Mintbyte Privacy Policy

image 64

1. Introduction & Scope

  • Purpose: This Privacy Policy (“Policy”) is designed to inform users of mintbyte.com (referred to as the “Website,” “Platform,” or “Services”) about the manner in which their Personal Data is collected, used, processed, stored, shared, and protected. This Policy underscores the commitment to respecting and safeguarding user privacy in strict compliance with all applicable Indian laws, including the Digital Personal Data Protection Act, 2023.
  • Acknowledgement and Consent: By accessing or using this Website, users signify their understanding of and agreement with the terms outlined in this Privacy Policy. In instances where explicit consent is mandated by law for specific data processing activities, such consent will be sought from the user separately and prior to such processing.
  • Identification of Data Fiduciaries:
    This Website serves as a common platform for two distinct legal entities, each acting as a “Data Fiduciary” under the Digital Personal Data Protection Act, 2023, for the personal data they process in connection with their respective services. 
  • MINTBYTE INVESTMENT SERVICES PRIVATE LIMITED (CIN: U66190MH2024PTC434330), with its registered office at HD-327, WeWork Oberoi Commerz II, 20th floor, CTS No. 95, 4 B 3 & 4 590, Off W. E. Highway, Oberoi Garden City, Goregaon East (D2), Mumbai, MH 400063 (hereinafter referred to as “Mintbyte Investments”). Mintbyte Investments provides financial product distribution services. For all Personal Data processed in connection with the offering and facilitation of these distribution services, Mintbyte Investments is the designated Data Fiduciary.
  • MINTBYTE WEALTH MANAGEMENT PRIVATE LIMITED (CIN: U66301CT2024PTC016431), with its registered office at C-16, SKY LIFE RAMA WORLD, PARSADA, Bilaspur Industrial Estate, Bilaspur(CGH)- 495223, Chhattisgarh, India (hereinafter referred to as “Mintbyte Wealth”). Mintbyte Wealth provides independent financial planning and investment advisory services. For all Personal Data processed in connection with the provision of these advisory services, Mintbyte Wealth is the designated Data Fiduciary.

Each entity, Mintbyte Investments and Mintbyte Wealth, acts as the primary and independent Data Fiduciary for the distinct data processing activities it undertakes in the course of its specific business operations and service delivery. This Policy will, where necessary, specify which entity is responsible for particular data processing activities, especially where these activities differ significantly. 

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below, consistent with the Digital Personal Data Protection Act, 2023, unless the context otherwise requires.

  • Personal Data: Means any data about an individual who is identifiable by or in relation to such data. This includes, but is not limited to, the categories of information detailed in Section 3 of this Policy.
  • Data Principal: Means the individual to whom the Personal Data relates.
  • Data Fiduciary: means any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data. For the purpose of this Policy, Mintbyte Investments and Mintbyte Wealth are Data Fiduciaries for their respective data processing activities.
  • Data Processor: Means any person who processes Personal Data on behalf of a Data Fiduciary.
  • Processing: In relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital Personal Data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction of Personal Data.
  • Consent: Means any free, specific, informed, unconditional, and unambiguous indication of the Data Principal’s wishes by which they, through a clear affirmative action, signify agreement to the processing of their Personal Data for the specified purpose.
  • DPDP Act: Means The Digital Personal Data Protection Act, 2023, and any rules, regulations, notifications, or amendments thereto issued from time to time.
  • Website/Platform: Refers to mintbyte.com and any associated mobile applications, web portals, or services offered by Mintbyte Investments and/or Mintbyte Wealth.

3. Information We Collect (Personal Data)

To enable the provision of services, Mintbyte Investments and Mintbyte Wealth collect various categories of Personal Data. The nature and extent of data collected may differ based on the specific services availed from each entity. This distinction is important for users to understand why certain information is requested by one entity and not necessarily the other, aligning with the principle of data minimization.

