal), Right to Nominate( You can nominate another individual to exercise your rights on your behalf in the event of your death or incapacity), Right to Grievance Redressal (You can raise concerns or complaints about our data practices, and we will address them promptly).

How to Exercise Your Rights: For exercising your rights, we may need to request certain information from you for verifying your identity and confirming that you are authorized to exercise the rights and access information. You can exercise your rights by contacting us at: privacy@kfintech.com.

8. Children’s Privacy

KFintech’s websites, its associated products services and hosted contents are not intended for the use by children.

We do not knowingly collect personal information of children without verifiable parental consent. If KFintech learns that a child has submitted personally identifiable information online without verifiable parental consent, we will take all reasonable measures to delete the information from our database and not to use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by Law). If you become aware of any personal information collected from children, please email us at privacy@kfintech.com.

9. Linked Websites

Our privacy practices regarding the processing of personal information we collect and store about you through our Web portals and Mobile applications will be as per the privacy policy of those portals.

When KFintech provides links to third party websites or services, we are not responsible for the privacy practices, notices, or contents of such third-party websites.

10. Incident Management

We maintain comprehensive incident response procedures to swiftly identify, evaluate, and address any potential personal data breaches. Our systematic approach ensures immediate containment, thorough investigation, and prompt remedial action to safeguard your information. We are committed to transparent communication with regulatory authorities and affected individuals within statutory timelines, keeping you informed throughout the resolution process while implementing measures to prevent recurrence. Our employees receive regular training on these procedures and clearly understand their responsibilities in incident reporting.

11. Cookies

  • Usage: We use cookies to enhance your experience on our website. Cookies help us understand how you use our site, remember your preferences, and improve our services.
  • Control: You can control cookies through your browser settings. You have the option to block or delete cookies, but this may affect the functionality of our website.

Know more about our cookie policy please click here.

12. How to contact us

If you have any queries, grievances, or complaints regarding our privacy practices or managing of your personal information, please contact our Data Protection Office at:

  • Contact Person: Shailaja V
  • Address: Data Privacy Office, 301, The Centrium, 3rd Floor, 57, Lal Bahadur Shastri Road, Nav Pada, Kurla (West), Mumbai – 400 070, Maharashtra, India
  • Email: Privacy@Kfintech.com

13. Changes to This Privacy Notice

KFintech is committed to protect the privacy of its website users. We may change the data privacy practices and update this Privacy statement as on when the need arises. When we make changes, we will:

  • Post the updated Privacy Notice on our website with the effective date clearly indicated.
  • Notify you of significant changes through our website, email, or other communication channels, as appropriate.

We encourage you to review this Privacy Notice regularly to stay informed about how we collect, use, share, store and protect your personal information. Your continued use of our website, mobile applications, or services after the updated notice is posted constitutes your acceptance of the revised terms. This Privacy Notice does not create any contractual or legal rights beyond those provided under applicable laws.

Privacy statements for other categories of data subjects:

1. Candidates and Interns

Detailed Privacy notice will be provided when one applies for a job, internship in KFintech through careers page available on KFintech Website.

Categories of Personal Information that we process: Candidate Name, Mobile, Email Id, DOB, (only year), resume, Educational Details, Industry, Functional Area, Address, Fresher Status, Experience, Notice Period, Skills, Aadhaar.

Use of Personal Information:

  • Assess candidate’s suitability towards job requirement as part of recruitment or internship selection process and associated processes including background verification by our authorized vendor.
  • Conduct various employer related activities if you are selected to join the organization and to enable us to ensure that we are compliant with any applicable labour and or other relevant laws.

Legal basis of Processing:

We process your personal information when it is necessary for performance of Contract to which you are a party or to take steps at your request prior to entering a contract or based on your consent as per applicable laws.

Data recipients / accessible to:

Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.

For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.

2. Employees and Alumni

Detailed Privacy notice will be provided at the time of onboarding. For our Alumni, detailed privacy notice is available here:

Categories of Personal Information that we process: Employee Name, Contact details,Father’s Name, Date of Birth, Country of Birth, Age, Gender, Marital Status, Personal Email ID, Hobbies,Dependant details, Current & Permanent Address, Emergency Contact Name, Contact Relationship, Mobile Number, Office Contact Number, Landline Number, Email ID, Contact Address,   Educational qualifications, Employment related details, background check details, national identification details (for selected countries), Bank Details, Nomination Details, Aadhar, PAN, Visa Details, Salary Details, Life Cycle Details, Document details  official details, Salary and Compensation, Claims and financial details like tax, benefits like medical insurance details, performance and development records, digital access and IT related information including information we obtain from monitoring the use of our official systems, network (as permitted by law), travel records, leave and attendance details, emergency contact number etc. Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country.

