WhatsApp

Privacy Policy

[Effective Date: April 18, 2026]     [Last Updated: April 18, 2026]

1. Who We Are

This Privacy Policy explains how Koorma Investor Services, operating under the brand name Koorma Investor Services (“we”, “us”, “our”), collects, uses, stores, shares and protects personal data when you visit our website, submit an enquiry, request a callback, use any calculator, download material, communicate with us through email, phone, WhatsApp or web forms, or use our mutual fund distribution support services.
We are engaged in the distribution of mutual fund products as an AMFI-registered Mutual Fund Distributor (“MFD”), subject to applicable SEBI, AMFI, AMC, RTA and other legal requirements. This Privacy Policy applies to personal data processed in digital form in connection with our website and related online interactions.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

(a) identity details, such as your name, date of birth, PAN, photograph, signature, or KYC-related details where required for lawful onboarding or transaction support;
(b) contact details, such as mobile number, email address, postal address and city;
(c) financial and investment-related information, such as investment goals, risk profile inputs, income range, existing holdings, nomination details, bank details, tax residency declarations, FATCA/CRS information, and transaction preferences, to the extent relevant and lawfully required;
(d) communication data, such as messages, emails, call notes, meeting notes, grievance details and responses;
(e) device, technical and website usage data, such as IP address, browser type, operating system, referral source, pages viewed, approximate location, session timestamps and cookie-related identifiers;
(f) documents and records you voluntarily upload or share, such as KYC documents, account statements, cancelled cheque, bank proof, nomination forms, insurance details or financial records; and
(g) any other information you choose to provide through our website or during service interactions.

3. How We Collect Data

We may collect personal data:
(a) directly from you when you fill out forms, subscribe, schedule a call, send a message, upload a document or transact through a supported process;
(b) from your authorised representatives, joint holders, nominees or family members, where permitted and relevant;
(c) from AMCs, RTAs, KYC Registration Agencies, payment or banking partners, technology platforms or service providers involved in onboarding, servicing, transaction support, compliance or grievance handling; and
(d) automatically through cookies, analytics tools, server logs and security systems when you use our website.

4. Why We Use Your Data

We process personal data only for lawful, legitimate and service-related purposes, including to:
(a) respond to enquiries, arrange meetings, and provide information about our services;
(b) assess whether your request falls within the scope of our permitted distribution and support activities;
(c) facilitate mutual fund distribution support, transaction assistance, service requests and post-transaction servicing;
(d) support KYC, KYD, FATCA/CRS, AML, fraud-prevention, record-keeping, audit, compliance and grievance redressal requirements;
(e) maintain client records, communication history and service documentation;
(f) provide educational content, calculators, newsletters or updates where you have consented or where such communication is otherwise lawful;
(g) improve website functionality, content quality, user experience, cybersecurity and operational reliability; and
(h) comply with legal obligations, regulatory directions, court orders or lawful requests from regulators, self-regulatory bodies, AMCs, RTAs or government authorities.

5. Legal Basis / Consent

Where consent is the basis of processing, we will seek consent for the specific purpose for which data is collected. By voluntarily submitting your information through our website or related digital channels, you consent to the collection and use of that information for the stated purpose, subject to applicable law.
Where processing is necessary to respond to a request initiated by you, to complete a transaction you have asked us to support, to comply with law, or to protect against fraud or misuse, we may process the data to that extent without relying solely on marketing consent.
Wherever required by applicable law, you may withdraw consent. Withdrawal will not affect processing already undertaken lawfully before the withdrawal, and may limit our ability to continue certain services or communications.

6. Cookies and Analytics

Our website may use cookies, pixels, tags or similar technologies for core website operation, security, analytics, traffic measurement, preference retention and service improvement. If non-essential cookies are used, they should be deployed only after obtaining the required consent through a suitable cookie mechanism.
You may control cookies through your browser settings. Disabling cookies may affect website functionality, performance or access to certain features.

7. Sharing of Personal Data

We do not sell your personal data. We may share personal data only on a need-to-know basis and only for lawful purposes, including with:
(a) AMCs, trustees, RTAs, KYC Registration Agencies, transaction platforms, payment processors, banking partners or other service participants involved in the transaction or servicing process;
(b) technology vendors, cloud service providers, CRM providers, website hosts, cybersecurity vendors, analytics vendors and document-storage vendors acting under appropriate confidentiality and security controls;
(c) professional advisers, auditors, consultants or compliance support providers;
(d) regulators, self-regulatory bodies, law-enforcement authorities, courts, tribunals or government bodies where disclosure is required or reasonably necessary under law; and
(e) successors, acquirers or restructuring participants, if our business is reorganised, merged, transferred or sold, subject to applicable confidentiality and lawful processing requirements.

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, and thereafter as required for contractual, operational, audit, tax, limitation, record-retention, anti-fraud, grievance, dispute-resolution, or regulatory purposes. Once retention is no longer necessary, we will delete, anonymise or securely archive the data as appropriate, subject to applicable legal requirements.

9. Data Security

We use reasonable technical, organisational and administrative safeguards designed to protect personal data against unauthorised access, misuse, disclosure, alteration or destruction. These safeguards may include access controls, password protection, device security, encrypted transmission where feasible, vendor controls, limited access on a need-to-know basis, and record-handling discipline.
However, no website, network, server or transmission method is completely risk-free. Accordingly, while we take reasonable security measures, we cannot guarantee absolute security.

10. Your Rights

Subject to applicable law and verification of identity, you may request access to information about your personal data, correction or updating of inaccurate data, completion of incomplete data, erasure where retention is no longer necessary or legally required, withdrawal of consent where consent is the basis of processing, and grievance redressal in relation to how your personal data is handled.
To exercise any privacy-related request, please write to us at [Email ID] with the subject line “Privacy Request”. We may ask for additional information to verify your identity or clarify the request before acting on it.

11. Children / Minors

Our website is not directed at minors for independent contracting. If information relating to a minor is provided in the context of folio services, nomination, family financial planning inputs, education planning or other lawful family-led interactions, such information should be provided by a parent, legal guardian or another person lawfully authorised to do so.

12. Cross-Border Processing

Some of our service providers may store or process data outside India. Where cross-border processing occurs, we will take commercially reasonable steps to ensure that such processing remains subject to appropriate safeguards and lawful arrangements, always subject to applicable Indian law.

13. Third-Party Websites

Our website may contain links to third-party websites, including AMC, RTA, SEBI, AMFI, payment or informational websites. We are not responsible for the privacy practices, content, security or terms of such third-party websites. You should review the relevant privacy policy of each external site before sharing personal data there.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, website practices, vendor arrangements or business operations. The revised version will be posted on this website with an updated “Last Updated” date. Your continued use of the website after such update shall be subject to the revised policy, to the extent permitted by law.