Categories of Personal Data Collected:

  • Identity & KYC Data: This includes, but is not limited to, full name, date of birth, gender, mother’s name, father’s name, Permanent Account Number (PAN), Aadhaar number (collected with explicit consent only for specified, lawful purposes such as eKYC, in accordance with UIDAI guidelines and the DPDP Act), passport details, driving license details, voter ID details, photograph, specimen signature, marital status, and nationality.
  • Contact Data: This includes email address, mobile and landline phone numbers, current and permanent residential address, and business address.
  • Financial Data: This includes bank account details (account number, IFSC code, bank name, account type), credit/debit card information (primarily for fee payments to Mintbyte Wealth or for specific transactions facilitated by Mintbyte Investments, processed securely), income details and proof, investment portfolio details, transaction history, risk appetite and profiling information, financial goals and objectives, tax status and related documents (e.g., Form 16, ITR), Demat account details.
  • Transactional Data: This includes details about the financial products and services you have enquired about or availed, payments made and received, transaction identification numbers, order details, and history of transactions.
  • Technical Data: This includes Internet Protocol (IP) address, browser type and version, device identifiers, operating system and platform, login data (excluding passwords), and cookie data (as detailed in our Cookie Policy section).
  • Usage Data: This includes information about how users navigate and use the Website and Services, such as pages visited, features utilized, time spent on various sections, and interaction patterns.
  • Communications Data: This includes records of correspondence, queries, feedback, survey responses, and interactions with customer support teams via email, phone, chat, or other communication channels.
  • Location Data: Precise geographic location data may be collected with explicit user consent if required for specific service features or regulatory compliance.
  • Sensitive Personal Data: Specific categories of data defined as sensitive under applicable law (e.g., health information for processing insurance applications distributed by Mintbyte Investments) will only be collected with explicit, informed consent from the Data Principal and will be processed with heightened security measures and confidentiality protocols.
  • How We Collect Personal Data:
  • Directly from You: Personal Data is primarily collected when you register on the Website, fill out application forms (online or physical), use our services, make transactions, communicate with our representatives, or respond to surveys and feedback requests.
  • Automatically: Certain technical and usage data may be collected automatically through the use of cookies, web beacons, server logs, and similar technologies when you interact with our Website.
  • From Third Parties: We may also receive Personal Data from various third-party sources, including but not limited to:
  • KYC Registration Agencies (KRAs), Central KYC Registry (CKYC), CERSAI, and UIDAI (for Aadhaar number authentication, only with your explicit consent and for specified purposes).
  • Asset Management Companies (AMCs), Insurance Companies, Portfolio Management Service (PMS) Providers, Alternative Investment Fund (AIF) Managers, and other financial product providers, in connection with services offered by Mintbyte Investments.
  • Stock exchanges, depositories, and stock brokers (e.g., Motilal Oswal Financial Services Limited, in connection with sub-broking services facilitated by Mintbyte Investments).
  • Background verification agencies (subject to your consent).
  • Publicly available sources such as government databases, public websites, and social media platforms (to the extent permitted by law).
  • Data Collection Specific to Mintbyte Investments:
    For the purpose of distributing financial products and related services, Mintbyte Investments may collect specific information necessary for processing applications, facilitating transactions, tracking commissions, managing client accounts for distributed products, and fulfilling its obligations as a sub-broker for Motilal Oswal. This includes details required by AMCs, insurers, and other product providers.
  • Data Collection Specific to Mintbyte Wealth:
    For the purpose of providing financial planning and investment advisory services, Mintbyte Wealth may collect detailed information regarding your financial situation, income, expenses, assets, liabilities, investment experience, risk tolerance, financial goals, and family details. This comprehensive data is essential for conducting thorough financial assessments and providing personalized, fiduciary advice.

The collection of data by each entity is guided by the necessity for providing their specific services and complying with regulatory mandates.

