Privacy Policy

This privacy policy sets out how Shah Financial Services uses and protects any information that you share when you use this website. Shah Financial Services is committed to ensuring that your privacy is protected at all times. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement.

Shah Financial Services understands that our relationship is strongly built on trust and faith. In Course of using information on this website or availing the services, Shah Financial Services may become privy to the personal information of its customer including information that is of confidential nature. Shah Financial Services is strictly committed to protecting the privacy of its Customer and has taken reasonable measures to protect the confidentiality of the customer information and its transmission through World Wide Web. However it shall not be liable in any manner for disclosure of the confidential information in accordance with this Privacy Commitment or in terms of the agreement if any with the Customer or by reasons beyond its control. We may however be required to disclose your personal information to Government, Judicial bodies, and our Regulators or to any person to whom the Firm is under an obligation to make disclosure under the requirements of any law binding on the Firm or any of its branches, if required. Hyperlink Policy for user Any hyperlink to other Internet sites is at customers own risk. The contents of which and the accuracy of opinions expressed are not verified, monitored or endorsed by Shah Financial Services, in any way or manner. Shah Financial Services is not responsible for the setup of any hyperlink from a third party website to Shah Financial Services

What we collect

We may collect the following information:

Name and contact details

We may collect personal information directly from you, such as your name, email address, contact details, or other identifiers, when you register an account, make a purchase, or interact with certain features of the application.

Your personal information is used to provide you with access to the application's features and functionalities, personalize your experience, and communicate with you about your account or transactions.

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

You have the right to control and manage your personal information within the application. You can update your account details, manage your communication preferences, or exercise your rights under applicable data protection laws.

You can also choose to delete your account or request the deletion of certain personal information by contacting us through the provided channels or there is an option in app settings page.

Collection/Use of image data

When you grant permission, our application may access your device's camera or photo gallery to enable features that involve capturing, uploading.

The images you upload or capture within our application may be used for document verification in Video KYC by the application.

We do not share your image data with third parties unless required by law or necessary to provide the services you have requested.

Use of location data

We access your location to verifying your identity and granting access to the application's features and functionalities.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over such third-party websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

If you believe that any of your information with us is incorrect or incomplete, please email us as soon as possible at info@shahfs.com We will promptly correct any information found to be incorrect.

Security certificates

We fully recognize and understand the security implications of being a service provider with whom people trust their money. There are many safeguards we adopt in this regard some of these are technical, and some are structural.

When it comes to data security, our goal is to ensure that: Your data is stored safely and securely passwords are one-way encrypted before being stored in the database for high security.

All communication with you, or with mutual fund companies and other service providers are encrypted using the highest standards.

Your data is not shared with anyone, unless you have explicitly requested us to do so to fulfil a transaction request.

To ensure that we achieve these goals, we have a variety of certifications/trust verifications in place for our firm, both from technical and legal/operational perspectives. All our communications are encrypted by 256-bit encryption, and our data is hosted with top-tier hosting service providers. Also, our data is continuously backed up to ensure continuity of operations.

1. Privacy Commitment

Shah Financial Services (ARN-173086), AMFI Registered Mutual Fund Distributor, is committed to maintaining the privacy, confidentiality, and security of personal information collected from investors, employees, and website visitors. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), Information Technology Act 2000, SEBI Master Circulars for Mutual Funds, and AMFI Data Sharing Principles prescribed under the AMFI Master Circular for MFDs dated 14-January-2026.

2. Scope & Applicability

This policy applies to all individuals interacting with Shah Financial Services through our website (https://shahfs.com), mobile applications (Android/iOS), during client onboarding, Know Your Customer (KYC) verification, risk profiling, and mutual fund transaction processing. It extends to all partners, employees, service providers, and vendors authorized to access or process client information on our behalf. By engaging with Shah Financial Services or accessing our website, you consent to the collection and use of your personal information as described in this policy.

3. Information We Collect

• Personal Details: Name, address, date of birth, PAN, Aadhaar (for KYC), contact details (mobile number, email ID), bank account information, nomination details, and investment preferences.
• Financial Details: Annual income range, net worth, existing investments, risk profile assessment responses, investment horizon, goals, and transaction history.
• KYC Documents: PAN card copy, Aadhaar copy, address proof, photograph, bank statement or cancelled cheque, FATCA/CRS self-declaration, and UBO details (for non-individual investors).
• Technical Data: IP address, browser type, device information, operating system, and cookies when you visit our website.

