Privacy Policy

Section 1

Introduction

NovaRock Group ("we," "our," "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our companies — including NovaRock Advisory, NovaRock Technology, and NovaRock Financial.

By accessing or using our services, you agree to the terms outlined in this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Section 2

Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Register for a consultation or advisory relationship
• Submit contact forms or inquiries
• Apply for financial advisory or corporate advisory services
• Request technology tools or platform access
• Subscribe to newsletters or marketing communications
• Apply for career opportunities through our talent pool

This information may include:

• Name, email address, phone number, and mailing address
• Date of birth, PAN number, Aadhaar details (for regulated financial services only)
• Employment information and income details
• Financial information including bank account details, investment portfolio, and financial statements
• Tax identification and residency information (including for NRI/US tax services)
• Educational qualifications and professional experience (for career applications)

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behaviour:

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Referring website and search terms used
• Device identifiers and mobile network information

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience and analyse website usage. You can control cookie preferences through our consent banner or your browser settings. Disabling certain cookies may limit functionality. See our GDPR Rights page for full cookie details.

Section 3

How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide financial advisory, corporate & capital advisory, technology tools, and other requested services
• Account Management: To create and manage your account, process transactions, and maintain service records
• Communication: To send service updates, newsletters, and marketing communications — and to respond to your inquiries
• Personalisation: To customise content, recommendations, and user experience based on your preferences
• Compliance: To comply with legal obligations including KYC, AML, SEBI regulations, IRS requirements, and tax reporting
• Analytics: To analyse usage patterns, improve services, and develop new tools
• Security: To detect fraud, prevent unauthorised access, and protect against security threats
• Marketing: To promote our services and send targeted offers — you may opt out at any time

Section 4

How We Share Your Information

We may share your information with the following parties:

4.1 Service Providers

Third-party vendors who provide services on our behalf — including payment processing, data analysis, email delivery, cloud hosting, customer service, and marketing assistance. These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Financial Institutions & Capital Providers

Asset management companies, banks, and capital providers when you apply for financial or capital advisory services through our platform. This sharing is necessary to process your applications and deliver requested services.

4.3 Regulatory Authorities

SEBI, RBI, IRS, tax authorities, and other regulatory bodies as required by law, or to comply with legal obligations, court orders, or government requests.

4.4 Business Transfers

In connection with mergers, acquisitions, asset sales, or restructuring, your information may be transferred to successor entities or acquiring parties. You will be notified in advance of any such transfer.

4.5 NovaRock Group Affiliates

Within NovaRock Group companies (Advisory, Technology, Financial) to provide integrated services and improve your experience — always in line with this Privacy Policy.

4.6 Consent-Based Sharing

Any other parties only with your explicit prior consent or at your specific direction.

Section 5

Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest (AES-256)
• Secure servers with restricted access controls and audit logs
• Regular security audits and vulnerability assessments
• Employee training on data protection and confidentiality
• Multi-factor authentication for sensitive operations
• Regular backups and tested disaster recovery procedures

While we strive to protect your information with best-in-class measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continuously enhance our protective practices and respond swiftly to any incidents.

Section 6

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer period is required or permitted by law. Retention periods are determined by:

• Regulatory requirements — SEBI mandates 5 years for financial advisory records; IRS requirements for US tax preparation
• Contractual obligations with clients or financial partners
• Legitimate business interests such as fraud prevention and dispute resolution
• Your ongoing consent or active service relationship

After the retention period expires, we securely delete or irreversibly anonymise your information. You may request early deletion subject to regulatory constraints — see Section 7.

Section 7

Your Rights & Choices

You have the following rights regarding your personal information. To exercise any of these rights, contact us at compliance@novarock.co.in — we respond within 30 days.

Section 8

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at compliance@novarock.co.in so we can promptly delete such information.

Section 9

International Data Transfers

Your information may be transferred to and processed in countries outside India, particularly where our technology infrastructure or service providers operate (including the United States for IRS/US tax services). We ensure appropriate safeguards are in place — including standard contractual clauses and data processing agreements — to protect your information in accordance with this Privacy Policy and applicable Indian law.

Section 10

Third-Party Links

Our website may contain links to third-party websites, applications, or services not operated by NovaRock Group. We are not responsible for the privacy practices of these third parties. We strongly encourage you to review their privacy policies before providing any personal information. Our Privacy Policy applies only to information collected by us directly.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notifications for significant changes
• Displaying prominent notices on our website or consent banner

Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

Section 12

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

Section 13

Grievance Redressal

In accordance with the Information Technology Act, 2000 and rules made thereunder, we have appointed a designated Grievance Officer to address your concerns:

If you are not satisfied with our response, you may escalate your complaint to the relevant regulatory authority — SEBI for investment-related matters, RBI for banking and capital matters, or the Data Protection Board of India for data protection matters.

Section 14

Compliance with Indian Laws

This Privacy Policy is designed to comply with all applicable Indian and international regulations:

We continuously monitor regulatory developments and update our practices accordingly. NovaRock Advisory is AMFI Registered (ARN-344268) and IRS Registered (PTIN P03472019). All financial advisory activities comply with SEBI Investment Adviser regulations.