4. Purpose of Collection and Use of Personal Data

Your Personal Data is processed by Mintbyte Investments and Mintbyte Wealth only for lawful purposes for which you have provided explicit consent, or for certain legitimate uses as permitted under the DPDP Act and other applicable laws. The principle of “purpose limitation” is strictly adhered to, meaning Personal Data collected for a specific purpose will not be used for any other purpose without obtaining fresh consent, unless such processing is required or permitted by law. This is particularly important in a dual-entity structure to ensure data collected by one entity for its distinct services (e.g., fee-only advisory by Mintbyte Wealth) is not used by the other entity (e.g., commission-based distribution by Mintbyte Investments) without specific, informed consent for that new purpose. This separation maintains the integrity of each entity’s service model and respects user expectations.

General Purposes (Common to both Data Fiduciaries):

  • To provide, operate, maintain, and improve the Website and the Services offered thereon.
  • To verify your identity, conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as mandated by regulatory authorities.
  • To establish and manage your account and relationship with us.
  • To communicate with you regarding your account, transactions, service updates, and to respond to your queries, requests, and feedback.
  • To personalize your experience on the Website by presenting content and offers tailored to your interests (where consented).
  • To conduct data analysis, research, and internal assessments to improve our Website, Services, and product offerings.
  • To comply with all applicable legal and regulatory obligations, including reporting to authorities like SEBI, AMFI, FIU-IND, tax authorities, and law enforcement agencies.
  • For fraud detection and prevention, ensuring the security of our Platform and protecting against unauthorized or illegal activity.
  • To enforce our terms and conditions, and to protect our rights, property, or safety, and that of our users or others.

Specific Purposes for Mintbyte Investments (as Data Fiduciary):

  • To facilitate the distribution of various financial products, including Mutual Funds, Portfolio Management Services (PMS), Alternative Investment Funds (AIF), Insurance policies, and other investment products.
  • To process your applications, subscriptions, redemptions, switches, and other transactions with the respective product providers (AMCs, insurers, etc.).
  • To provide you with information about different financial products, their features, risks, and benefits.
  • To manage your account concerning the products distributed, provide transaction statements, portfolio reports, and other service-related communications.
  • To reconcile commission payments received from product providers and manage sub-broker arrangements (e.g., with Motilal Oswal for stock broking services).
  • To comply with guidelines issued by the Association of Mutual Funds in India (AMFI) and regulations stipulated by the Securities and Exchange Board of India (SEBI) for Mutual Fund Distributors and other intermediaries.
  • For marketing and promotional communications regarding financial products distributed by Mintbyte Investments, subject to your explicit consent where required by law.

Specific Purposes for Mintbyte Wealth (as Data Fiduciary):

  • To provide comprehensive financial planning and personalized investment advisory services.
  • To assess your current financial situation, including income, expenses, assets, liabilities, insurance coverage, and investment holdings.
  • To understand your risk tolerance, investment objectives, time horizon, and specific financial goals.
  • To develop, prepare, and recommend personalized financial plans and investment strategies aligned with your needs.
  • To provide ongoing monitoring and periodic review of your investment portfolio and financial plan, making adjustments as necessary.
  • To facilitate the execution of investment advice, if you opt for such services and as permitted under SEBI (Investment Advisers) Regulations.
  • To process billing for advisory fees and manage client accounts.
  • To comply with all provisions of the SEBI (Investment Advisers) Regulations, 2013, and subsequent amendments.
  • To fulfill all fiduciary duties and obligations towards advisory clients, ensuring advice is provided in your best interest.
  • For communications related to your advisory services, such as market insights, economic updates, and reviews of your financial plan.

Personal Data will not be processed in a way that is incompatible with these specified and lawful purposes.

5. Notice and Consent

The principles of providing clear notice and obtaining valid consent are central to our data processing practices, in line with the DPDP Act.

