Privacy Policy

1. Information We Collect

1.1 Personal Identification Information

When you create an account or use our services, we may collect:

• Full name, date of birth, gender
• PAN Card, Aadhaar number (for KYC compliance as mandated by SEBI/RBI)
• Contact details: email address, phone number, postal address
• Bank account details and IFSC code
• Passport or Voter ID (for NRI accounts)

1.2 Financial Information

To provide investment services, we collect:

• Income details and net worth declaration
• Investment preferences and risk profile
• Transaction history and portfolio data
• Bank statements for IPO and margin applications

1.3 Technical & Usage Information

Automatically collected when you use our platforms:

• IP address, browser type, operating system
• Pages visited, time spent, clickstream data
• Device identifiers and mobile advertising IDs
• Log files and error reports

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: Create and manage your Demat and trading account
• KYC Compliance: Comply with SEBI, PMLA, and other regulatory obligations
• Service Delivery: Execute trades, process mutual fund transactions, and provide PMS
• Communication: Send trade confirmations, account statements, and important alerts
• Marketing: Send promotional offers, research reports, and investment ideas (with consent)
• Risk Management: Detect fraud, unauthorized access, and suspicious activities
• Research & Analytics: Improve our services and personalize your experience
• Legal Compliance: Meet legal obligations imposed by SEBI, IRDAI, RBI, and other regulators

3. Sharing of Information

We do not sell your personal information. We may share your data with:

• Regulatory Authorities: SEBI, NSE, BSE, CDSL, NSDL, Income Tax, and other government bodies as required by law
• Group Companies: Motilal Oswals AMC, Motilal Oswals Wealth, and other group entities for holistic service delivery
• Service Providers: Technology partners, KYC agencies, payment gateways under strict confidentiality agreements
• Banks & Custodians: For execution and settlement of financial transactions
• Legal Requirements: If required by court order, law, or to protect our rights

4. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL/TLS encryption for all data transmission
• Two-Factor Authentication (2FA) for account access
• Regular security audits and penetration testing
• ISO 27001-compliant data centers
• Role-based access controls for employee data access
• Real-time fraud detection and monitoring systems

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and never share OTPs with anyone.

5. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for the website to function (login sessions, security)
• Analytics Cookies: Google Analytics for understanding usage patterns
• Preference Cookies: Remember your settings and customizations
• Marketing Cookies: Deliver relevant advertisements on third-party platforms

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

6. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing communications at any time
• Data Portability: Request transfer of your data to another service provider
• Grievance: Lodge a complaint with our Grievance Officer (details below)

To exercise these rights, contact us at privacy@motilaloswals.com

7. Data Retention

We retain your personal information for as long as:

• Your account is active and you are our client
• Required by SEBI regulations (typically 5-8 years post account closure)
• Necessary to resolve disputes, enforce agreements, or comply with legal obligations

After the retention period, data is securely deleted or anonymized.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before sharing any information.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete it promptly. Guardians may open minor accounts under applicable regulations.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered clients
• Display a prominent notice on our website/app

Continued use of our services after policy changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related queries or to exercise your rights, contact our Grievance Officer: