Privacy policy.

Who we are.

"DealDepot", "we", "us", and "our" refer to DealDepot Brokerage Pvt Ltd (CIN U67190MH2007PTC173067), a SEBI-registered stockbroker on BSE and NSE (INZ000257137) and NSDL depository participant (IN-DP-663-2022) with its registered office at 1223, P J Towers, Dalal Street, Fort, Mumbai 400001. This privacy policy applies to all personal information collected through our website, trading platforms, mobile applications, and offline channels.

Effective January 2023, DealDepot Brokerage Pvt Ltd took over the broking business previously carried on by DealDepot Equities (NSE membership INZ000272027); references in older documents to that entity should be read as references to DealDepot Brokerage Pvt Ltd.

Information we collect.

To open and maintain a trading or demat account with us, we are required by SEBI / Exchange / Depository regulations to collect the following categories of information:

• Identity proof: PAN, Aadhaar, photograph, signature.
• Address proof: Aadhaar, passport, driving licence, voter ID, or utility bill.
• Financial information: bank account details (for fund transfers and settlement), income range, net worth (for derivatives), and tax residency status.
• Contact information: mobile number, email address, and postal address.
• Trading and account information: trade history, holdings, ledger balances, and contract notes.
• Technical information: IP address, device identifiers, browser type, and access logs when you use our website or platforms.

For minor demat accounts, the natural guardian's identity, address, and contact information are also collected; the account is operated under the guardian's consent and PAN until the minor attains majority.

Aadhaar and Digilocker.

If you choose the online account-opening route, your Aadhaar is used to complete KYC and digitally sign the account-opening form. Sharing your Aadhaar is voluntary — you may instead complete account opening offline by physically signing the forms and providing alternative proof of identity and address (PAN, passport, driving licence, voter ID, or utility bill).

What we receive, and what we don't store.

You issue your Digital Aadhaar to DigiLocker (a service of the National e-Governance Division, Ministry of Electronics & Information Technology, Government of India), of which we are a registered Requester. With your consent, DigiLocker shares with us only the following fields:

• The last four digits of your Aadhaar / VID (Virtual ID generated on the UIDAI portal).
• Full name, date of birth, and gender.
• Address.
• Photograph.

Your full 12-digit Aadhaar number is not received, displayed, or stored on DealDepot systems at any stage. The DigiLocker-issued eAadhaar is the same as the eAadhaar issued directly by UIDAI.

e-Signing of the account-opening form.

To digitally sign the account-opening form, you share your Aadhaar with Digiotech Solutions Pvt Ltd, a licensed e-Sign Application Service Provider (ASP) regulated by the Controller of Certifying Authorities (CCA), India and UIDAI. Digiotech does not share your Aadhaar number back with DealDepot. Once signed, a copy of the digitally executed form is emailed to you and to us for records and audit.

How we use your information.

• To open, operate, and service your trading and demat account.
• To execute trades, settle transactions, and issue contract notes and statements.
• To carry out KYC, in-person verification (IPV), risk profiling, and ongoing compliance checks under SEBI, KRA, CKYCR, and AML/CFT requirements.
• To respond to your service requests, complaints, and grievance redressal.
• To meet obligations to SEBI, Stock Exchanges (NSE / BSE), depositories (NSDL), tax authorities, and other regulators.
• To detect and prevent fraud, market abuse, and unauthorised access.
• To send transaction-related communications by SMS, email, and WhatsApp (per SEBI mandate).

How we share your information.

We share your information only as required to provide our services and meet regulatory obligations. Specifically:

• With Stock Exchanges, depositories, and clearing corporations (NSE, BSE, NSDL, NSCCL, ICCL) for trade execution, settlement, and statutory reporting.
• With SEBI and other regulators when called for by lawful inquiry or routine reporting.
• With KRA / CKYCR for centralised KYC.
• With technology vendors who provide our trading terminal (Saral MoneyMaker) and back-office (Techexcel) — strictly under contractual confidentiality.
• With banks and payment service providers for fund transfers and settlement.
• With auditors, legal counsel, and tax authorities to the extent required by law.

We do not sell your personal information to any third party and do not share it for marketing purposes outside of our group entities.

Data retention.

SEBI and Exchange regulations require us to retain client records, contract notes, and transaction logs for prescribed periods (typically 5 to 8 years from the date of the transaction or account closure, whichever is later, with longer periods for certain categories). After the regulatory retention period, records are securely destroyed.

Your rights.

Subject to the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and other applicable laws, you have the right to:

• Access information we hold about you, and receive a readable copy on request (per Rule 5 of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011).
• Request correction of inaccurate or incomplete information.
• Withdraw consent for non-essential processing.
• Opt out of promotional SMS, email, and WhatsApp communications at any time, while continuing to receive transactional and regulatory notices that SEBI requires us to send.
• Close your zero-balance account online with minimal documentation, per the SEBI Investor Charter.
• Lodge a grievance regarding the processing of your data with our Grievance Officer (named in Section 11).

To exercise any of the above, write to us at compliance@dealdepot.in.

If you are resident in the EEA or the UK.

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies to your relationship with us, the rights above apply alongside additional rights under those frameworks — including the right to erasure (Article 17) and the right to data portability (Article 20). Requests under those frameworks should be addressed to our Grievance Officer at compliance@dealdepot.in.

Security.

We maintain reasonable technical and organisational measures, including encryption in transit (TLS), restricted access, and audit trails, to safeguard the information we hold. However, no system is fully secure, and we encourage you to safeguard your trading credentials and never share your password.

Cookies and analytics.

Our website uses two categories of cookies:

• Essential cookies — required for site operation, login sessions, and basic security.
• Analytics cookies — used to measure aggregate traffic and improve usability. Where third-party analytics tools are used, IP anonymisation is enabled where supported by the tool.

We do not use advertising cookies, behavioural-tracking cookies, or cross-site trackers. You may disable cookies in your browser settings; some site features may not function without them. By continuing to use the site, you consent to the use of cookies as described above.

Changes to this policy.

We may update this policy from time to time. The "Last reviewed" date at the top of this page indicates when this version was last revised. Material changes will be communicated to clients via email or in-app notice.

Contact.

You don't have to file a grievance to ask us something about your data. For routine questions about this policy or the personal information we hold about you — for example, what we collect, how to update your details, how to opt out of marketing, or how to obtain a readable copy of your information — write to compliance@dealdepot.in. We aim to respond to such queries within 7 working days.

For a formal grievance about how your personal information has been handled, our designated Grievance Officer under the DPDP Act, 2023 is:

Grievances are acknowledged within 3 working days and resolved within 30 days, in line with SEBI and DPDP timelines.