Providing Notice:
Before or at the time of collecting your Personal Data, Mintbyte Investments and/or Mintbyte Wealth (as applicable) will provide you with a clear and comprehensive notice. This Privacy Policy serves as a general notice. Specific notices may also be provided at the point of data collection for particular services or processing activities. Such notices will typically include:

  • The categories of Personal Data being collected.
  • The specific purposes for which the Personal Data will be processed.
  • The manner in which you can exercise your rights as a Data Principal (e.g., access, correction, withdrawal of consent).
  • The procedure for making a complaint to the Data Protection Board of India.
  • The contact details of the respective Data Fiduciary (Mintbyte Investments or Mintbyte Wealth) and their designated Grievance Officer.
  • If your Personal Data was collected prior to the commencement of the DPDP Act, a notice will be provided to you as soon as practicable, detailing the Personal Data held, the purposes of its processing, your rights under the Act, and how to exercise them.
  • Accessibility of Notice:
    The notice regarding data collection and processing will be presented in clear, plain, and easily understandable language. As required by the DPDP Act, such notices will be made available in English and, where feasible and required, in other languages specified in the Eighth Schedule to the Constitution of India. This requirement for multi-language notices has significant operational considerations, including accurate translation and ongoing maintenance of various language versions of policies and consent forms to ensure genuine understanding by a diverse user base.
  • Obtaining Consent:
    Your consent for the collection and processing of Personal Data will be obtained before or at the time of collection, unless such processing is permitted without consent under the DPDP Act or other applicable laws. Consent obtained will adhere to the following standards:

Free, Specific, Informed, Unconditional, and Unambiguous:

Consent will not be bundled with other terms and conditions in a way that makes it difficult to refuse or withdraw.

  • Clear Affirmative Action: Consent will be signified through a clear affirmative action on your part (e.g., ticking an unchecked box, clicking an “I Agree” or “I Consent” button specifically designed for that purpose). Pre-ticked boxes or implied consent for non-essential processing will not be used.
  • Limited to Necessary Data: Consent will be sought only for the Personal Data that is necessary for the specified purpose.
  • Granular Consent: Where appropriate, separate consents will be obtained for distinct processing activities or purposes, particularly if they involve different types of data or significantly different uses.
  • Consent for Children and Persons with Disabilities:
    For processing the Personal Data of individuals under the age of 18 (“Children”) or persons with disabilities who are under the care of a legal guardian, verifiable consent will be obtained from their parents or legal guardians prior to such processing.

Withdrawal of Consent:

  • You have the right to withdraw your consent for the processing of your Personal Data at any time. This can be done by contacting the Grievance Officer of the respective Data Fiduciary (Mintbyte Investments or Mintbyte Wealth), whose details are provided in Section 12 of this Policy.
  • The process for withdrawing consent will be designed to be as straightforward and easy as the process for giving consent.
  • Please note that withdrawal of consent will not affect the lawfulness of any processing that was carried out based on your consent before its withdrawal.
  • Upon withdrawal of consent, we will cease processing your Personal Data for the purposes for which consent was withdrawn, unless there is another legal basis for such processing (e.g., compliance with a legal obligation). The potential consequences of withdrawing consent (such as inability to continue providing certain services) will be clearly communicated to you.
  • Consent Managers:
    As per the provisions of the DPDP Act, we may engage with or facilitate the use of registered Consent Managers. These are entities that can help Data Principals manage, review, and withdraw their consent for various data processing activities in an accessible and transparent manner.

6. Disclosure and Sharing of Personal Data

Your Personal Data will be treated with confidentiality and will not be disclosed or shared with third parties except as outlined below, or as required or permitted by law.

Internal Sharing (Between Mintbyte Entities):

Personal Data collected by Mintbyte Investments may be shared with Mintbyte Wealth, and vice-versa, ONLY with your explicit, informed, and specific consent for clearly defined purposes. For instance, if you are a client of Mintbyte Investments and express interest in availing advisory services from Mintbyte Wealth, your relevant Personal Data may be shared with Mintbyte Wealth after obtaining your unambiguous consent for this specific purpose. Similarly, if an advisory client of Mintbyte Wealth wishes to implement advice through products distributed by Mintbyte Investments, data may be shared with Mintbyte Investments upon specific consent. The mechanism for such inter-entity sharing will be designed to ensure that consent is granular and not a blanket approval, respecting the distinct nature of each entity’s services and the DPDP Act’s requirements for specificity.

