Data Privacy Commitment: At DK FIINSERV, investor trust and absolute data confidentiality are fundamental principles of our operation. This Privacy Policy details our formal practices regarding the collection, storage, encryption, processing, sharing, and eventual purging of Personally Identifiable Information (PII) and sensitive financial data in accordance with SEBI Intermediary Guidelines, AMFI Circulars, the Prevention of Money Laundering Act (PMLA), and the Digital Personal Data Protection (DPDP) Act.
1. DETAILED CATEGORIES OF DATA WE COLLECT
DATA INVENTORY
To execute transactions, maintain investor folios, fulfill statutory Know Your Customer (KYC) mandates, and generate Consolidated Account Statements (CAS), we collect and process specific categories of investor information:
π Identity & Demographics
Full Legal Name, Permanent Account Number (PAN), Masked Aadhaar / e-KYC records, Date of Birth, Gender, Marital Status, Fatherβs Name, Spouse Name, and KRA-verified Identity Status.
π Contact & Communication
Verified Primary Mobile Number, Secondary Contact Phone, Email Address, Registered Residential Address, Permanent Correspondence Address, and WhatsApp delivery preferences.
π¦ Banking & Mandate Credentials
Bank Name, Branch Address, Account Number, Account Type (Savings/Current/NRE/NRO), IFSC Code, MICR Code, Cancelled Cheque proof copies, and Auto-Debit (NACH) Mandate details.
π Investment Portfolio Records
AMC Folio Numbers, Scheme Subscriptions, Purchase / Redemption Logs, SIP / STP / SWP Schedules, Nominee Details, Capital Gains Tax calculations, and Risk Profiling Assessments.
π» Technical & Device Telemetry
IP Addresses, Browser Type, Operating System, Session Timestamps, Device Identifiers, Referral URLs, and Cookie logs collected automatically via website access on https://dkfiinserv.com/.
βοΈ Compliance & Tax Disclosures
Tax Residency Status, Gross Annual Income bracket, Occupation Type, Politically Exposed Person (PEP) declaration, and FATCA/CRS certifications required for international reporting.
2. LEGAL BASIS & PURPOSE OF DATA PROCESSING
PROCESSING PURPOSE
We process personal data strictly for lawful purposes defined under Indian financial regulations and digital data standards:
- Order Execution & Portfolio Creation: Transmitting order payloads, SIP registrations, and redemption requests to Asset Management Companies (AMCs) and RTAs (CAMS & KFintech) under ARN-133557.
- KYC Verification & Fraud Prevention: Validating client identities against SEBI-registered KRA databases (CVL, NDML, CAMS KRA, Karvy KRA, NSE KRA) and checking PEP status.
- Consolidated Reporting & Valuation: Consolidating cross-AMC holdings to deliver regular portfolio statements, capital gain summaries, and performance reviews.
- Regulatory Reporting & Statutory Compliance: Filing required disclosures under the Prevention of Money Laundering Act (PMLA), FATCA/CRS frameworks, and responding to regulatory inquiries from SEBI or AMFI.
- Service Communications: Dispathing transaction receipts, NAV updates, portfolio valuation alerts, tax statements, and mandatory compliance notices via Email, SMS, or WhatsApp.
3. AUTHORIZED DATA SHARING & THIRD-PARTY INTEGRATIONS
THIRD-PARTY SHARING
Zero Commercial Monetization: We never sell, lease, trade, or monetize investor personal information or contact databases to third-party advertisers under any circumstances.
Data is transmitted strictly on a need-to-know basis to authorized nodes within the regulated Indian financial infrastructure:
| Category of Recipient |
Primary Entities |
Purpose of Disclosure |
| Mutual Fund AMCs |
SBI MF, HDFC MF, ICICI Pru, Nippon, Axis, etc. |
Folio creation, investment execution, and investor servicing. |
| Registrar & Transfer Agents |
CAMS (Computer Age Management Services) & KFintech |
Unit allocation, transaction settlement, and CAS generation. |
| KYC Registration Agencies |
CVL KRA, NDML, CAMS KRA, Karvy, NSE KRA |
Centralized e-KYC compliance, address verification, and status updates. |
| Transaction Platforms |
BSE StAR MF, NSE NMF II, MF Central Platform |
Financial order routing, payment gateway verification, and clearing. |
| Statutory Authorities |
SEBI, Income Tax Dept, FIU-IND, Enforcement Directorate |
Mandatory legal disclosures, PMLA reporting, or judicial court orders. |
4. DATA SECURITY INFRASTRUCTURE & ENCRYPTION
SECURITY SAFEGUARDS
We maintain multi-layered technical and organizational safeguards to ensure data integrity and guard against unauthorized access, data loss, or breach:
- Encryption in Transit: All HTTP interactions with https://dkfiinserv.com/ are encrypted using 256-bit SSL/TLS Transport Layer Security.
- Encryption at Rest: Database backups and stored investor data are encrypted using industry-standard AES-256 algorithms.
- Access Control Isolation: Internal staff access to financial records is restricted based on strict role-based authorization rules (RBAC).
- Masked Identification: Financial documents displaying sensitive numbers (such as Aadhaar) are stored in masked, compliant formats.
5. STATUTORY RETENTION PERIODS & PURGING
DATA RETENTION
In accordance with SEBI (Intermediary) Regulations and Section 12 of the Prevention of Money Laundering Act (PMLA), investor identity details and complete transaction logs are retained for a mandatory minimum period of 8 years following the termination of the account relationship or completion of the last financial transaction.
6. YOUR RIGHTS UNDER THE DPDP ACT & SEBI RULES
INVESTOR RIGHTS
- Right to Access Summary: You may request a formal record of your personal data and processing activities maintained by us.
- Right to Correction & Updating: You may request correction or updating of inaccurate or outdated contact information, bank account details, or address records by providing standard supporting proofs.
- Right to Nomination: In accordance with SEBI guidelines, investors have the right to register or update primary and alternate nominees for all folios.
- Right to Grievance Redressal: Investors can lodge complaints regarding data processing practices directly with our designated Data Protection Grievance Officer.
7. COOKIE POLICY & DIGITAL TELEMETRY
COOKIES
https://dkfiinserv.com/ utilizes standard essential cookies to enable secure session management, remember user portal settings, and optimize navigation. Users can manage or disable cookies via browser settings, though certain functional features of the client portal may require session cookies to operate properly.
