Privacy Policy
1. Introduction and Scope
This Privacy Policy outlines how Abhijit Sinha, an AMFI-registered Mutual Fund Distributor (ARN-367596), collects, uses, stores, and protects your personal and financial details. When you use this website (abhijitsinha.in), submit contact forms, or schedule consultations, you agree to the data practices described on this page.
2. Information We Collect
We collect only the information required to assess investment suitability, schedule meetings, and facilitate mutual fund transactions:
- Contact Data: Full name, email address, phone number, and city of residence.
- Financial Profile & Goals: Investment horizons, target asset brackets, risk preferences, and existing SIP records shared during consultations.
- KYC & Regulatory Information: PAN, date of birth, bank account details, and address proofs required strictly during transaction onboarding.
- Technical Logs: Our hosting provider processes basic request data, including IP address, transiently for security and abuse prevention. This is separate from the website measurement described in Section 5.2, which stores no IP address at all.
- Website Usage: Anonymous, cookieless measurement of which pages are viewed and which links are clicked — see Section 5.2.
3. Purpose and Legal Basis for Processing
- Evaluating investment suitability before initiating mutual fund applications.
- Coordinating 1:1 exploratory meetings and responding to inbound service requests.
- Facilitating investor onboarding and transaction routing through SEBI-registered RTAs (CAMS/KFintech) and AMCs.
- Fulfilling statutory record-keeping mandates required by SEBI and AMFI.
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for commercial marketing. Your details are shared strictly under the following conditions:
- Authorized Infrastructure Entities: SEBI-registered AMCs, RTAs (CAMS/KFintech), payment gateways, and transaction platforms (such as BSE StAR MF or NSE NMF II) to execute investment instructions.
- Legal & Regulatory Obligations: Statutory bodies, law enforcement agencies, or tax authorities when mandated by applicable Indian laws or regulatory directives.
5. Data Storage and Security
We implement technical safeguards to prevent unauthorized access, alteration, or disclosure of your information. Digital records are stored on access-controlled systems. You must recognize that no digital transmission over the internet offers absolute security.
5.1 Website Enquiry Forms
When you submit an enquiry or service request through a form on this website, the details you enter — your name, email address, mobile number, and the content of your message, along with any investment goal or service category you select — are transmitted over an encrypted connection and stored in a managed database hosted by Supabase, on servers located in India. A copy is also emailed to us so that we can respond.
Access to these submissions is restricted to Abhijit Sinha and authorised website administrators, who must sign in individually; the records are not publicly accessible. Enquiry records are retained only for as long as needed to respond to and follow up on your request, after which they are deleted. Submissions that do not lead to an ongoing engagement are removed within 24 months.
Please do not enter folio numbers, PAN, bank account details, or other account identifiers into website forms. These forms are not designed to carry that information, and we do not ask for it here. Where such details are genuinely required, they are collected separately during regulated onboarding through the AMC or RTA channels described in Section 4.
You may ask us to delete your enquiry record at any time using the contact address below, subject to the statutory retention requirements noted in Section 6.
Before a form submission reaches us it passes an automated check that the sender is a person rather than a script. That check is described in Section 5.6.
5.2 Website Analytics
We measure how this website is used so we can tell which pages are useful and which are not. This measurement is first-party and cookieless. It sets no cookie, stores nothing in your browser, and is not shared with any advertising network or analytics company.
For each page view or link click we record: the page path (with any query string removed), the domain name of the website that referred you (never the full referring address), a broad device category derived from your window width (mobile, tablet or desktop), the label and destination of the link or button clicked, and any campaign tag present in the address.
We do not store your IP address, your browser's user-agent string, your location, or any advertising identifier, and we do not build a profile of you. To distinguish one visit from another we use a scrambled identifier calculated on our server, which changes every day and cannot be reversed or linked back to you — so the same visitor returning tomorrow is counted as a new one. There is no tracking across other websites.
This data is stored in the same Supabase database in India described in Section 5.1, is readable only by authorised administrators, and is automatically deleted after 13 months. Visits to the administrator pages are never recorded.
Cookies. This website sets no cookies for measurement, advertising or profiling, and does not use browser storage to identify you. The only item this site itself stores in your browser is your own privacy choice below, recorded so we do not have to ask again. The one exception is the anti-spam check on our enquiry forms, which may set a short-lived cookie of its own strictly to remember that the check was passed — see Section 5.6. There is no advertising, remarketing or cross-site tracking on this website.
How to opt out. A notice appears on your first visit offering to exclude you from measurement. Choosing “Don’t count my visit” stops all measurement requests immediately and permanently on that browser. You can change your choice at any time using the Privacy Choices link in the footer of every page. If your browser sends a “Do Not Track” signal, no measurement request is made regardless of any choice. You may also object by writing to the address at the end of this policy.
5.3 Embedded Video
Videos in the Knowledge Corner are hosted on YouTube and embedded through youtube-nocookie.com. Nothing is requested from Google until you click play — the preview you see before clicking is drawn by this website and involves no third party. Once you choose to play a video, YouTube receives that request and it is governed by Google’s own privacy policy.
5.4 Booking Calendar
Meeting slots on the Schedule page are handled by Calendly. The calendar is not loaded automatically: nothing is requested from Calendly until you choose “Load booking calendar”, so simply visiting the page contacts no third party. Once you open the calendar, or follow the link to it in a new tab, Calendly receives that request and anything you enter there — your name, email and chosen time — is handled under Calendly’s own privacy policy. You can avoid it entirely by emailing or calling using the details on that page instead.
5.5 Links to Other Websites
The Knowledge Corner links to material published elsewhere, and the Investor Services page links to the registrars’ own self-service portals. Those websites are outside our control and have their own privacy practices. Listing a source is not an endorsement of it.
5.6 Form Spam Protection
The enquiry forms on this website are protected by Cloudflare Turnstile, which distinguishes a person filling in a form from an automated script. It runs only on the pages that carry a form, and only that check — it is a security measure, not analytics, and it is not used for advertising or to profile you.
To perform the check, Cloudflare receives your IP address and limited technical signals about your browser, and may set a short-lived cookie or store a token in your browser to record that the check was passed. The contents of the form are never sent to Cloudflare — your name, email, mobile number and message go only to us, as described in Section 5.1. What Cloudflare receives is handled under Cloudflare’s own privacy policy, and Cloudflare states that Turnstile data is not used to train models or to build advertising profiles.
We also apply our own automated limits on how many submissions can be sent from one connection in a short period. Those limits work on a scrambled, non-reversible value calculated on our server; no IP address is stored.
If you would rather not use the form at all, you can reach us on WhatsApp, by phone or by email using the details at the end of this policy, and no third party is involved.
6. Your Data Rights
Subject to mandatory statutory retention requirements under Indian financial regulations, you maintain the right to:
- Request a copy of the personal information stored in our records.
- Request corrections to inaccurate, incomplete, or outdated personal information.
- Withdraw consent for ongoing non-regulatory email communications.
For data privacy inquiries, email support@abhijitsinha.in.