Sharing with Third Parties:

We may share your Personal Data with trusted third parties only in the following circumstances:

  • With Your Explicit Consent: For purposes to which you have specifically agreed.
  • Service Providers/Data Processors: We may engage vendors, consultants, technology partners, and other service providers who perform various services on our behalf. These may include KYC verification agencies, payment gateway providers, cloud storage providers, IT infrastructure and support services, Asset Management Companies (AMCs), Registrar and Transfer Agents (RTAs), stock brokers (such as Motilal Oswal Financial Services Limited for sub-broking services), insurance companies, PMS providers, and AIF managers. These third parties act as Data Processors and are contractually bound to maintain the confidentiality and security of your Personal Data, and to use it only for the specific purposes for which it was disclosed to them, in accordance with our instructions and applicable law.
  • Regulatory and Legal Requirements: We may disclose your Personal Data if required to do so by law, or in response to valid requests from regulatory authorities (such as SEBI, AMFI, RBI, IRDAI, FIU-IND), government agencies, courts, or law enforcement bodies. This includes disclosures for purposes of national security, crime prevention or detection, or to comply with legal proceedings.
  • Business Transfers: In the event of a merger, acquisition, amalgamation, sale of assets, corporate restructuring, or similar business transaction involving Mintbyte Investments or Mintbyte Wealth, your Personal Data may be transferred to the acquiring or resulting entity. In such cases, the receiving entity will be required to protect your Personal Data in a manner consistent with this Privacy Policy and applicable law.
  • Protection of Rights and Property: We may disclose Personal Data if we believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or that of our users, employees, or the public, as required or permitted by law.
  • No Sale of Personal Data:
    We affirm that we do not sell your Personal Data to any third parties for marketing or any other commercial purposes.
  • Cross-Border Data Transfers:
  • In certain circumstances, your Personal Data may be transferred to, stored, and processed in countries other than India, for example, if we use cloud service providers with servers located internationally.
  • Any such international transfers of Personal Data will be conducted in compliance with the DPDP Act. This means transfers will generally be made only to countries that are permitted by the Government of India through notification, or with your explicit consent obtained after informing you of the associated risks. We will take appropriate steps to ensure that your Personal Data receives an adequate level of protection in the recipient jurisdiction, comparable to the protection it receives in India.

7. Data Security

  • Commitment: Mintbyte Investments and Mintbyte Wealth are deeply committed to protecting your Personal Data from unauthorized access, disclosure, alteration, use, loss, or destruction. We implement robust security practices and procedures to safeguard your information.
  • Security Measures Implemented:
    We employ a combination of technical, organizational, and physical security measures, consistent with industry best practices and legal requirements, including:
  • Technical Safeguards: Use of encryption technologies (such as SSL/TLS for data in transit and AES-256 or equivalent for data at rest), firewalls, secure server infrastructure, intrusion detection and prevention systems, multi-factor authentication, and regular vulnerability assessments and penetration testing.
  • Organizational Safeguards: Implementation of role-based access controls to limit access to Personal Data on a need-to-know basis, data minimization practices, regular security awareness training for employees, comprehensive information security policies and procedures, confidentiality agreements with employees and third-party service providers, and periodic internal and external security audits.
  • Physical Safeguards: Secure office premises, controlled access to data centers, and measures to protect against environmental hazards. We strive to implement reasonable security practices and procedures as mandated by applicable laws, including the DPDP Act and relevant SEBI/AMFI guidelines.
  • Data Breach Notification:
  • In the unfortunate event of a Personal Data breach that is likely to affect you, we will notify the Data Protection Board of India and the affected Data Principals in accordance with the requirements and timelines stipulated under the DPDP Act and its rules. The DPDP Act’s mandate for notifying both the Board and affected users of any personal data breach, regardless of perceived harm, signifies a strong emphasis on transparency and accountability. This necessitates robust internal breach detection, assessment, and incident response protocols that are regularly reviewed and tested to ensure timely and compliant notification.
  • The notification will provide details about the nature of the breach, the categories of Personal Data compromised, the potential consequences of the breach, and the measures being taken by us to mitigate the impact and prevent future occurrences.
  • Disclaimer:
    While we take all reasonable and appropriate steps to protect your Personal Data, it is important to acknowledge that no security system is entirely impenetrable or infallible. Despite our best efforts, we cannot guarantee the absolute security of your Personal Data transmitted to or stored on our systems. Users also play a role in protecting their data by using strong passwords, safeguarding their login credentials, and being cautious about phishing attempts.

