Privacy Policy

• Identity and KYC: name, date of birth, gender, photograph, signature, PAN, Aadhaar number (where you choose Aadhaar-based eKYC or it is required for NPS enrolment), proof-of-identity and proof-of-address documents, and KYC records obtained from KYC Registration Agencies (KRAs) and the Central KYC registry.
• Contact: mobile number, email address and postal address.
• Financial: bank account number and IFSC, UPI ID, income range, occupation, nominee details, and your investment transactions and holdings.
• Technical: device and browser information, IP address, and log data — along with the cookies or similar identifiers needed to keep you signed in and keep the platform secure.
• Communications: your support requests and correspondence with us. Calls may be recorded for quality and fraud prevention.

• To verify your identity and complete KYC as required by SEBI and PFRDA.
• To open and service your account and execute your instructions — Mutual Fund purchases, redemptions and SIPs, and NPS enrolment, contributions and withdrawal requests.
• To send transaction confirmations, statements, alerts and other service communications by SMS, email or WhatsApp.
• To comply with applicable law, including SEBI, AMFI and PFRDA requirements, the Prevention of Money Laundering Act, 2002, and tax law.
• To detect and prevent fraud and keep the platform secure.
• To respond to your queries and improve the Services.

We send marketing communications only where you have consented to receive them, and you can opt out at any time.

We process your personal data on the basis of the consent you give at registration, and for the legitimate uses the DPDP Act permits (such as complying with the law or an order of a court or regulator). You may withdraw your consent at any time by writing to support@uniclusion.com. If you do, we may no longer be able to provide the Services, and we may still retain records that the law requires us to keep.

We never sell or rent your personal data. We do not show third-party advertising, do not build marketing profiles of you for anyone else, do not use advertising identifiers, and do not buy data about you from data brokers. We share your data only as needed to provide the Services and comply with law:

• ONDC network participants: Mutual Fund orders are placed through the Open Network for Digital Commerce. The seller-side network participant that executes your order and collects your payment receives the data needed to process your transactions.
• Asset Management Companies and their Registrar & Transfer Agents for the schemes you invest in.
• For NPS: the Point of Presence, the Central Recordkeeping Agency, and the NPS Trust / PFRDA as required.
• KYC and verification agencies: KRAs, the Central KYC registry, and identity-verification providers used to validate your PAN, Aadhaar or other details.
• Service providers that operate under contract with us — payment systems, SMS, email and WhatsApp providers, and cloud-hosting providers — who are bound to protect your data and use it only for the service they provide to us.
• Regulators, tax authorities and law enforcement where the law requires or permits it.
• If we merge with, or transfer our business to, another entity, your data may be transferred with it, subject to the same protections under this Policy.

Your data is hosted primarily in data centres located in India, encrypted in transit and at rest, and accessible to our personnel only on a need-to-know basis. Your password is stored only in hashed (irreversible) form — we never see or store it in plain text. No method of transmission or storage is completely secure; if a breach affecting your personal data occurs, we will notify you and the Data Protection Board of India as required by law.

Some of the service providers we use — for example, our email-delivery provider — may process personal data outside India. The DPDP Act permits personal data to be transferred outside India except to countries the Indian government specifically restricts by notification; we transfer data only to providers in jurisdictions not subject to such a restriction, under contracts that require them to protect it.

We retain your personal data for as long as your account is active, and afterwards for as long as applicable law requires us to keep records — including SEBI, PFRDA and anti-money-laundering record-keeping obligations. After that, it is deleted or anonymised.

Under the DPDP Act you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• have inaccurate or incomplete data corrected, completed or updated;
• have your data erased once it is no longer needed, subject to the retention the law requires;
• an accessible means of grievance redressal (see below); and
• nominate a person who may exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to support@uniclusion.com.

The Services are intended for persons aged 18 years or older. Nominee details you provide may include information about a minor; by providing them you confirm that you have the authority — as a parent or guardian, or otherwise — to do so.

When we update this Policy we will post the revised version here with a new “Last updated” date, and notify you of material changes. The version of the Policy you consented to is recorded against your account.

If you have a question or complaint about this Policy or how your data is handled, contact: Grievance Officer, Uniclusion Pvt. Ltd., support@uniclusion.com. If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India. For grievances relating to Mutual Fund distribution, you may also escalate to the relevant AMC / RTA and, if unresolved, to SEBI’s SCORES portal; for NPS, to the CRA’s grievance system under PFRDA regulations.