Effective from: 23/OCT/2026
1. Who we are
Rathi Wealth Private Limited (“Rathi Wealth”, “we”, “us”), CIN U67190MP2021PTC058667, 222, Krishna Business Center, Plot No. 11, PU4, Vijay Nagar, Indore, Madhya Pradesh – 452010, is the Data Fiduciary for the personal data described here. This policy covers rathiwealth.in, our client login, WhatsApp, email, phone and in-person interactions.
2. Personal data we collect
- Identity and contact: name, date of birth, gender, address, mobile number, email, photograph, signature.
- KYC and regulatory: PAN, Aadhaar (masked or as permitted by law), passport, CKYC number, FATCA/CRS declarations, tax residency, occupation, income range, politically exposed person status.
- Financial: bank account details, investment holdings and transactions, nominee and guardian details, risk profile responses, financial goals you share with us.
- Website and device: IP address, browser type, pages visited, form entries, and cookies (see section 9).
We collect this from you directly, from KYC Registration Agencies and the CKYC registry, and from AMCs, Registrar & Transfer Agents and product providers for transactions made through us.
3. Why we use it
- To complete KYC and onboard you, as required by the Prevention of Money Laundering Act, 2002 and SEBI/AMFI rules.
- To process purchases, redemptions, switches, SIPs and service requests with product providers.
- To assess your risk profile and the suitability of products.
- To send statements, transaction updates and service messages.
- To respond to queries and complaints.
- To meet legal, regulatory, audit and tax obligations.
- To send educational content and event invitations, only with your consent. You can opt out at any time.
We do not sell your personal data, and we do not use it for any purpose not listed here without asking you first.
4. Who we share it with
Only as needed for the purposes above:
- Asset Management Companies, Registrar & Transfer Agents (CAMS, KFin Technologies), portfolio managers, AIF managers and other product providers you invest with.
- KYC Registration Agencies, the CKYC registry, and transaction platforms such as BSE StAR MF, NSE NMF II and MF Utility.
- Our technology service providers, including our client reporting platform (Investwell) and email/cloud providers, under confidentiality obligations.
- SEBI, AMFI, APMI, tax authorities, courts and law enforcement, when required by law.
5. How long we keep it
We keep your data while you are our client and afterwards for as long as the law requires: KYC and transaction records for at least five years after the relationship ends under the Prevention of Money Laundering Act, or longer where SEBI, AMFI or tax rules require. Data no longer needed is deleted or anonymised.
6. How we protect it
Access is limited to staff who need it. We use password-protected systems, encrypted connections (HTTPS), and secure storage for physical documents. If a personal data breach occurs, we will inform affected persons and the Data Protection Board of India as required by law.
7. Your rights
You may ask what personal data we hold and who we have shared it with; ask us to correct, complete or update it; ask us to erase it where no law requires us to keep it; withdraw consent for marketing at any time; and nominate a person to exercise these rights on your behalf. Withdrawing consent for data needed for KYC or transactions may mean we cannot continue to service your investments.
8. Children
This website is not meant for persons under 18. Investments for minors are made through their parent or legal guardian, who provides consent on the minor’s behalf.
9. Cookies
We use essential cookies to run the website and analytics cookies to understand how it is used. You can block cookies in your browser settings; some features may then not work.
10. Links to other websites
Our site links to AMFI, SEBI, AMC and other websites. We are not responsible for their privacy practices.
11. Grievance Officer for privacy
Raghav Rathi, Grievance Officer · service@rathiwealth.in · +91 88173 58846 · address as above. We will acknowledge your request within 2 working days and resolve it within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
12. Changes to this policy
We may update this policy. The effective date at the top shows the latest version; significant changes will be communicated to clients.