8. Data Retention and Erasure

  • Retention Period:
    Your Personal Data will be retained by Mintbyte Investments and Mintbyte Wealth only for as long as it is necessary to fulfill the specific purposes for which it was collected and processed, as outlined in this Policy. The retention period will also be determined by the requirements of applicable laws and regulatory obligations. For financial services entities, various regulations (e.g., SEBI record-keeping obligations for MFDs and RIAs, Prevention of Money Laundering Act (PMLA) rules, Companies Act provisions) mandate the retention of certain client data and transaction records for specified periods, often extending for several years even after the conclusion of the business relationship or a transaction.
  • Erasure of Data:
    Subject to applicable legal and regulatory retention requirements, your Personal Data will be securely erased or anonymized when:
  • It is reasonable to assume that the purpose for which the Personal Data was collected is no longer being served by its retention.
  • You withdraw your consent for the processing of your Personal Data, and there is no other legal basis (such as a legal obligation) that permits or requires its continued retention.
  • You make a valid request for the erasure of your Personal Data, and such erasure is not prohibited by any overriding legal or regulatory requirements. The interplay between the “right to erasure” under the DPDP Act and these mandatory retention periods means that an erasure request cannot always be immediately fulfilled if other laws require the data to be kept. Users will be informed if their erasure request cannot be fully complied with due to such legal obligations.
  • Criteria for Determining Retention:
    The specific retention periods for different categories of Personal Data are determined based on factors including:
  • The nature and sensitivity of the Personal Data.
  • The purposes for which the data is processed.
  • The duration of your relationship with Mintbyte Investments and/or Mintbyte Wealth.
  • Applicable legal and regulatory requirements (e.g., SEBI mandates record retention for 5 years for IAs; PMLA mandates retention for 5 years after the business relationship ends).
  • Internal business needs and operational requirements.
  • Anonymization/De-identification:
    In some instances, we may choose to anonymize or de-identify your Personal Data (so that it can no longer be associated with you) for research, statistical analysis, or other legitimate business purposes. Anonymized data may be used indefinitely without further notice to you, as it no longer qualifies as Personal Data.

9. Your Rights as a Data Principal (under DPDP Act 2023)

The DPDP Act grants Data Principals several rights concerning their Personal Data. Mintbyte Investments and Mintbyte Wealth are committed to facilitating the exercise of these rights.

  • Right to Access Information:
    You have the right to obtain from the respective Data Fiduciary:
  • A summary of your Personal Data that is being processed or has been processed.
  • Information about the processing activities undertaken with respect to your Personal Data.
  • The identities of all other Data Fiduciaries or Data Processors with whom your Personal Data has been shared, along with a description of the Personal Data so shared.
  • Any other information as may be prescribed under the DPDP Act and its rules.

Right to Correction and Erasure:

  • You have the right to request the correction of any Personal Data that is inaccurate, incomplete, or misleading.
  • You have the right to request the completion of any incomplete Personal Data.
  • You have the right to request the updating of your Personal Data that is out of date.
  • You have the right to request the erasure of your Personal Data, subject to the limitations outlined in Section 8 (Data Retention and Erasure) of this Policy, particularly concerning overriding legal or regulatory retention obligations.
  • Right to Grievance Redressal:
    You have the right to a readily available and effective means of grievance redressal for any act or omission by the Data Fiduciary regarding the performance of its obligations concerning your Personal Data or the exercise of your rights under the DPDP Act. Details of our Grievance Redressal mechanism are provided in Section 12.
  • Right to Nominate:
    You have the right to nominate any other individual who, in the event of your death or incapacity (due to unsoundness of mind or infirmity of body), shall exercise your rights as a Data Principal under the DPDP Act. Mintbyte will need to establish an operational process to securely record such nominations and to verify the nominee’s identity and the triggering event (death/incapacity) when a request is made by a nominee. This is a unique provision requiring careful system design for implementation.
  • Right to Withdraw Consent:
    This right is detailed in Section 5 (Notice and Consent) of this Policy.
  • Exercising Your Rights:
    To exercise any of these rights, please contact the Grievance Officer of the relevant Data Fiduciary (Mintbyte Investments or Mintbyte Wealth), whose contact details are provided in Section 12. We will endeavor to respond to your verifiable requests in accordance with the timelines and procedures prescribed by the DPDP Act and its rules. We may need to verify your identity before processing your request.

10. Cookie Policy

This section explains how mintbyte.com uses cookies and similar tracking technologies.

  • What are Cookies:
    Cookies are small text files containing a string of characters that are placed on your computer or mobile device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
  • Types of Cookies Used:
    We may use the following types of cookies on our Website:
  • Strictly Necessary Cookies: These cookies are essential for the operation of our Website and enable you to navigate the site and use its features, such as accessing secure areas or managing your session. These cookies do not typically store personally identifiable information.
  • Performance/Analytical Cookies: These cookies collect information about how visitors use our Website, such as which pages are visited most often, how much time is spent on pages, and if any error messages are encountered. This data helps us understand user interaction patterns and improve the performance and usability of our Website (e.g., through services like Google Analytics).
  • Functionality Cookies: These cookies allow our Website to remember choices you make (such as your username, language, or region) and provide enhanced, more personalized features.
  • Targeting/Marketing Cookies: These cookies may be used to deliver advertisements that are more relevant to you and your interests, based on your browsing habits. They may also be used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns. Such cookies will only be used with your explicit consent.
  • Purpose of Using Cookies:
    We use cookies and similar technologies to:
  • Operate and maintain the functionality of the Website.
  • Enhance your user experience by remembering preferences and settings.
  • Analyze website traffic and usage patterns to improve our services.
  • Personalize content and, with your consent, deliver targeted advertising.
  • Ensure the security of our Website and detect fraudulent activity.
  • Managing Cookies:
    You have the ability to manage your cookie preferences. When you first visit our Website, you may be presented with a cookie consent banner or tool that allows you to accept or decline different categories of non-essential cookies. You can also typically control and manage cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies. However, please note that if you choose to disable or block certain cookies, some parts of our Website may not function properly or your user experience may be affected. The DPDP Act’s stringent consent standards (free, specific, informed, unambiguous) apply to non-essential cookies used for tracking and profiling, necessitating granular consent options rather than a simple “accept all” approach.
  • Third-Party Cookies:
    Some cookies on our Website may be placed by third-party service providers, such as analytics services (e.g., Google Analytics), social media plugins, or advertising networks. The use of these cookies is governed by the respective privacy policies of these third parties, and we do not have direct control over them. We encourage you to review their policies.

More Information:
For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our dedicated [Link to Detailed Cookie Policy page, if maintained separately, otherwise this section serves as the policy].

11. Children's Data

Mintbyte Investments and Mintbyte Wealth are committed to protecting the privacy of children.