Use of Personal Information:

  • Onboard you as an employee, to provide employment related services and benefits and to comply with any applicable labor/ employment/ other laws.
  • As an alumni/ ex-employee, to contact you, to communicate about and enable you to participate in alumni related activities, help you with employment related details etc.

Legal basis of Processing: We process your information based on the below legal basis of processing:

  • With your consent, where required.
  • For performance of Employment Contract
  • Comply with legal obligations.
  • For the purposes of Legitimate interests pursued by us or a third party

Data recipients / accessible to:

Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.

For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.

3. Shareholders

Detailed Privacy notice will be provided at the time onboarding.

Categories of Personal Information that we process: Personal identification details- Full Name, Date of birth, Gender, Email ID, Mobile number, contact details, Residential address, Photograph, Bank details,Guardian details, Nominee details, Signature specimen,  DP ID, Client ID, Folio details, Aadhar, PAN, Demat account, Residential status, Legal status, FATCA declarations, , Estimated income , Transaction history, Dividend and interest payment record, Tax status, TDS details, etc.

Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country.

Use of Personal Information:

  • Contact you.
  • Process your requests and share updates about the company.
  • For purpose of administering tax deductions on source for dividends paid out by KFintech to its shareholders

Legal basis of Processing: We process your information to comply with legal obligations arising out of applicable regulations.

Data recipients / accessible to:

Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.

For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.

4. Investors

Detailed Privacy notice will be provided at the time onboarding.

Categories of Personal Information that we process: Personal identification details- Full Name, Email ID, Contact details, Bank details,Nominee details, , Folio/ Fund details, DP ID, Folio details, PAN, Demat account, Residential status, Date of birth, Gender, Aadhaar, Passport number (for NRIs/foreign investors), Photograph, Signature specimen, Residential address, Mailing address (if different), Investment type (SIP/lump sum), Mutual fund scheme details, Transaction history (purchase/redemption/switch), Dividend payout/reinvestment preference, Tax status (Resident/Non-resident), TDS details, FATCA declarations, KYC status, Occupation, Guardian details (if nominee is a minor), Address proof, Mode of holding (single/joint/anyone or survivor), Joint holder details (name, PAN, relationship) etc. Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country.

Use of Personal Information:

  • Contact you.
  • Process your requests and share updates about the company.

Legal basis of Processing: We process your information based on the below legal basis of processing:

  • With your consent, where required.
  • Comply with legal obligations.
  • For the purposes of Legitimate interests pursued by us or authorized third party

Data recipients / accessible to:

Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.

For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.

5. Visitors

Detailed Privacy notice will also be displayed at the visitor’s entrance areas in KFintech’s offices.

Categories of Personal Information that we process: Visitor Full name, contact details,Time of entry, Time of exit, Organization name (if visiting on behalf of a company), organization,Asset details (if any), national identification details (for selected countries), Purpose and Date of Visit, Photograph and CCTV images and videos, IT related information including information we obtain from monitoring the use of our official systems and network (as permitted by law). Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country.

Use of Personal Information:

  • Allow you access to KFintech premises.
  • Allow you to use Wi-Fi/KFintech official systems/ network.

Legal basis of Processing: We process your information based on the purposes of Legitimate interests pursued by us or based on your consent wherever required, as per applicable laws and regulations.

Data recipients / accessible to:

Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.

For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.

6. Vendors

Categories of Personal Information that we process: Vendor Full name, Designation/role, Contact details, email id, Company name, Business address, organization,PAN and tax related details, financial details, GSTIN (Goods and Services Tax Identification Number), Bank details, Signature specimen, Vendor code or ID (Broker), ARN code, Compliance documents, Contract/agreement details, TIN/VAT number (if applicable).

Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country.

Use of Personal Information:

  • For vendor empanelment
  • Purchase Order and invoice creation.
  • For communication purpose
  • For demos & submission of proposals

Legal basis of Processing: We process your information for performance of contract where you are a part or based on your consent wherever required as per applicable laws and regulations.

Data recipients / accessible to:

Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.

For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.