Privacy policy
This policy explains what personal data we process when you use IPOKhazana, why, and the rights you have under the Digital Personal Data Protection Act, 2023 and the rules under it.
Effective [DD Month YYYY] · Operated by [Operating entity legal name]
1. Who is responsible
[Operating entity legal name], [Registered office address, city, state, PIN], is the data fiduciary for personal data processed through the Site. Contact: [contact@yourdomain.in].
2. What we collect and why
The Site can be read without creating an account. Depending on how you use it, we may process:
- Technical data — IP address, browser type, device type, pages visited, referring page and timestamps, collected automatically in server logs. Purpose: keeping the Site running, securing it against abuse and understanding aggregate usage. Lawful basis: legitimate use for the service you have requested, and consent for any non-essential analytics.
- Preferences — your theme choice (light or dark) and, if offered, watchlists or filters. Stored on your device, not on our servers, unless you create an account.
- Contact and grievance data — name, email, phone number and the content of your message when you write to us. Purpose: responding to you and keeping a record as required by law.
- Account and alert data — if the Site offers accounts or email/SMS alerts, your email address or mobile number and the alerts you choose. Purpose: delivering the service you asked for. Lawful basis: your consent.
We do not collect PAN, demat, bank, UPI or application details. We do not check allotment status on your behalf; registrar links open the registrar’s own website.
3. Consent and how to withdraw it
Where processing is based on consent, we ask for it with a clear notice describing the data and purpose before collecting it. You can withdraw consent at any time, as easily as you gave it, by adjusting your cookie or alert settings on the Site or by writing to [contact@yourdomain.in]. Withdrawal does not affect processing that already took place lawfully, and we may need to stop providing the related feature.
4. Cookies and similar technologies
Strictly necessary cookies keep the Site working (for example, remembering your theme). Analytics or advertising cookies, if any, are set only after you consent through the cookie notice, and you can change your choice at any time from the footer. We do not use behavioural tracking or targeted advertising aimed at children.
5. Sharing
We share personal data only with:
- service providers who host, secure or deliver the Site or its alerts, under contracts that restrict use to our instructions;
- authorities where required by law or to protect the rights and safety of users;
- a successor in the event of a merger or transfer of the Site, under this policy.
We do not sell personal data.
6. Storage, transfer and retention
Data is stored on servers located in [India / specify region]. If any processor is located outside India, transfers are made only to countries permitted under the Act and with contractual safeguards. We keep server logs for [e.g. 90 days], grievance records for the period required by law, and account data for as long as you keep the account plus a short period thereafter, after which data is deleted or anonymised. Data is also erased when the purpose is served or when you withdraw consent, unless retention is required by law.
7. Security
We use encryption in transit, access controls and monitoring appropriate to the data we hold. In the event of a personal data breach we will notify the Data Protection Board of India and affected users in the form and time required by the rules.
8. Children
The Site is intended for adults. We do not knowingly process the personal data of children under 18 without verifiable parental consent, and we do not track children or target advertising at them. If you believe a child has provided us data, contact us and we will delete it.
9. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- access a summary of the personal data we hold about you and how it has been processed;
- have inaccurate or incomplete data corrected, and outdated data updated;
- have your data erased when it is no longer needed for the purpose or you withdraw consent;
- nominate a person to exercise these rights on your behalf in the event of death or incapacity;
- an accessible grievance redressal process, described below.
To exercise a right, write to [contact@yourdomain.in] with enough detail for us to verify your identity. We respond within the time required by law.
10. Grievance Officer and escalation
Grievance Officer: [Grievance Officer name], [grievance@yourdomain.in], [+91-XXXXXXXXXX], [Registered office address, city, state, PIN]. We acknowledge grievances promptly and resolve them within the time prescribed under applicable law, and in any event within 90 days. If you are not satisfied with our response you may approach the Data Protection Board of India. Details of the process are on the Contact & grievance page.
11. Changes to this policy
We will post any changes here with a new effective date and, for material changes affecting consent, ask for your consent again.