  • Policy:
    We do not knowingly collect, use, or process Personal Data from individuals under the age of 18 (“Children”) without obtaining prior verifiable consent from their parents or legal guardians. Our Website and Services are generally not directed at Children.
  • Prohibited Processing:
    In compliance with the DPDP Act, we will not undertake any tracking or behavioral monitoring of Children, nor direct targeted advertising at Children. Furthermore, we will not process any Personal Data of Children in a manner that is likely to cause them any harm or detriment.
  • Parental Consent:
    If it becomes necessary to collect Personal Data from Children (for example, in the context of a financial product or account opened for a minor by their parent or legal guardian, such as a minor’s mutual fund account facilitated by Mintbyte Investments, or financial planning advice from Mintbyte Wealth concerning a child’s future), we will take steps to obtain verifiable consent from their parent or legal guardian before collecting such data. The obligation for “verifiable” consent implies a higher standard than simple declaration and may require Mintbyte to implement more robust methods to confirm parental/guardian authority, especially for financial services.
  • Parental Rights:
    Parents or legal guardians who have provided consent for the collection of their child’s Personal Data have the right to review the information collected, request corrections or updates, and request the deletion of such data, subject to applicable legal and regulatory requirements. Such requests can be made by contacting the relevant Grievance Officer.

12. Grievance Redressal

Mintbyte Investments and Mintbyte Wealth are committed to addressing any privacy-related grievances or concerns you may have in a timely, transparent, and effective manner.

  • Commitment: We aim to resolve your issues fairly and in accordance with applicable data protection laws.
  • Grievance Officers:
    In compliance with the DPDP Act and other relevant regulations (such as those under the Companies Act requiring a contact person for grievances), we have appointed separate Grievance Officers for each Data Fiduciary. Appointing distinct officers ensures that grievances are handled by personnel most familiar with the specific services and regulatory framework of each entity, leading to more efficient and knowledgeable resolution.

For MINTBYTE INVESTMENT SERVICES PRIVATE LIMITED:

  • Email Address: [email protected]
  • Phone Number:+91-9833139568
  • Postal Address: HD-327, WeWork Oberoi Commerz II, 20th floor, CTS No. 95, 4 B 3 & 4 590, Off W. E. Highway, Oberoi Garden City, Goregaon East (D2), Mumbai, MH 400063, India.

Process for Lodging Complaints:

  • If you have any grievances regarding the processing of your Personal Data, or if you wish to exercise any of your rights under the DPDP Act, please contact the Grievance Officer of the relevant Data Fiduciary (Mintbyte Investments or Mintbyte Wealth, depending on which entity’s services your grievance pertains to) using the contact details provided above.
  • Please provide sufficient details of your grievance or request to enable us to understand and address it effectively.
  • We will acknowledge receipt of your complaint promptly and will endeavor to investigate and resolve it within the timelines prescribed by applicable law (e.g., the DPDP Act or its rules may specify such timelines).

Escalation to Data Protection Board:

If your grievance is not resolved to your satisfaction by our Grievance Officer, or if you do not receive a response within the stipulated timeframe, you have the right to lodge a complaint with the Data Protection Board of India, as established under the DPDP Act.

13. Updates to this Privacy Policy

  • Mintbyte Investments and Mintbyte Wealth reserve the right to update, amend, or modify this Privacy Policy at any time and from time to time, without prior notice, to reflect changes in our data processing practices, legal or regulatory requirements, or technological advancements.
  • Any changes to this Privacy Policy will be effective immediately upon posting the revised Policy on this Website. The “Last Updated” date at the beginning of this Policy will be revised accordingly.
  • We encourage you to periodically review this Privacy Policy to stay informed about how we are collecting, using, and protecting your Personal Data.
  • For significant or material changes to this Policy, we may also provide a more prominent notice on the Website or notify you directly through email or other communication channels, where feasible and appropriate. Your continued use of the Website or Services after such changes will constitute your acceptance of the revised Privacy Policy.

14. Governing Law and Jurisdiction

  • This Privacy Policy and any disputes arising out of or in connection with it, including its interpretation and validity, shall be governed by and construed in accordance with the laws of India.
  • The competent courts located in Mumbai, India, shall have exclusive jurisdiction to adjudicate any disputes, claims, or proceedings arising out of or in connection with this Privacy Policy or the processing of Personal Data hereunder. This jurisdiction applies to matters concerning both Mintbyte Investments Private Limited and Mintbyte Wealth Management Private Limited.