We do NOT collect unnecessary personal data such as religion, caste, political affiliation, or any data not required for mutual fund distribution services and regulatory compliance.

4. Purpose of Data Collection

Your data is used strictly for:

• (a) Processing mutual fund distribution transactions;
• (b) Completing KYC and meeting SEBI/AMFI/PMLA regulatory obligations;
• (c) Conducting risk profiling and investment suitability assessment;
• (d) Sending transaction confirmations, account statements, NAV updates, and service-related communications;
• (e) Responding to your queries, service requests, and complaints;
• (f) Meeting regulatory reporting requirements to SEBI, AMFI, and other authorities;
• (g) Improving our website functionality and user experience.

We do NOT use your data for any purpose other than what is stated above.

5. Data Sharing Rules

We share your data only in these specific situations, and never beyond what is necessary:

• With AMCs and RTAs: For processing your mutual fund transactions. This is a regulatory requirement and covers CAMS, KFintech, and respective Asset Management Companies.
• With SEBI, AMFI: Upon official request or regulatory order. This is mandatory compliance.
• With AMC/AMFI-appointed auditors: During due diligence or compliance audits. This is a regulatory obligation.
• With KYC Registration Agencies (KRAs): CAMS KRA, CVL KRA, NDML KRA, and CKYC for KYC verification purposes.
• With NSE MF Invest Platform (For MF & SIF): As our transaction platform provider for order processing and settlement.
• With MF Utility (MFU): As our alternate transaction platform.
• With Redvision / Advisor Khoj: As our backoffice software providers for record maintenance and reporting.
• With PMS providers: Where you have invested through us in PMS products distributed under APRN04142, relevant data is shared with the concerned SEBI-registered Portfolio Manager.
• With any other third party: Only with your explicit written consent, obtained before any sharing occurs.

We do NOT sell, rent, lease, or share your personal or financial data with any external marketing agency, advertising platform, or unrelated third party under any circumstances.

6. Data Storage & Security Measures

Digital records are stored on encrypted storage with mandatory access controls. Physical documents (KYC forms, signed applications) are kept in secure locked cabinets at our registered office in Khambhat, Gujarat, with restricted key access. All partners and employees sign a confidentiality undertaking. We implement industry-standard security measures including licensed antivirus software, firewall protection on office networks, strong password policies (minimum 8 characters, changed every 90 days), and regular security audits. No client data is stored on personal devices of employees.

7. Data Retention & Disposal

Client records are retained for the period prescribed under applicable SEBI (Mutual Funds) Regulations, AMFI guidelines, PMLA Rules, and Income Tax Act. The standard retention period is a minimum of 5 years from the date of the last transaction or closure of the client account, whichever is later. After the mandatory regulatory retention period expires, physical records are securely shredded with a disposal log maintained, and digital records are permanently deleted from all storage locations including backups. Approval from the designated partner is required before any record disposal.

8. Your Rights Under DPDPA 2023

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data held by us;
• Request correction of inaccurate or incomplete data;
• Request erasure/deletion of your data (subject to regulatory retention requirements);
• Withdraw your consent for data processing at any time (this may affect our ability to continue providing services);
• Lodge a complaint with the Data Protection Board of India if you believe your data rights have been violated.

To exercise any of these rights, please write to info@shahfs.com.

9. Cookies

Our website uses cookies to enhance your browsing experience, remember your preferences, and analyze website traffic. You can control cookie settings through your browser preferences. Disabling cookies may affect certain website functionalities such as calculators and login features.

10. Third-Party Links

Our website contains links to external websites (AMC websites, SEBI, AMFI, SCORES, etc.) provided for your convenience. Shah Financial Services does not control, endorse, or assume responsibility for the content, privacy policies, or security practices of these external sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The latest version will always be available on this page.

12. Contact for Privacy Concerns

Grievance Officer: Mr. Ronak Nalinkumar Shah
Email: info@shahfs.com
Phone: 9825423773
Office: A-111/112, Siddh Sagar Complex, First Floor, Near Railway Station, Khambhat-388620 Gujarat
Business Hours: Monday to Saturday, 10:00 AM to 6:00 PM (IST), except public holidays.