Privacy Policy - Money Yatra

1. Privacy Commitment

Money Yatra Associates LLP (ARN-167231), AMFI Registered Mutual Fund Distributor & SIF Distributor, is committed to maintaining the privacy, confidentiality, and security of personal information collected from investors, employees, and website visitors. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), Information Technology Act 2000, SEBI Master Circulars for Mutual Funds, and AMFI Data Sharing Principles prescribed under the AMFI Master Circular for MFDs dated 14-January-2026.

2. Scope & Applicability

This policy applies to all individuals interacting with Money Yatra Associates LLP through our website (www.moneyyatra.co.in), mobile application (Money Yatra), during client onboarding, Know Your Customer (KYC) verification, risk profiling, and mutual fund / SIF transaction processing. It extends to all employees, service providers, and vendors authorised to access or process client information on our behalf. By engaging with Money Yatra Associates LLP or accessing our website, you consent to the collection and use of your personal information as described in this policy.

3. Information We Collect

Personal Details

Name, address, date of birth, PAN, Aadhaar (for KYC), contact details (mobile number, email ID), bank account information, nomination details, and investment preferences.

Financial Details

Annual income range, net worth, existing investments, risk profile assessment responses, investment horizon, goals, and transaction history.

KYC Documents

PAN card copy, Aadhaar copy, address proof, photograph, bank statement or cancelled cheque, FATCA/CRS self-declaration, and UBO details (for non-individual investors).

Technical Data

IP address, browser type, device information, operating system, and cookies when you visit our website.

We do NOT collect unnecessary personal data such as religion, caste, political affiliation, or any data not required for mutual fund distribution services and regulatory compliance.

4. Purpose of Data Collection

Your data is used strictly for:

Processing mutual fund and SIF distribution transactions;
Completing KYC and meeting SEBI/AMFI/PMLA regulatory obligations;
Conducting risk profiling and investment suitability assessment;
Sending transaction confirmations, account statements, NAV updates, and service-related communications;
Responding to your queries, service requests, and complaints;
Meeting regulatory reporting requirements to SEBI, AMFI, and other authorities;
Improving our website functionality and user experience.

We do NOT use your data for any purpose other than what is stated above.

5. Data Sharing Rules

We share your data only in these specific situations, and never beyond what is necessary:

With AMCs and RTAs: For processing your mutual fund and SIF transactions. This is a regulatory requirement and covers CAMS, KFintech, and respective Asset Management Companies.
With SEBI, AMFI: Upon official request or regulatory order. This is mandatory compliance.
With AMC/AMFI-appointed auditors: During due diligence or compliance audits. This is a regulatory obligation.
With KYC Registration Agencies (KRAs): CAMS KRA, CVL KRA, NDML KRA, and CKYC for KYC verification purposes.
With BSE Star MF: As our transaction platform provider for order processing and settlement.
With JM Financial Services Ltd: As our principal stock broker for equity trading services under the AP arrangement.

We do NOT sell, rent, or share your personal data with any third party for marketing purposes. We do NOT share your data with any entity not listed above without your explicit consent.

6. Data Retention

We retain your personal data for the following periods:

KYC and PMLA records: 5 years after the end of the business relationship, as required under PML Rules 2005;
Transaction records: 5 years from the date of the transaction;
Tax-related records: 6 years from the end of the relevant assessment year under the Income Tax Act 1961;
GST records: 6 years from the due date of the annual return;
Digital communications: minimum 3 years or longer as required by AMFI/SEBI.

After the retention period expires, data is securely deleted or anonymised.

7. Data Principal Rights (DPDPA 2023)

Under the Digital Personal Data Protection Act 2023, you have the following rights as a Data Principal:

Right to access your personal data held by us.
Right to correct inaccurate or incomplete personal data.
Right to erasure of your personal data (subject to regulatory retention requirements).
Right to withdraw consent for data processing at any time (this may affect our ability to provide services).
Right to grievance redressal — you may file a complaint with our DPDPA Grievance Officer.
Right to nominate another person to exercise your rights in case of death or incapacity.

To exercise any of these rights, contact our DPDPA Grievance Officer:
Mr. Aashish Sahu │ moneyyatraindia@gmail.com │ 9235737411

We will respond within 30 days of receiving your request.

8. Data Security

We implement appropriate physical, electronic, and administrative safeguards to protect your information from unauthorised access, disclosure, alteration, or destruction. These include: password-protected systems, encrypted data transmission where available, restricted access to personal data on a need-to-know basis, regular security awareness training for employees, and secure disposal of physical documents containing personal data.

9. Cookies

Our website may use cookies and similar technologies to improve user experience, analyse website traffic, and remember your preferences. You may disable cookies through your browser settings. Disabling cookies may affect certain features of our website.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in regulations or our data practices. The updated policy will be posted on this page with the revised effective date. We encourage you to review this policy periodically.